Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/KrKK6KlWrbwro0xZGJbZRZAIMbY.roa
File: KrKK6KlWrbwro0xZGJbZRZAIMbY.roa (raw, json)
Hash identifier: mLgmMH2GpuH6gYsfQafOR8wiybY64hDgIvWRNRviit8=
Subject key identifier: 2A:B2:8A:E8:A9:56:AD:BC:2B:A3:4C:59:18:96:D9:45:90:08:31:B6
Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Certificate serial: 019428279AE347B7D042DE8F276D27022FF6
Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/KrKK6KlWrbwro0xZGJbZRZAIMbY.roa
Signing time: Thu 02 Jan 2025 17:54:31 +0000
ROA not before: Thu 02 Jan 2025 17:54:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209284
IP address blocks: 185.16.104.0/22 maxlen: 22
185.16.104.0/24 maxlen: 24
185.16.105.0/24 maxlen: 24
185.16.106.0/24 maxlen: 24
185.16.107.0/24 maxlen: 24
185.58.188.0/22 maxlen: 22
185.58.189.0/24 maxlen: 24
185.58.190.0/24 maxlen: 24
185.58.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:9a:e3:47:b7:d0:42:de:8f:27:6d:27:02:2f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Validity
Not Before: Jan 2 17:54:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ab28ae8a956adbc2ba34c591896d945900831b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ea:95:c6:9d:2c:ab:fc:f7:17:eb:f6:e3:2c:
0a:26:1d:48:df:9f:de:00:97:c8:45:3a:8c:fa:e2:
1f:ef:82:7f:5b:52:0a:61:b3:51:c1:62:54:b9:99:
ad:22:36:b0:1f:6a:30:91:d3:44:0c:02:d4:f4:47:
07:f9:3d:81:90:83:dd:a9:79:01:27:ce:f4:15:dd:
d2:22:9d:61:ef:7b:64:b9:a1:76:ba:71:e8:93:94:
3b:19:28:6c:35:95:9d:f5:8c:ec:76:72:09:74:00:
ad:20:f9:18:a5:20:27:af:28:1a:e0:2b:bf:fa:af:
31:d9:b7:b4:60:26:ea:ce:9c:2b:db:96:0a:79:73:
61:26:08:14:a6:14:77:a1:37:1c:0f:3e:5a:08:a1:
3b:a4:b9:e3:5b:4c:00:5c:50:6b:14:ad:44:ff:6c:
be:1c:48:a7:27:33:2d:f5:77:6e:be:f5:74:9f:0b:
0a:77:0d:ff:9b:32:51:da:c6:57:f9:ac:81:cd:30:
3f:f7:45:e7:a8:9d:6c:00:36:85:85:ff:a3:9b:ec:
4c:5c:3d:a3:cb:1f:4e:88:50:8f:5f:f6:00:56:2b:
78:78:b4:b8:12:c3:5b:ae:98:f9:eb:9f:95:b6:2a:
8e:82:b4:92:b9:47:39:18:a3:b0:9e:68:f4:35:17:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B2:8A:E8:A9:56:AD:BC:2B:A3:4C:59:18:96:D9:45:90:08:31:B6
X509v3 Authority Key Identifier:
keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/KrKK6KlWrbwro0xZGJbZRZAIMbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.104.0/22
185.58.188.0/22
Signature Algorithm: sha256WithRSAEncryption
55:07:54:6c:59:6c:43:8d:e8:7d:0b:e4:e7:ca:1b:d8:68:db:
48:a3:0e:7f:1c:fc:59:a4:d5:32:34:f2:c2:55:7f:94:b0:b6:
4c:58:ac:07:ea:e6:47:da:04:2f:b0:25:ed:ba:68:5b:d8:b3:
97:8c:de:cb:76:4f:a8:9c:3f:cd:e7:96:1a:9e:ac:a0:0c:36:
6b:14:db:43:b0:fe:42:3a:de:27:d4:02:65:df:5e:dc:2a:88:
6e:8d:88:91:ac:d2:55:23:d3:ce:da:5e:54:12:fd:51:8b:b1:
35:65:3e:02:f5:94:69:5d:a1:b2:ec:5f:63:c3:3d:6e:92:e1:
74:92:03:bf:8d:4e:d3:8a:84:44:64:e3:86:0e:37:f0:b3:3b:
53:92:82:90:56:17:1b:95:2f:f2:fe:ee:41:21:9e:8a:bc:28:
c7:94:90:96:d6:09:56:e3:da:7f:48:eb:19:45:a6:64:2e:75:
41:ad:bf:42:1b:39:ea:a7:ba:cb:ec:e4:ab:bc:b1:a5:f3:f7:
8b:19:f7:d2:76:c8:29:ad:52:32:df:11:b6:88:88:0b:2f:35:
46:47:d5:1a:c1:f1:4a:90:76:3c:93:44:88:67:1e:03:44:7d:
4c:18:60:b3:da:6a:6a:14:1e:ae:74:09:fe:fb:b2:b9:c2:d0:
1e:ed:d7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:59:03 2025 by rpki-client