Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/KnSUOMU4LVOd-681gUpAeZxW9tU.roa
File: KnSUOMU4LVOd-681gUpAeZxW9tU.roa (raw, json)
Hash identifier: T8JMOCVoClcG2l35uDfqB6bKR7EcaF1TmNNZKykQwnk=
Subject key identifier: 2A:74:94:38:C5:38:2D:53:9D:FB:AF:35:81:4A:40:79:9C:56:F6:D5
Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial: 019426D96AAB9053F1C9050E0841A381FACE
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/KnSUOMU4LVOd-681gUpAeZxW9tU.roa
Signing time: Thu 02 Jan 2025 11:49:30 +0000
ROA not before: Thu 02 Jan 2025 11:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59885
IP address blocks: 185.159.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:6a:ab:90:53:f1:c9:05:0e:08:41:a3:81:fa:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Validity
Not Before: Jan 2 11:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a749438c5382d539dfbaf35814a40799c56f6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0f:f5:f9:58:72:6d:e8:91:11:30:e1:65:1f:
71:17:7a:c7:95:8f:66:d1:c0:44:22:84:86:d8:d3:
25:5f:47:48:02:41:7d:9e:68:88:5d:d7:5f:29:a6:
ec:b1:24:a2:4f:46:02:4d:df:2c:e6:fb:e6:1f:99:
42:57:2c:40:a1:c6:78:df:f2:9b:75:7a:0b:41:fc:
b0:8f:62:8e:69:64:66:73:ba:82:d0:83:e8:6d:74:
d0:31:d7:98:a4:c4:13:50:23:77:9d:c1:09:e5:39:
6f:e6:23:42:83:3b:57:0a:71:39:2d:32:90:6c:52:
91:d5:07:76:66:30:6f:64:00:10:08:a9:e7:11:54:
43:21:dc:b2:b2:e1:26:68:b5:ec:57:ca:39:d1:d3:
09:78:23:9b:f0:31:51:3c:d2:81:2a:d7:00:12:0f:
8a:9a:54:e1:7f:7a:12:dd:4a:6d:9a:dd:37:40:77:
c9:e4:03:f6:ee:29:4a:58:81:ee:f0:38:d3:88:c9:
8e:d7:6b:d5:a7:34:4a:02:51:79:e7:43:ec:0d:b3:
bc:68:2b:c8:1e:ea:01:98:18:61:94:75:84:13:de:
57:a8:68:62:2b:c0:d5:f8:ee:39:cf:55:bf:a2:cf:
75:92:ee:99:65:82:f4:2b:4d:80:bd:db:d1:bc:be:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:74:94:38:C5:38:2D:53:9D:FB:AF:35:81:4A:40:79:9C:56:F6:D5
X509v3 Authority Key Identifier:
keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/KnSUOMU4LVOd-681gUpAeZxW9tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.100.0/22
Signature Algorithm: sha256WithRSAEncryption
16:1d:8a:f1:06:da:54:a2:2d:43:e1:04:65:5d:74:7d:13:e5:
ea:a9:46:e5:f4:dc:dc:3c:d5:e4:07:5f:e5:d5:6a:6e:9d:1e:
a4:cc:f7:b3:a1:c4:bf:b6:ef:84:23:e5:6b:62:35:89:d5:59:
2d:cf:fe:21:89:f5:2f:10:4a:28:1d:4c:94:e9:44:98:73:36:
8e:0f:04:3e:c9:0d:31:be:ef:04:e8:3b:0f:ca:b2:b6:cb:94:
ee:fa:b3:d2:16:67:38:6f:e1:4d:f8:0e:4b:b1:47:cd:e0:c6:
8f:3f:10:6d:87:90:69:e7:bc:08:98:dc:b9:91:03:8d:95:60:
a0:ea:0c:b7:56:73:d3:7c:b1:9f:f7:35:f5:78:47:84:fa:b6:
f1:f4:5b:aa:08:9a:ab:46:9a:d6:f8:ca:ae:27:c3:d7:38:43:
26:83:e0:1e:c2:42:05:2f:a2:b3:ee:a0:6a:b9:4d:91:6d:8b:
cb:a2:86:2f:23:fc:48:57:c0:ea:46:c6:d7:ee:5a:25:61:47:
ae:49:e3:86:34:9f:b5:95:43:38:53:e2:14:7c:4b:83:7e:df:
2e:fc:12:16:b8:fe:e6:ee:0e:a6:e2:d3:48:36:de:75:5e:16:
89:23:69:29:c6:78:8a:55:19:e3:f9:03:7b:2a:46:21:cc:56:
79:32:0e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:19 2025 by rpki-client