Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/KRkXrh5vqktxAukUYwKEkf01PR4.roa
File: KRkXrh5vqktxAukUYwKEkf01PR4.roa (raw, json)
Hash identifier: FhB06ea4PPxnlbrSmHt+yVwcmkem9lE6fs+aLQmy5mg=
Subject key identifier: 29:19:17:AE:1E:6F:AA:4B:71:02:E9:14:63:02:84:91:FD:35:3D:1E
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01941FFA6C1EC69C772D98AE32AF9D67E57A
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/KRkXrh5vqktxAukUYwKEkf01PR4.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210392
IP address blocks: 178.239.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6c:1e:c6:9c:77:2d:98:ae:32:af:9d:67:e5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=291917ae1e6faa4b7102e91463028491fd353d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:f4:be:97:1c:fe:b6:79:71:75:17:3f:02:
46:ed:d7:4e:61:07:f7:7c:dc:9f:c5:ef:bb:ec:9c:
fa:3c:7f:3a:1d:9f:8c:02:4d:98:77:d4:5f:26:66:
71:3d:54:dd:c7:55:94:5a:a7:04:da:2e:49:79:67:
e9:a9:6b:f8:a3:2c:4f:26:7a:36:1b:0c:9d:09:7e:
26:10:72:f1:74:e7:e9:82:61:e2:26:43:0c:b1:f2:
e1:7b:8e:73:14:70:7a:e9:67:62:9e:6a:61:11:14:
b2:ad:1c:c2:e5:19:5b:7c:6b:3a:cf:4d:b8:6d:40:
f1:3f:d4:14:c3:6b:3a:5d:ce:65:73:de:97:0f:3d:
78:b3:c4:ff:51:ff:9e:03:ad:40:13:25:ea:a7:cd:
cd:e4:d8:44:13:bd:5d:2d:e6:0f:a5:4f:4c:91:f3:
4f:3a:32:5e:4c:f3:83:ef:1e:03:e3:2c:07:8d:fd:
26:44:bd:70:81:3f:bf:37:52:3b:05:87:d0:14:c8:
40:17:84:85:b6:cd:7e:a4:58:f4:cd:5d:ee:0b:75:
18:b8:c1:a4:d7:e1:68:a1:aa:f2:49:fb:c8:c5:9f:
0e:5c:00:7b:da:b3:5e:bb:ab:53:99:83:be:1e:e9:
e9:b2:87:a3:f7:bf:26:7b:82:95:a8:c1:bc:f2:5f:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:19:17:AE:1E:6F:AA:4B:71:02:E9:14:63:02:84:91:FD:35:3D:1E
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/KRkXrh5vqktxAukUYwKEkf01PR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.152.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:b1:e9:da:91:9d:a2:00:49:da:dd:19:a7:a2:4c:fa:af:c7:
bb:7e:c7:c7:84:96:09:72:93:8a:16:6b:b3:bd:f6:9d:94:c3:
21:e7:af:c2:d6:cf:cd:8c:71:22:00:76:71:6c:8d:1d:fc:8a:
2a:15:b3:03:54:16:17:51:87:0f:8d:92:53:cb:f5:aa:a4:49:
72:94:09:50:27:07:75:24:3a:55:1c:2d:07:14:16:ed:c9:4e:
66:6c:46:4a:83:d3:52:5b:8c:9a:8a:dc:51:47:12:5f:db:5a:
de:58:29:2c:68:0a:ef:19:34:f7:68:9f:24:75:d1:c0:e8:14:
6b:72:35:f8:46:52:a7:10:bf:9f:cc:5e:ef:96:0b:f8:8d:0e:
b2:69:5d:ea:5d:a0:a6:bf:be:e9:80:3b:24:32:fb:8b:a3:d0:
14:9e:01:6d:5a:e2:24:e0:f3:15:83:6b:03:c2:b6:ae:6d:6a:
d0:af:f5:c1:ba:3d:b4:e1:97:85:d1:01:1f:0c:b0:b7:60:cc:
71:c1:3d:f4:74:e9:ca:33:ce:f7:49:3c:56:6a:16:a1:cb:6a:
b6:f1:40:b6:d9:d3:23:02:b4:4b:c8:fa:f2:d5:18:a4:67:f7:
8c:8a:09:99:73:cb:cf:a9:59:9a:e2:cf:ef:ff:e0:00:a6:00:
bc:b1:ea:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:00 2025 by rpki-client