Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/KG5vfN5Uvfai8ejvP2GF9IZcxGI.roa
File: KG5vfN5Uvfai8ejvP2GF9IZcxGI.roa (raw, json)
Hash identifier: tUW+ah0ofkg4/88FsRUE5OcUfQMkD6Zq0UYxy47va9A=
Subject key identifier: 28:6E:6F:7C:DE:54:BD:F6:A2:F1:E8:EF:3F:61:85:F4:86:5C:C4:62
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 019421438767AB9A87786DA98F22FCAD1E21
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/KG5vfN5Uvfai8ejvP2GF9IZcxGI.roa
Signing time: Wed 01 Jan 2025 09:47:41 +0000
ROA not before: Wed 01 Jan 2025 09:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51569
IP address blocks: 185.95.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:87:67:ab:9a:87:78:6d:a9:8f:22:fc:ad:1e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: Jan 1 09:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=286e6f7cde54bdf6a2f1e8ef3f6185f4865cc462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b4:95:67:66:8c:32:7f:f9:1f:c0:97:27:45:
c1:09:96:17:11:72:86:b2:c2:a5:61:c1:22:46:6b:
9e:f9:d3:66:c4:82:e9:89:d8:87:1f:69:19:ff:e5:
6b:ae:d7:61:d2:fa:25:a0:93:c7:58:8e:ca:a4:da:
13:21:b2:d4:d5:fb:41:dd:6e:94:a8:6a:53:44:5c:
41:a8:88:0a:74:44:e0:48:36:cf:ad:8b:3a:63:e5:
cf:86:ed:f7:f6:d0:5a:23:e3:98:ef:23:57:bc:48:
e4:80:53:b8:76:79:91:9b:76:e9:5c:7a:0f:53:d4:
85:83:82:0a:1a:98:46:80:c9:9b:37:4a:5b:a7:25:
b4:47:0d:8c:fa:79:7a:3b:a9:c7:e8:b7:a6:58:b3:
e1:dc:ed:90:47:ef:c4:56:0a:a0:b8:ce:85:94:22:
6b:57:1f:4b:d4:e4:57:4d:3d:c0:c5:d9:d0:a3:37:
1c:90:b8:64:23:16:e4:76:10:5d:22:c4:19:44:2a:
24:ef:2f:9c:9c:ea:c4:ee:82:e6:78:8f:3d:a4:90:
52:26:a1:4c:47:c5:f1:a1:7b:ca:54:a5:7c:75:a6:
8b:9e:43:ce:4d:0d:ce:9d:70:78:f2:fe:e5:a6:fd:
d3:29:28:81:a2:db:fc:14:60:ba:4a:cd:a5:92:9b:
5a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6E:6F:7C:DE:54:BD:F6:A2:F1:E8:EF:3F:61:85:F4:86:5C:C4:62
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/KG5vfN5Uvfai8ejvP2GF9IZcxGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.136.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:1e:03:af:c5:00:30:aa:3f:01:ff:7f:d8:20:81:d1:aa:34:
cc:bc:ac:26:40:73:75:1d:fd:36:b8:25:77:d2:57:73:78:31:
95:c0:b2:06:e2:b0:6b:a9:43:8c:c4:72:95:64:43:c2:2d:18:
1b:4f:c0:f2:bc:4e:ae:ce:f4:fd:57:c9:4e:b0:dc:59:b1:a5:
f5:5c:50:37:2a:c6:a1:ea:8c:18:91:fd:cd:91:4f:cb:64:92:
45:9a:0a:91:a8:c4:f3:a2:20:2b:72:7c:5b:e5:b4:0b:04:e0:
24:2e:31:7b:5b:95:4c:4d:b4:66:7b:cc:d1:87:dd:0f:21:53:
5f:55:7e:8e:7d:e7:c8:ae:4d:2e:fb:2f:8b:5f:9f:a7:ac:78:
27:dc:a5:82:f0:08:c9:b7:fc:81:9c:d1:a8:af:a7:af:74:2b:
8b:36:aa:e9:e7:bf:8e:6d:fc:c9:e6:46:30:ae:bf:90:62:7c:
6a:0b:19:24:4a:21:e2:99:25:03:31:10:26:2c:41:f7:dc:41:
d0:54:05:4a:cc:b4:11:e5:c3:da:69:b4:21:ae:12:0e:8c:2d:
eb:89:7d:02:95:fb:82:0f:c4:51:53:4a:ef:af:97:28:bd:53:
6d:c3:b7:79:b1:a6:01:31:9a:2a:0f:f8:cb:59:e5:89:ee:03:
5c:1e:f7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:49 2025 by rpki-client