Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/KKD4j_AQQdmh2sbNUwq_YPEVkc4.roa
File: KKD4j_AQQdmh2sbNUwq_YPEVkc4.roa (raw, json)
Hash identifier: zsC+beg+JmIYjetNxZpwKAwIxy/RBbldEFFUXuRNVYM=
Subject key identifier: 28:A0:F8:8F:F0:10:41:D9:A1:DA:C6:CD:53:0A:BF:60:F1:15:91:CE
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01939709ECDF2CD7D289FD6B854401015653
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/KKD4j_AQQdmh2sbNUwq_YPEVkc4.roa
Signing time: Thu 05 Dec 2024 13:37:10 +0000
ROA not before: Thu 05 Dec 2024 13:37:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 2.59.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:97:09:ec:df:2c:d7:d2:89:fd:6b:85:44:01:01:56:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Dec 5 13:37:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28a0f88ff01041d9a1dac6cd530abf60f11591ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:05:51:63:bc:6f:43:4b:f7:e4:3c:33:35:
b0:51:18:7b:de:9b:cc:68:50:f6:b3:ca:29:91:6e:
a0:93:80:72:91:26:61:43:36:af:1b:04:5b:89:ba:
44:8d:2c:50:82:29:49:18:e9:fc:ff:0d:94:a9:11:
08:25:d5:5d:00:22:7f:41:b4:21:8f:08:2d:3a:c2:
f9:90:47:db:e0:25:cc:50:cb:40:bb:c9:92:f8:ef:
22:59:e4:0d:1d:cd:88:06:bd:db:c3:a0:71:53:af:
dd:39:2e:80:d2:1b:16:b3:e3:e4:b8:33:66:b9:be:
f5:cf:d0:8c:52:43:a6:92:97:a9:6d:4c:2d:fd:fd:
b2:65:49:db:ed:b0:3b:40:63:c4:dc:59:48:83:cc:
44:e9:8e:a4:fe:39:a0:5e:83:0b:9a:b5:93:4c:0f:
33:d6:f0:c1:cb:df:b2:af:e5:21:21:62:85:89:66:
da:97:98:d5:f7:7e:3b:49:96:da:ad:1f:46:bd:16:
81:c6:b1:dd:88:18:01:9c:25:3a:a0:ea:8e:12:17:
d3:9b:5c:47:63:0d:fb:4f:2a:28:94:c4:53:fb:cb:
6e:31:18:19:bc:b5:a8:76:58:7b:1b:82:4a:97:34:
4d:ec:2d:d8:e4:4a:26:a3:6e:de:33:14:8e:e0:b3:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A0:F8:8F:F0:10:41:D9:A1:DA:C6:CD:53:0A:BF:60:F1:15:91:CE
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/KKD4j_AQQdmh2sbNUwq_YPEVkc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.180.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:68:2b:31:aa:d2:66:d9:88:a9:f8:42:30:cd:8a:d5:5e:8a:
05:fe:20:48:0e:b2:55:0c:a9:ff:36:4d:99:0e:ba:f0:90:b2:
fe:18:7a:82:75:9f:ab:a7:f0:fb:34:23:f5:63:11:08:83:35:
10:3e:b1:05:39:be:26:38:a2:d1:4b:3f:c5:71:98:c4:bb:e7:
73:75:10:4c:7b:0a:2b:ca:50:a2:e2:44:91:a3:ab:bb:e5:ad:
16:d4:82:a6:f0:5d:90:1c:e6:2a:97:77:74:bb:4b:cd:17:73:
53:be:69:68:49:e2:57:ef:5c:44:5b:02:d0:fd:1d:0a:94:b4:
0f:e3:82:3a:f1:81:14:98:6d:97:51:95:53:4e:64:9f:c5:20:
56:d9:e2:c9:23:bd:67:13:05:f0:52:ea:1f:29:ee:94:0e:ef:
f6:d4:9d:ea:3e:07:57:3c:a1:ea:b7:d2:fe:39:f9:47:c7:1a:
f3:ac:eb:9f:74:80:3e:1d:ba:bd:14:31:de:94:76:e8:cb:c3:
ad:be:aa:42:9a:c7:40:ff:cc:5b:08:bb:8c:82:c3:08:52:83:
b4:71:b2:00:34:12:e2:19:b0:5c:88:4b:59:d8:e9:ec:39:36:
dc:ca:f1:54:9e:6b:a4:29:d5:b0:65:5e:8b:11:3c:1e:91:89:
61:55:ab:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:26:03 2025 by rpki-client