Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/KrEyLtzd_FGxXKe36EuPBXxaKHA.roa
File: KrEyLtzd_FGxXKe36EuPBXxaKHA.roa (raw, json)
Hash identifier: ADivn+VbvpgE3fUtfn8Xzz0qtLuBXCOdiCI9IztCcUQ=
Subject key identifier: 2A:B1:32:2E:DC:DD:FC:51:B1:5C:A7:B7:E8:4B:8F:05:7C:5A:28:70
Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial: 019422FC204C345B2FB76304F9E542CA0B93
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/KrEyLtzd_FGxXKe36EuPBXxaKHA.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14127
IP address blocks: 89.106.176.0/22 maxlen: 24
89.106.180.0/23 maxlen: 23
89.106.182.0/23 maxlen: 23
185.45.0.0/23 maxlen: 24
185.45.2.0/23 maxlen: 24
193.246.192.0/24 maxlen: 24
193.246.193.0/24 maxlen: 24
193.246.194.0/24 maxlen: 24
193.246.195.0/24 maxlen: 24
193.246.196.0/24 maxlen: 24
193.246.197.0/24 maxlen: 24
193.246.198.0/24 maxlen: 24
193.246.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:20:4c:34:5b:2f:b7:63:04:f9:e5:42:ca:0b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ab1322edcddfc51b15ca7b7e84b8f057c5a2870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:96:78:fd:7e:22:f0:37:fc:70:56:c5:58:
28:ce:48:6d:39:85:37:e1:1e:36:b9:56:34:03:43:
15:ab:3b:45:63:00:47:ea:cd:ff:e5:2a:9d:99:09:
28:74:eb:5b:45:53:a9:eb:4a:eb:95:c0:ad:08:44:
f2:7e:fc:0e:ec:a6:de:35:65:a3:2f:8f:47:6b:4f:
c8:e3:21:f2:18:b8:0b:ff:ba:b3:43:cb:ea:8c:fb:
a4:cc:5d:62:be:67:66:5d:d2:06:ec:49:54:9f:c4:
58:1b:8b:2b:50:40:72:51:23:53:69:18:e6:52:8b:
ab:b6:b0:b9:09:b4:7a:a2:20:5d:f3:ef:8c:e4:35:
3c:23:7a:fb:63:b3:d1:36:1c:0f:eb:d3:e9:e7:7a:
3d:9a:5a:f2:65:e0:a7:31:03:36:9b:5e:87:d6:4d:
92:12:2b:6f:08:70:b6:30:13:37:cc:5a:fc:73:6b:
1f:2a:51:23:5b:1e:77:22:00:bf:4a:9d:58:38:f3:
f4:0b:68:a8:d7:ba:e6:96:73:b6:09:67:33:2f:53:
c2:77:fc:51:30:58:53:56:bc:74:03:b2:4f:69:d1:
9b:00:d5:27:bf:66:bc:c9:7d:94:93:4c:08:a0:5d:
c7:3b:e5:63:38:3b:24:54:d6:c1:1c:f2:05:17:ff:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B1:32:2E:DC:DD:FC:51:B1:5C:A7:B7:E8:4B:8F:05:7C:5A:28:70
X509v3 Authority Key Identifier:
keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/KrEyLtzd_FGxXKe36EuPBXxaKHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.176.0/21
185.45.0.0/22
193.246.192.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:7e:a9:fc:ae:4f:71:09:1b:d7:23:88:17:1d:e7:d1:a8:c2:
8a:e7:c2:5b:f8:f1:39:e5:40:5e:77:11:25:28:50:79:73:53:
c8:22:11:ef:d1:cc:33:6e:88:0d:a6:c3:07:a3:29:94:69:a6:
a2:e1:53:82:04:69:47:6d:66:8d:76:5e:75:7e:01:c7:ee:04:
6a:30:5b:38:b1:20:f2:a2:5b:a7:3e:19:e0:5e:f4:b8:e4:8d:
81:e8:35:7b:0c:71:e6:d4:e5:11:c1:18:db:85:2a:2a:da:6c:
40:76:7c:7a:81:7a:a7:a6:66:d1:31:c4:c7:8d:92:93:99:e1:
de:3e:1a:c9:3b:16:a8:f1:e5:2b:7d:cc:d8:20:b8:4e:c3:82:
37:f0:a4:c0:f8:ea:d0:5e:50:d9:5e:8b:6e:05:a4:2a:a2:01:
b9:c4:2b:1b:c4:87:01:b3:dd:15:ed:a9:9c:2f:69:18:18:ab:
1b:68:a5:91:92:a3:24:f8:6e:07:07:e5:ab:18:11:3b:a8:be:
3c:63:fb:44:e4:06:cf:88:d8:6f:13:e2:a1:01:f3:d6:a7:b7:
54:79:75:36:01:23:fc:8a:0d:7f:14:66:da:99:aa:8d:aa:16:
bd:0e:f1:20:be:6b:bf:20:74:95:ed:c7:6c:4c:bc:1f:59:6c:
d0:52:cc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:08:49 2025 by rpki-client