Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/KFxs769oKYSlN9E-IJj7uVI5-Jk.roa
File: KFxs769oKYSlN9E-IJj7uVI5-Jk.roa (raw, json)
Hash identifier: oeJ8lNpcZ8slOJ+v6lew9m45/w6Rj6vHO1zS6reB6dA=
Subject key identifier: 28:5C:6C:EF:AF:68:29:84:A5:37:D1:3E:20:98:FB:B9:52:39:F8:99
Certificate issuer: /CN=853a1db50ab771dcb529367dd951a67cacc48527
Certificate serial: 01942444ABD1E15FFDB703378A2619DB2F61
Authority key identifier: 85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/KFxs769oKYSlN9E-IJj7uVI5-Jk.roa
Signing time: Wed 01 Jan 2025 23:47:47 +0000
ROA not before: Wed 01 Jan 2025 23:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41332
IP address blocks: 194.127.252.0/23 maxlen: 24
194.145.112.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ab:d1:e1:5f:fd:b7:03:37:8a:26:19:db:2f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853a1db50ab771dcb529367dd951a67cacc48527
Validity
Not Before: Jan 1 23:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=285c6cefaf682984a537d13e2098fbb95239f899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:38:05:4a:cc:b3:06:5a:6d:ac:a2:00:84:
3f:ce:73:f1:f2:83:99:da:2a:26:bd:e8:6a:24:79:
94:06:d0:47:f9:d3:0e:35:b6:e7:10:e5:70:c6:17:
9b:f2:5b:6f:e6:76:d4:94:36:4e:5f:21:13:94:3d:
5a:08:b4:8b:eb:cb:90:e0:93:45:c2:11:55:97:5f:
3d:df:72:42:66:6d:72:2b:d5:38:59:b2:71:c4:e7:
84:9a:c9:dd:a1:4c:38:fe:ca:ad:f2:ff:fc:78:5d:
df:9a:46:79:7e:a1:6d:1c:60:ad:1d:95:b8:a3:da:
86:46:e6:ef:67:65:98:55:c4:fd:c9:4a:61:4c:3c:
7f:7b:6e:3e:bc:22:f5:5f:a0:4d:a8:96:c7:82:cd:
3e:87:e6:95:fb:e7:e5:98:ba:f4:cc:29:73:85:44:
d6:69:87:aa:92:ea:71:5c:69:fb:d6:c3:3e:bc:1e:
cb:15:6f:08:57:d5:50:ee:e7:e9:f6:38:e7:7a:a2:
73:e7:65:37:4d:70:19:a4:0c:29:39:d2:02:f5:67:
d9:bc:76:f0:44:3a:07:d5:c0:3b:d1:d2:0d:e8:37:
44:bc:4e:5e:3a:a3:13:ef:fa:d0:57:bc:55:e1:77:
bc:25:c8:81:29:e1:8b:0f:9f:f7:cd:21:24:5d:63:
a7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5C:6C:EF:AF:68:29:84:A5:37:D1:3E:20:98:FB:B9:52:39:F8:99
X509v3 Authority Key Identifier:
keyid:85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/KFxs769oKYSlN9E-IJj7uVI5-Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.252.0/23
194.145.112.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:9f:e7:f5:95:a3:5d:2e:49:ea:f6:19:e9:d9:64:60:b1:2c:
bf:8c:7f:f8:b0:ab:07:76:16:da:f3:69:e8:4c:da:dc:fd:91:
04:67:44:b1:a5:b3:32:f9:67:bb:d5:e4:46:25:4f:82:13:63:
92:ca:c8:79:c0:69:91:3a:9a:72:a2:31:44:b4:1c:f8:72:3d:
d1:62:04:e9:cc:e7:87:87:f1:46:e9:fd:c9:a7:ab:54:9c:3e:
98:5e:c3:b5:02:b4:e1:aa:28:16:45:f4:f6:fe:c5:8b:20:2b:
ba:61:41:b1:bb:08:7e:71:90:df:49:55:f1:89:9a:ba:58:2f:
5b:aa:4b:b6:17:78:94:89:f1:81:f6:38:c2:c2:05:c1:1f:ac:
cf:df:0a:13:ab:ce:6c:6a:f0:a2:df:69:10:e1:71:55:30:85:
d6:28:61:90:65:f3:5b:99:64:55:a4:cb:01:7a:82:4b:67:2b:
e9:93:aa:2a:ee:2b:87:49:aa:19:f0:2d:23:cf:20:a8:39:89:
39:67:70:69:08:88:87:15:b7:65:34:97:42:48:ac:fb:c9:d6:
02:5c:42:74:40:45:47:ef:cd:3c:42:55:00:76:ae:a7:ac:5f:
c3:f9:2e:05:76:0a:ea:4d:02:c6:a0:5c:9c:83:27:28:aa:32:
44:c4:ce:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:00:02 2025 by rpki-client