Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/kf6StMkwG23V9ls9smnXkUH-c_U.roa
File: kf6StMkwG23V9ls9smnXkUH-c_U.roa (raw, json)
Hash identifier: 2gWZsR5gKC4c6paVczIP5ldxDt0ZMc2sEfNeECKiQpI=
Subject key identifier: 91:FE:92:B4:C9:30:1B:6D:D5:F6:5B:3D:B2:69:D7:91:41:FE:73:F5
Certificate issuer: /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial: 019427B6992B986B08481B8A37DF25F8E979
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/kf6StMkwG23V9ls9smnXkUH-c_U.roa
Signing time: Thu 02 Jan 2025 15:51:05 +0000
ROA not before: Thu 02 Jan 2025 15:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211871
IP address blocks: 78.111.111.0/24 maxlen: 24
185.139.5.0/24 maxlen: 24
217.195.202.0/24 maxlen: 24
217.195.207.0/24 maxlen: 24
2a12:94c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:99:2b:98:6b:08:48:1b:8a:37:df:25:f8:e9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
Validity
Not Before: Jan 2 15:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91fe92b4c9301b6dd5f65b3db269d79141fe73f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:28:30:06:21:b0:f6:75:b4:7c:a7:4f:9f:
54:92:21:59:4a:33:37:f6:74:1e:67:b8:4b:8b:6f:
6f:14:8d:94:2c:b9:2f:5c:57:43:0b:5e:7c:c3:2e:
3e:1b:3f:6d:85:85:e3:43:29:0e:2a:0a:13:42:56:
24:cc:b3:2f:12:d0:5b:ff:77:bf:79:9b:62:63:9a:
86:b4:47:fd:ca:6b:15:14:e0:f0:c3:c7:23:b1:32:
59:d2:e2:a6:22:00:3f:35:cf:04:40:10:8a:cc:26:
75:b4:0b:3c:05:1e:f4:e3:da:17:e0:d8:ee:c7:8f:
28:63:1f:04:2c:65:88:77:a1:6b:2a:0a:3b:36:ee:
a4:c4:22:ed:54:41:f4:c6:68:fd:19:26:fe:1b:6b:
66:d5:a5:59:04:56:39:f9:10:ca:10:21:48:82:bb:
0d:e7:08:10:67:c5:d9:6e:02:20:cb:6f:44:8e:dd:
20:43:02:fd:62:ad:7f:9b:40:25:f4:df:ec:75:51:
d2:fe:12:51:7e:08:02:f9:5a:46:a3:8c:4c:8f:14:
be:1a:2c:cf:67:14:1a:82:63:50:55:dc:5d:7a:3e:
c1:63:dd:be:18:3a:05:90:bd:64:88:34:27:f8:9a:
7f:39:52:f4:a1:b2:8d:26:82:a6:84:f7:25:38:db:
5a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FE:92:B4:C9:30:1B:6D:D5:F6:5B:3D:B2:69:D7:91:41:FE:73:F5
X509v3 Authority Key Identifier:
keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/kf6StMkwG23V9ls9smnXkUH-c_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.111.0/24
185.139.5.0/24
217.195.202.0/24
217.195.207.0/24
IPv6:
2a12:94c0::/29
Signature Algorithm: sha256WithRSAEncryption
57:0e:1d:88:75:4d:27:99:9b:52:f1:a6:20:44:49:1f:51:a8:
58:6a:3e:52:22:05:37:c6:5a:54:dc:18:61:6c:6c:da:b7:ee:
81:b0:cf:82:0a:9f:ad:08:8a:0d:a6:af:00:ed:2c:f4:fe:12:
0e:4a:af:db:0f:84:23:e9:d6:7b:97:57:6e:91:17:2d:a2:af:
fe:3f:08:5d:62:23:e4:ee:ea:cc:56:57:50:9b:9f:07:76:dd:
fe:cf:d0:be:de:02:e8:1b:cf:4b:ae:db:e0:1a:3e:08:a5:ed:
7c:3e:f4:41:28:86:1e:dd:4b:2e:44:bf:3a:3c:69:fa:52:a3:
5d:09:3a:96:15:1c:55:c4:ee:fd:fb:54:5c:cb:ce:63:93:f4:
8b:66:76:97:fc:eb:2c:29:97:dd:14:08:c2:cd:34:7a:7f:cc:
ec:64:18:98:90:e7:4b:f6:85:49:a8:5e:42:05:1f:a2:3e:53:
52:7c:5e:2a:87:6d:fc:f3:16:bf:b1:1c:04:db:d9:7f:fb:99:
b0:c2:6b:f2:80:dd:29:ff:6e:8e:d4:0e:24:c2:1f:fd:7d:4f:
bc:ed:85:c8:69:4b:ac:62:c6:d9:ad:fc:97:b7:21:5f:6c:4f:
5b:db:42:ab:96:71:72:28:55:c8:ac:d7:57:f0:40:ce:c7:a9:
b9:77:63:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:34:26 2025 by rpki-client