Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/KlSKJbns32ql0FeYlQMxJtpi1lg.roa
File: KlSKJbns32ql0FeYlQMxJtpi1lg.roa (raw, json)
Hash identifier: 9F1/AQaZc6WZENDwjwcw6q8ufEFG6qmOq3cpIsOFvt8=
Subject key identifier: 2A:54:8A:25:B9:EC:DF:6A:A5:D0:57:98:95:03:31:26:DA:62:D6:58
Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Certificate serial: 019423D7F2B73F7D0B7A75E2A587090073C9
Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/KlSKJbns32ql0FeYlQMxJtpi1lg.roa
Signing time: Wed 01 Jan 2025 21:49:02 +0000
ROA not before: Wed 01 Jan 2025 21:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209834
IP address blocks: 176.53.188.0/22 maxlen: 24
2a09:e100::/29 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f2:b7:3f:7d:0b:7a:75:e2:a5:87:09:00:73:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Validity
Not Before: Jan 1 21:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a548a25b9ecdf6aa5d0579895033126da62d658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:d3:43:79:68:7f:22:1b:d1:a8:20:f5:2d:
c5:06:26:8e:61:2f:95:b0:91:0f:26:3b:4d:6f:6a:
36:d6:29:af:4d:31:7b:75:ae:4b:65:81:35:b2:32:
64:e7:1d:73:9b:db:7d:71:a1:80:6d:b1:03:f3:c0:
c7:3b:87:f4:12:7f:a1:b9:c7:16:4a:6c:85:91:de:
d4:eb:66:41:c1:eb:59:3e:63:2b:3e:d6:de:e3:18:
c0:d2:9f:96:e2:ae:46:c1:8f:50:09:11:d5:70:94:
81:e1:19:52:ef:f7:dd:78:fa:e6:7b:b5:30:e5:b4:
47:6f:81:29:f3:2a:84:3d:a6:ff:78:af:55:2d:92:
f7:2d:00:ab:43:4b:2c:14:34:ec:10:52:64:ad:b9:
40:ee:23:68:2b:c0:a1:71:d4:8c:a2:ab:30:07:03:
5f:88:2e:a5:52:91:d5:fd:a1:dd:ea:97:d4:f5:8b:
24:60:a9:0c:25:3a:ad:78:95:15:d1:f0:97:16:e8:
aa:66:a2:35:c4:f6:91:8d:13:20:5f:8b:09:9a:3f:
2a:8a:dd:7b:80:d0:d8:a7:22:09:8a:4d:ad:72:89:
9f:ec:19:03:b9:b2:e2:20:75:01:fe:c0:1d:d1:34:
f9:d3:40:d5:cc:21:16:a7:92:c2:7e:15:22:9a:42:
36:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:54:8A:25:B9:EC:DF:6A:A5:D0:57:98:95:03:31:26:DA:62:D6:58
X509v3 Authority Key Identifier:
keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/KlSKJbns32ql0FeYlQMxJtpi1lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.188.0/22
IPv6:
2a09:e100::/29
Signature Algorithm: sha256WithRSAEncryption
55:f1:19:ac:16:c7:dc:96:dc:ee:75:15:c0:33:e4:61:9e:a4:
62:74:d1:ea:c7:9a:38:69:c5:f6:3a:c1:80:3f:23:05:70:d7:
3d:ed:4c:4a:62:e5:6d:a0:e2:b0:f6:bb:d5:3c:03:1e:a8:34:
34:95:ac:8c:2e:89:1f:cd:f3:e6:80:20:c6:a0:5a:7f:52:d7:
5c:31:6e:05:c3:b2:be:23:45:86:b0:67:3f:35:7b:f1:5c:cb:
d4:42:fe:75:d2:e9:f3:de:63:16:26:f9:d2:08:73:21:70:28:
64:c3:e5:4e:e1:78:0d:f2:a6:81:80:0b:0e:c4:ce:03:43:61:
4b:c8:88:0d:25:3a:c2:2d:86:3e:d9:52:75:38:7f:29:87:5e:
96:9f:94:2f:25:5d:9c:72:54:ce:fd:58:fd:0d:00:13:3b:6b:
71:02:8c:01:cc:b8:d4:5f:6d:bf:12:42:89:6d:18:7a:12:91:
a3:f2:f1:83:f9:bb:f2:80:e7:e1:a6:70:a4:a4:e0:4d:d4:68:
2c:1e:28:e6:87:ee:94:28:ee:87:c3:36:9a:81:6f:37:08:2a:
0b:55:c7:f4:a5:a2:64:b1:d5:11:cc:85:1d:d5:56:b3:21:24:
3f:9e:6b:28:b6:3d:f8:69:ec:11:34:b5:01:41:47:10:82:33:
33:2f:77:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:12:53 2025 by rpki-client