Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/KR7i1VGMfp6wOUHzM68qa6NoxyE.roa
File: KR7i1VGMfp6wOUHzM68qa6NoxyE.roa (raw, json)
Hash identifier: ndyzcu48CDHqz3NgyXeDet5mZyI1DmpInGav6pQo5SI=
Subject key identifier: 29:1E:E2:D5:51:8C:7E:9E:B0:39:41:F3:33:AF:2A:6B:A3:68:C7:21
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 019427B545E26D021CB3D0D6FA1596AB877F
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/KR7i1VGMfp6wOUHzM68qa6NoxyE.roa
Signing time: Thu 02 Jan 2025 15:49:38 +0000
ROA not before: Thu 02 Jan 2025 15:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62000
IP address blocks: 185.140.44.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:45:e2:6d:02:1c:b3:d0:d6:fa:15:96:ab:87:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: Jan 2 15:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=291ee2d5518c7e9eb03941f333af2a6ba368c721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f8:00:16:a5:9c:2c:32:04:98:d1:00:0a:84:
97:31:64:69:60:59:7e:c7:3e:f1:cb:21:fa:77:e1:
0c:51:ca:75:bd:e8:d5:e5:31:56:8c:4a:2a:d1:d2:
10:d0:b2:bb:9a:72:b4:ca:88:82:38:92:94:86:33:
bf:3f:b4:8c:9f:e1:14:f5:92:53:dc:2e:40:e2:7c:
fd:0c:46:2d:9f:d2:52:df:f3:58:78:1e:f1:e3:da:
0d:f0:a0:53:e1:db:a8:f8:c9:2a:9f:f0:e0:a3:54:
34:ea:ab:5d:50:9a:6f:a8:a5:e8:a6:88:94:c5:34:
1b:ef:b3:bc:2b:a9:53:09:dc:48:ce:1a:e8:9a:a4:
a2:f5:0f:3d:e9:29:2e:a2:a4:00:6a:59:17:d6:e4:
de:b8:75:48:47:3d:ef:93:2b:3a:37:6c:2c:d1:ec:
e3:f2:9b:d2:38:78:cb:de:05:64:17:17:fe:af:fa:
e7:c3:bd:07:24:c5:00:01:66:23:cf:36:f1:31:e8:
97:0e:1a:8e:81:ee:99:0a:d8:91:7e:8b:9b:28:af:
58:ff:b1:28:05:14:46:cd:b0:62:07:8d:e9:e4:3c:
0b:7d:57:7f:51:c4:4c:2c:93:32:88:b5:e6:5e:63:
f8:ac:bf:4a:10:8c:12:33:21:f8:b1:ba:2f:3b:94:
7e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1E:E2:D5:51:8C:7E:9E:B0:39:41:F3:33:AF:2A:6B:A3:68:C7:21
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/KR7i1VGMfp6wOUHzM68qa6NoxyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.44.0/22
Signature Algorithm: sha256WithRSAEncryption
86:97:3a:30:3a:2a:7e:2a:2a:ae:8b:41:57:23:4a:8e:18:01:
25:1e:df:27:42:bd:73:8b:ca:71:61:17:03:4b:cf:90:de:f8:
74:5d:ce:92:29:b0:d5:9b:6c:e7:f4:1c:ee:9d:ff:5a:9b:ba:
a6:83:04:c1:b7:7f:a3:06:25:c7:f6:ba:75:c8:51:d6:3c:2c:
76:59:8d:64:2a:4d:ae:d8:e3:83:9f:89:9b:05:a8:ea:32:93:
09:17:53:99:f7:e9:45:8c:2a:fd:6c:04:7f:98:3b:fa:b9:87:
5b:ce:31:5f:97:50:34:a3:13:d3:49:60:6c:00:26:88:ed:7b:
ff:b6:c4:f5:50:21:d0:f9:f6:3a:e1:cb:26:5a:31:fb:54:33:
a2:a6:0e:21:88:86:e0:17:16:a5:26:a3:29:50:ca:70:e1:48:
f1:40:c6:76:71:18:80:92:76:78:1e:d4:7f:f6:7c:bf:da:8e:
b3:09:e1:28:49:80:22:8e:c0:30:6b:96:6b:de:01:40:53:48:
cb:a9:11:4c:9b:87:b4:3f:50:4d:72:d0:27:bd:b8:07:00:1f:
38:5b:98:47:be:12:da:8e:9c:41:5e:6b:28:64:f1:e2:7b:dd:
e3:8a:be:26:9d:e0:44:ee:d4:a5:cd:b7:e8:06:76:d2:cc:2a:
b4:ea:7b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:28 2025 by rpki-client