Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kp-U-EmWDCqCh--fmhpIK90xHrk.roa
File: kp-U-EmWDCqCh--fmhpIK90xHrk.roa (raw, json)
Hash identifier: uw5pqXmnpzFiVH5MePA8xVgJQLAc2AJ/3VaLtsBzsgY=
Subject key identifier: 92:9F:94:F8:49:96:0C:2A:82:87:EF:9F:9A:1A:48:2B:DD:31:1E:B9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194AC2F9352262D6E6CF4693898E9613501
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kp-U-EmWDCqCh--fmhpIK90xHrk.roa
Signing time: Tue 28 Jan 2025 09:13:06 +0000
ROA not before: Tue 28 Jan 2025 09:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.87.243.0/24 maxlen: 24
193.58.108.0/24 maxlen: 24
195.66.24.0/24 maxlen: 24
2a09:17c0:1000::/48 maxlen: 48
2a0a:2d02::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:2f:93:52:26:2d:6e:6c:f4:69:38:98:e9:61:35:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 28 09:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=929f94f849960c2a8287ef9f9a1a482bdd311eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:cf:44:fe:77:54:62:16:b9:c1:95:38:a3:
17:22:ff:51:53:89:0f:84:dc:72:30:63:b2:bc:63:
b8:81:87:7e:f5:f3:f0:5f:35:cc:8f:64:97:7b:51:
cb:dd:7d:97:e1:47:d1:2a:fb:76:0c:d3:9b:c2:37:
64:70:9c:30:34:a3:d9:b6:b3:22:b5:da:31:68:2c:
ac:e2:84:23:24:a0:5e:a6:4b:d6:61:ca:f4:d9:be:
0c:06:7f:76:67:c6:30:75:f2:3a:fb:b4:ca:64:37:
7e:55:0b:83:c0:fe:1f:46:ca:b1:af:15:83:a3:1c:
df:bf:13:40:94:90:ec:69:6b:22:40:da:fa:6b:c6:
d7:55:50:09:ac:42:2a:11:73:fe:5c:fc:35:a8:52:
af:72:bb:21:17:1e:4c:76:95:17:5a:e0:97:af:ef:
17:1d:58:6e:96:d9:7e:c5:79:95:3e:89:a3:bf:38:
f5:6a:e5:ae:4d:36:26:21:9f:c7:10:27:a6:36:64:
cf:6e:d7:32:ae:f4:0c:a9:0d:78:64:e8:40:94:1d:
6a:d2:04:cb:8a:73:ed:89:84:72:f1:19:4f:5c:ea:
e0:c3:d6:c9:0a:5d:88:9d:ab:86:c1:94:2d:24:c5:
58:20:9f:59:01:e0:ac:34:67:1f:6e:75:ee:6c:a3:
bf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9F:94:F8:49:96:0C:2A:82:87:EF:9F:9A:1A:48:2B:DD:31:1E:B9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kp-U-EmWDCqCh--fmhpIK90xHrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.243.0/24
193.58.108.0/24
195.66.24.0/24
IPv6:
2a09:17c0:1000::/48
2a0a:2d02::/32
Signature Algorithm: sha256WithRSAEncryption
9e:48:0e:34:3c:bc:80:11:ec:43:08:4e:28:8c:d4:6d:60:24:
2e:49:d8:f3:66:b0:4f:ff:03:21:1b:01:75:5f:df:8f:07:cd:
a5:a2:fe:1a:2b:38:9d:eb:15:84:88:db:d1:52:38:3b:5b:eb:
47:f0:90:b8:56:57:30:ad:b4:9d:44:12:35:07:b8:04:49:38:
61:89:c5:c4:f0:18:1f:06:6c:7d:1f:79:97:13:4c:36:0d:f1:
cb:78:3d:fe:cb:3d:81:0e:ab:e3:fc:58:28:01:55:28:d2:73:
bd:bc:ec:a7:03:6f:9f:16:ef:cd:d8:fe:0a:01:f2:ea:02:a6:
b6:74:0f:f2:bc:d2:3d:17:df:3e:06:d4:b7:b1:a2:a2:aa:da:
4f:df:fc:d3:72:82:b5:76:03:2c:ea:e8:10:c2:69:82:c0:48:
27:41:74:87:41:ac:81:25:5d:85:2e:01:71:b8:eb:b8:74:5a:
05:3b:b1:8a:16:9e:31:a0:b0:33:47:21:a9:23:7f:f9:85:08:
f7:94:d2:a0:ad:8b:94:54:3a:ec:e7:d2:34:24:70:11:19:78:
12:78:7d:88:a3:45:cb:b8:a3:b7:84:e9:9d:31:af:3b:d7:84:
e6:cc:a3:c7:b2:2e:fa:4c:d4:a3:21:93:f4:1c:7b:23:6a:c2:
4f:dd:05:0d
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZSsL5NSJi1ubPRpOJjpYTUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMTI4MDkxMzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjlmOTRmODQ5OTYwYzJhODI4N2VmOWY5YTFhNDgyYmRkMzExZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPbPRP53VGIWucGVOKMXIv9RU4kP
hNxyMGOyvGO4gYd+9fPwXzXMj2SXe1HL3X2X4UfRKvt2DNObwjdkcJwwNKPZtrMi
tdoxaCys4oQjJKBepkvWYcr02b4MBn92Z8YwdfI6+7TKZDd+VQuDwP4fRsqxrxWD
oxzfvxNAlJDsaWsiQNr6a8bXVVAJrEIqEXP+XPw1qFKvcrshFx5MdpUXWuCXr+8X
HVhultl+xXmVPomjvzj1auWuTTYmIZ/HECemNmTPbtcyrvQMqQ14ZOhAlB1q0gTL
inPtiYRy8RlPXOrgw9bJCl2InauGwZQtJMVYIJ9ZAeCsNGcfbnXubKO/GQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFJKflPhJlgwqgofvn5oaSCvdMR65MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEva3AtVS1FbVdEQ3FDaC0tZm1ocElLOTB4SHJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQALVfzAwQA
wTpsAwQAw0IYMBYEAgACMBADBwAqCRfAEAADBQAqCi0CMA0GCSqGSIb3DQEBCwUA
A4IBAQCeSA40PLyAEexDCE4ojNRtYCQuSdjzZrBP/wMhGwF1X9+PB82lov4aKzid
6xWEiNvRUjg7W+tH8JC4VlcwrbSdRBI1B7gESThhicXE8BgfBmx9H3mXE0w2DfHL
eD3+yz2BDqvj/FgoAVUo0nO9vOynA2+fFu/N2P4KAfLqAqa2dA/yvNI9F98+BtS3
saKiqtpP3/zTcoK1dgMs6ugQwmmCwEgnQXSHQayBJV2FLgFxuOu4dFoFO7GKFp4x
oLAzRyGpI3/5hQj3lNKgrYuUVDrs59I0JHARGXgSeH2Io0XLuKO3hOmdMa8714Tm
zKPHsi76TNSjIZP0HHsjasJP3QUN
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:38 2025 by rpki-client