Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KlGLxUPCYaeIm24Nn9IuJi7qTOY.roa
File: KlGLxUPCYaeIm24Nn9IuJi7qTOY.roa (raw, json)
Hash identifier: jbOn7h614eiMkyS5xIxcn3Ny0TRiyj51SK3ettdYNRE=
Subject key identifier: 2A:51:8B:C5:43:C2:61:A7:88:9B:6E:0D:9F:D2:2E:26:2E:EA:4C:E6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194986163A325F3CBFF8800687B8FBE0679
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KlGLxUPCYaeIm24Nn9IuJi7qTOY.roa
Signing time: Fri 24 Jan 2025 12:55:06 +0000
ROA not before: Fri 24 Jan 2025 12:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 45.12.255.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
87.120.33.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
94.156.113.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:61:63:a3:25:f3:cb:ff:88:00:68:7b:8f:be:06:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 24 12:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a518bc543c261a7889b6e0d9fd22e262eea4ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:a1:28:52:4e:c3:71:12:43:42:ed:74:8f:
ec:6e:74:c8:18:3d:a9:05:8c:5e:e4:f2:cf:a9:68:
4a:2f:5c:6b:1f:bf:8e:ea:a3:87:9c:f9:ae:42:95:
dd:5c:3c:18:fe:a6:0d:62:51:59:01:b9:bf:ff:74:
28:31:e8:8e:ce:f2:a4:ad:b2:bf:3b:76:e3:1b:c5:
f3:55:57:d6:d3:90:ec:4c:70:82:3b:e9:4a:2c:33:
b1:54:19:42:45:01:63:8b:02:1a:87:18:f2:12:c8:
9f:b2:05:e2:82:66:05:e4:dc:88:d6:c0:7b:bc:0d:
51:68:70:99:98:be:b5:2b:59:e5:64:ff:1b:2a:77:
e9:23:5e:a2:fb:1a:76:a7:fd:36:a1:6d:67:ae:bb:
67:ef:06:d5:5c:5b:34:79:45:1c:2f:1e:32:ed:88:
75:c7:cc:35:bf:ca:ad:fc:4e:1a:69:d5:ae:aa:a4:
11:a7:d4:c0:4d:30:4b:d0:f7:0e:0d:88:e8:9e:a1:
cf:d6:81:5a:0e:94:56:54:b3:1a:15:04:b0:83:81:
c8:f0:34:9f:07:1b:e8:84:98:ef:9f:d7:33:e3:ec:
08:c3:b7:92:6f:ec:84:95:0e:ca:0d:72:23:6d:f6:
31:e8:db:f4:51:90:b3:ae:ce:cd:e8:8f:e5:c2:9d:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:51:8B:C5:43:C2:61:A7:88:9B:6E:0D:9F:D2:2E:26:2E:EA:4C:E6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KlGLxUPCYaeIm24Nn9IuJi7qTOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.255.0/24
45.128.96.0/24
87.120.33.0/24
87.121.38.0/24
87.121.58.0/24
94.103.127.0/24
94.156.2.0/24
94.156.79.0/24
94.156.113.0/24
141.98.4.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:14:30:25:01:83:4e:15:7e:12:3d:51:cc:bf:db:94:8d:48:
e9:94:5c:25:9d:9e:74:99:bd:7e:6b:d6:64:49:0d:a2:74:13:
fa:36:95:30:cf:b3:4d:d4:ee:01:a3:ca:e8:2e:9c:a3:75:2d:
af:3d:b4:45:ad:92:cd:a5:ed:9d:37:c9:91:79:ab:1a:99:35:
c2:b1:7a:ed:88:9d:23:4c:cb:1f:24:bc:05:13:b0:e5:37:18:
8f:b0:72:c0:b6:c1:99:ee:ac:d1:91:0b:f2:5e:b0:5f:f5:c9:
2a:6d:d2:00:39:d9:6b:62:3b:ce:17:5c:fd:29:55:59:d2:5a:
58:d2:4f:b0:a1:dc:76:ea:6d:65:08:08:6e:16:e7:a8:69:3a:
39:02:08:85:01:a5:9c:57:cf:28:73:7e:ec:76:9a:34:66:b4:
94:f0:67:a9:63:ec:90:84:a7:a1:fd:cb:86:51:ce:42:f7:78:
f4:f0:20:cb:e7:b7:73:09:68:42:5b:9f:31:9e:09:d3:6e:11:
6e:5b:b1:43:f1:e6:75:77:d1:57:4c:b0:18:d9:ea:01:7f:e9:
12:d8:2b:1c:94:17:a4:6e:da:bd:9c:ba:75:e5:69:2c:df:c1:
39:70:d6:25:8b:dd:01:aa:73:a6:48:4b:68:c9:c1:96:ed:09:
4e:bd:1a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:48 2025 by rpki-client