Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/kWd4hi-OyYBjozDmbmhqQmpA6Pw.roa
File: kWd4hi-OyYBjozDmbmhqQmpA6Pw.roa (raw, json)
Hash identifier: ZCQPM7gY7pbLQQubJYcs97+7fXVoiPmIY9e2vsVxbNM=
Subject key identifier: 91:67:78:86:2F:8E:C9:80:63:A3:30:E6:6E:68:6A:42:6A:40:E8:FC
Certificate issuer: /CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Certificate serial: 0194228DEA62791C17759C2FED278EE47DF5
Authority key identifier: AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/kWd4hi-OyYBjozDmbmhqQmpA6Pw.roa
Signing time: Wed 01 Jan 2025 15:48:33 +0000
ROA not before: Wed 01 Jan 2025 15:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203244
IP address blocks: 185.140.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ea:62:79:1c:17:75:9c:2f:ed:27:8e:e4:7d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=916778862f8ec98063a330e66e686a426a40e8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:fa:31:94:04:c7:67:66:25:6b:e0:dd:dc:
7a:13:53:a5:ac:47:ea:fe:49:ff:6b:35:6a:1d:85:
8e:9e:13:ce:a9:8d:26:0a:da:1e:ba:72:35:ab:aa:
f3:da:17:3b:9d:d9:12:96:22:bc:43:eb:9e:21:f1:
9c:70:20:0e:44:4c:b4:80:9f:d2:c2:6e:c4:36:97:
6f:07:d0:87:bb:fb:19:39:d8:74:76:80:bb:0a:9c:
34:37:62:61:b2:61:e4:b8:04:68:bb:46:16:22:e1:
d0:5f:3f:ee:9a:9a:b0:d0:47:69:48:77:c8:06:68:
14:eb:8e:24:66:72:1e:27:90:60:6f:e5:93:88:41:
4a:eb:43:c4:ea:32:8b:fe:9e:a3:6e:bf:89:02:b2:
37:46:77:20:16:18:82:07:78:f7:4e:32:45:b7:7e:
5c:de:41:6d:73:b0:69:77:29:89:f8:a3:f6:50:a0:
0e:cd:4e:ab:58:6b:66:62:57:9a:43:55:c0:ab:8b:
03:af:c3:91:d4:e3:9f:75:7d:02:9a:04:ef:81:34:
2e:28:c0:64:bf:dc:c5:55:83:1d:36:92:a7:91:72:
a5:6f:7a:fc:83:34:f3:83:14:35:01:81:eb:fe:0b:
69:b1:77:db:87:e9:d8:8b:12:26:7b:f4:88:cc:41:
b3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:67:78:86:2F:8E:C9:80:63:A3:30:E6:6E:68:6A:42:6A:40:E8:FC
X509v3 Authority Key Identifier:
keyid:AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/kWd4hi-OyYBjozDmbmhqQmpA6Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.216.0/22
Signature Algorithm: sha256WithRSAEncryption
85:81:ae:6f:90:c6:bc:17:cb:00:3e:97:ac:f9:4e:f9:89:f6:
d6:7a:69:34:24:05:ad:1b:38:61:5b:ad:06:5e:ac:75:59:9f:
6e:08:97:66:16:66:75:e9:56:ee:ac:2e:4b:3f:d9:23:59:c4:
70:aa:39:49:4e:f3:54:a7:eb:22:93:8e:17:35:a0:bd:fc:55:
2f:92:43:71:c4:51:8c:f7:70:ef:73:54:f1:e4:d2:40:1e:70:
22:f7:b1:84:6d:8b:7e:4a:73:f1:cc:61:a9:cb:d9:d0:2d:cb:
bc:11:0f:d8:11:33:35:52:f7:77:44:ed:09:64:3c:10:af:ed:
f7:d2:ab:41:63:d8:4c:19:35:15:5a:41:1c:97:24:ac:53:58:
6a:d4:e1:7c:60:ec:b6:a8:97:88:79:bf:96:63:6c:2f:8f:e9:
ab:ca:58:9f:e9:ad:fc:11:18:3c:4f:6f:e6:c0:ca:10:c9:03:
4b:36:53:4c:9f:c4:29:bd:ef:a8:0e:7c:ae:a3:33:3c:a0:c4:
04:3e:6f:e0:64:8b:72:06:a7:18:61:9f:f8:0d:e4:db:d3:ab:
28:f9:7e:f2:6c:e7:e6:41:fe:b1:6a:b0:05:20:57:45:dd:41:
81:79:48:69:6f:37:70:4c:41:72:68:5f:00:55:71:4c:40:a8:
a2:3c:83:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:55:44 2025 by rpki-client