Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/kb5y1-Zbrkx7MXP5JuLQmArjfW8.roa
File: kb5y1-Zbrkx7MXP5JuLQmArjfW8.roa (raw, json)
Hash identifier: HnOpO7aMn3/CAKcuytA4hwDqnkBIYl9jaOvFbzTHg2g=
Subject key identifier: 91:BE:72:D7:E6:5B:AE:4C:7B:31:73:F9:26:E2:D0:98:0A:E3:7D:6F
Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial: 01942445A53D221AE293651D20ED661615DA
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/kb5y1-Zbrkx7MXP5JuLQmArjfW8.roa
Signing time: Wed 01 Jan 2025 23:48:51 +0000
ROA not before: Wed 01 Jan 2025 23:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21473
IP address blocks: 77.72.216.0/21 maxlen: 24
77.72.221.0/24 maxlen: 24
213.183.64.0/19 maxlen: 24
213.206.160.0/19 maxlen: 24
2a02:24d8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a5:3d:22:1a:e2:93:65:1d:20:ed:66:16:15:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
Validity
Not Before: Jan 1 23:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91be72d7e65bae4c7b3173f926e2d0980ae37d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:e4:33:2a:56:55:c5:f5:14:a4:3a:ac:9c:
72:74:9f:42:e2:97:56:9c:9d:99:0b:06:59:0d:a4:
e2:19:bd:2a:22:6a:ef:34:55:a7:1b:aa:4b:91:0b:
a6:b8:e1:80:9f:a1:3b:4e:14:39:36:7f:dc:c9:05:
b8:64:54:51:87:13:90:74:f4:ca:ed:6c:c7:3c:bd:
4f:eb:d3:bb:b4:e9:41:d6:d5:a6:ce:76:b4:67:d8:
a1:c4:ef:2d:10:26:73:a5:ba:da:a6:46:63:a5:ae:
b6:82:3c:9c:8f:48:a9:0d:fa:ce:2d:47:6b:e5:43:
bd:39:ae:0c:88:89:2d:ce:d2:78:9a:fe:c7:be:62:
fe:18:9c:59:61:08:b5:24:26:31:a1:86:e1:d2:32:
2e:a3:a6:8e:29:02:75:51:b6:92:e6:d9:05:29:de:
35:ec:50:d2:b2:c2:f4:9e:a9:32:24:86:c4:f0:41:
22:15:e7:e2:bf:65:b1:d2:bd:c4:df:4e:17:c2:7c:
3f:3b:99:53:94:f3:18:97:48:ea:bd:30:ea:fd:fb:
1f:d3:4f:98:0d:be:b5:19:79:07:6e:3d:08:66:c6:
6b:20:4b:85:50:70:e6:e6:bd:f6:4a:6e:c8:c3:5d:
04:ad:c3:a6:25:12:dd:e3:93:f5:d7:e7:e0:7a:d0:
4d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BE:72:D7:E6:5B:AE:4C:7B:31:73:F9:26:E2:D0:98:0A:E3:7D:6F
X509v3 Authority Key Identifier:
keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/kb5y1-Zbrkx7MXP5JuLQmArjfW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.216.0/21
213.183.64.0/19
213.206.160.0/19
IPv6:
2a02:24d8::/32
Signature Algorithm: sha256WithRSAEncryption
71:8f:f1:14:81:85:03:ee:7d:92:f0:c0:d9:12:e1:a9:b4:94:
15:6b:f8:58:ad:22:0f:46:c3:a2:30:a2:97:c9:b4:69:f9:0d:
82:56:aa:7e:11:1c:6e:cd:53:ae:c9:37:56:87:93:28:f0:93:
f4:32:4f:11:06:3f:aa:21:09:a9:e4:5d:79:8c:c8:e0:49:54:
36:a8:41:fe:c6:94:d5:89:a9:66:9b:46:97:00:b4:e1:12:25:
18:36:84:be:93:5d:04:72:2c:a5:51:34:84:ed:bd:1f:c0:4c:
9f:a1:0d:64:3c:0d:24:c2:a7:02:aa:1d:c6:1f:20:0b:a5:fb:
84:58:c5:39:bd:78:b8:d0:85:2d:45:6c:73:98:99:c0:62:23:
5d:48:bc:db:3d:64:91:ea:03:38:59:6d:39:7a:21:1d:e7:3f:
c5:f3:32:d2:ba:2c:79:6b:76:c1:68:1d:76:30:aa:eb:d8:c5:
59:d9:d2:84:cf:cc:6e:cd:ac:0d:1e:3c:ca:4b:df:d4:8e:0f:
4f:09:ce:de:db:60:67:fd:ba:13:e2:9e:48:de:37:97:11:71:
ad:ca:3d:e7:ae:df:84:b2:04:39:61:77:c4:1d:a4:29:64:95:
61:b7:15:03:63:c1:09:52:06:c2:26:ab:43:74:05:6c:0e:50:
aa:b2:36:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:23 2025 by rpki-client