Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/KDWeBpmTxUa0Mz4yXMRZvKpUp-8.roa
File: KDWeBpmTxUa0Mz4yXMRZvKpUp-8.roa (raw, json)
Hash identifier: cjL5/Zk/+WeXJvz0YYNjQhBLpfiAvQEqmGubWQog+uE=
Subject key identifier: 28:35:9E:06:99:93:C5:46:B4:33:3E:32:5C:C4:59:BC:AA:54:A7:EF
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 019421B199D1600FEBD4CC2DBE9B9506306B
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/KDWeBpmTxUa0Mz4yXMRZvKpUp-8.roa
Signing time: Wed 01 Jan 2025 11:47:54 +0000
ROA not before: Wed 01 Jan 2025 11:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24796
IP address blocks: 185.33.108.0/22 maxlen: 22
185.33.108.0/23 maxlen: 23
185.33.108.0/24 maxlen: 24
185.33.109.0/24 maxlen: 24
185.33.110.0/23 maxlen: 23
185.33.110.0/24 maxlen: 24
185.33.111.0/24 maxlen: 24
193.24.29.0/24 maxlen: 24
193.201.40.0/24 maxlen: 24
2a0f:80:1::/48 maxlen: 48
2a0f:80:2::/48 maxlen: 48
2a0f:80:3::/48 maxlen: 48
2a0f:80:a::/48 maxlen: 48
2a0f:80:b::/48 maxlen: 48
2a0f:80:c::/48 maxlen: 48
2a0f:80:d::/48 maxlen: 48
2a0f:80:e::/48 maxlen: 48
2a0f:80:f::/48 maxlen: 48
2a0f:80:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:99:d1:60:0f:eb:d4:cc:2d:be:9b:95:06:30:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Jan 1 11:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28359e069993c546b4333e325cc459bcaa54a7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:2e:cd:31:32:5b:47:9a:4e:b7:dd:31:06:
1c:93:95:47:22:b2:0b:9e:a3:99:d7:40:ed:62:0c:
9c:91:3d:1d:fb:ac:d0:3e:6a:80:c7:66:2c:2a:3d:
81:6a:d9:89:09:d9:da:9c:5b:75:e7:71:8a:e4:86:
64:ef:90:88:67:2b:87:f0:aa:88:a7:58:33:1e:d0:
f3:e2:33:15:64:c3:ca:9f:5f:5f:53:9c:62:be:65:
cf:9e:7b:4d:db:df:3f:0a:8c:11:12:e2:81:31:cc:
39:71:db:6f:71:9a:7a:d9:e8:9a:f7:3b:84:0b:a5:
77:07:d2:59:c9:31:4c:b0:a6:c0:41:41:f5:73:ef:
e1:1c:ad:8c:f7:e5:e5:59:78:8d:de:6b:8d:9a:b7:
80:56:f9:56:8f:ab:36:83:aa:93:fb:80:2f:44:f8:
0e:22:56:f5:d2:d9:46:b9:b0:79:3f:58:24:8b:20:
91:db:0d:71:07:af:5d:67:f1:94:9f:79:1a:dd:b5:
6f:36:a5:46:5e:38:76:ab:ab:b8:b3:b6:1c:a4:66:
4f:e1:c7:98:73:b9:5e:b4:0b:fa:67:6d:af:15:a0:
92:7b:af:d0:fc:af:5e:f9:f5:2d:78:e2:5e:b0:99:
66:71:6c:99:0f:2b:7b:30:ac:64:04:30:81:0e:20:
d6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:35:9E:06:99:93:C5:46:B4:33:3E:32:5C:C4:59:BC:AA:54:A7:EF
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/KDWeBpmTxUa0Mz4yXMRZvKpUp-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.108.0/22
193.24.29.0/24
193.201.40.0/24
IPv6:
2a0f:80:1::-2a0f:80:3:ffff:ffff:ffff:ffff:ffff
2a0f:80:a::-2a0f:80:10:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6b:5b:58:46:7f:26:1f:2d:ae:6a:7f:60:f7:7f:7c:33:10:7f:
99:b7:73:91:1f:64:f1:34:c0:d1:03:96:5b:b1:2f:c2:91:7c:
a9:e0:51:6a:52:51:63:5f:88:0c:6e:d5:b3:89:52:cd:dd:e5:
e2:b9:03:40:17:a7:04:cd:1e:10:42:ac:52:61:d6:b2:d8:30:
4e:ae:fc:5b:ca:80:a0:38:f8:13:88:72:52:8c:89:e8:38:53:
90:69:13:d1:07:95:a3:31:65:7b:4e:9a:8f:78:e5:62:8c:2f:
d0:c2:d6:45:3d:c0:ae:5a:b7:7b:e3:ac:41:31:4a:27:5b:76:
24:f1:24:bb:95:44:46:4c:0b:0e:58:0e:6a:6e:9b:02:98:10:
89:a7:57:9b:f0:13:0a:c3:4f:3f:ff:b8:00:c9:34:0b:7b:94:
89:95:46:0c:6f:60:ff:60:f5:3f:33:7a:01:44:8c:85:f3:24:
bb:15:c1:1b:d6:06:59:0b:c6:d3:9d:46:e6:2a:5d:76:54:37:
8c:dc:80:9f:d4:8d:2a:92:cf:13:8a:cb:5f:74:7b:0f:a0:b4:
d4:7c:99:31:70:b3:59:96:a5:90:d3:70:37:b9:a1:88:a0:03:
7a:fa:bd:91:8b:64:d3:82:d1:be:57:8b:2f:82:cc:7d:97:f4:
3d:94:19:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:23:09 2025 by rpki-client