Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KRxKu_3sSaUePuuh1zhKvtRict0.roa
File: KRxKu_3sSaUePuuh1zhKvtRict0.roa (raw, json)
Hash identifier: +EX1LptbVJc4+7RpbLy829R4rw7CqCxrczXwQWpCdMc=
Subject key identifier: 29:1C:4A:BB:FD:EC:49:A5:1E:3E:EB:A1:D7:38:4A:BE:D4:62:72:DD
Certificate issuer: /CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Certificate serial: 019426D9B2106DEC36507349B2F94C5CCAB1
Authority key identifier: 29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KRxKu_3sSaUePuuh1zhKvtRict0.roa
Signing time: Thu 02 Jan 2025 11:49:48 +0000
ROA not before: Thu 02 Jan 2025 11:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201603
IP address blocks: 91.217.32.0/23 maxlen: 23
91.217.32.0/24 maxlen: 24
91.217.33.0/24 maxlen: 24
94.177.20.0/24 maxlen: 24
185.69.104.0/22 maxlen: 22
185.69.104.0/24 maxlen: 24
185.69.105.0/24 maxlen: 24
185.69.106.0/24 maxlen: 24
185.69.107.0/24 maxlen: 24
188.214.108.0/24 maxlen: 24
2a05:2140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b2:10:6d:ec:36:50:73:49:b2:f9:4c:5c:ca:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Validity
Not Before: Jan 2 11:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=291c4abbfdec49a51e3eeba1d7384abed46272dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:d2:b3:c9:0b:7d:11:ba:d7:7d:ce:cd:f7:
09:67:62:9b:d6:ac:ec:65:eb:f6:cf:c1:d5:3e:44:
1a:cd:d3:1e:c0:d8:4f:f1:1c:de:80:f9:b0:dd:b3:
88:9b:67:76:e8:9a:87:e3:39:7f:1c:ed:1f:77:37:
4c:bf:84:3c:38:e7:5a:a9:9e:6d:2f:b9:e3:ff:07:
2f:a8:be:22:f6:27:81:67:41:96:55:ad:01:3a:c7:
2d:37:e8:a8:9b:1a:24:ce:c1:c7:ee:01:52:a0:94:
c0:0f:a3:f9:ef:e1:96:ce:10:82:64:90:96:91:13:
fa:34:94:a6:69:7e:43:52:8f:ce:7f:57:3c:57:17:
a5:1b:f9:db:05:b2:48:15:18:82:8c:4b:c4:9b:6e:
5d:40:8e:b1:af:37:6b:f5:54:3a:9d:8c:9a:4a:95:
f6:6a:06:80:d0:2f:46:e6:97:6b:10:0e:1a:97:c4:
b0:6e:e4:31:4b:60:42:36:98:59:53:64:6b:0e:66:
4f:58:41:37:b2:15:da:b7:20:7b:6e:08:6e:d9:86:
55:05:b5:35:b9:3e:0c:67:89:40:f1:36:83:a4:63:
ff:50:57:08:d9:29:66:23:4d:0e:bf:cb:51:60:e5:
4c:5d:b5:0a:54:0d:02:e1:3c:d4:67:e4:78:65:82:
b7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1C:4A:BB:FD:EC:49:A5:1E:3E:EB:A1:D7:38:4A:BE:D4:62:72:DD
X509v3 Authority Key Identifier:
keyid:29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KRxKu_3sSaUePuuh1zhKvtRict0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.32.0/23
94.177.20.0/24
185.69.104.0/22
188.214.108.0/24
IPv6:
2a05:2140::/29
Signature Algorithm: sha256WithRSAEncryption
91:ae:ae:3a:66:a7:f3:2b:52:31:92:04:be:4c:ae:70:55:9a:
47:4c:f9:c8:52:f7:fc:52:f3:37:0e:4b:e5:b0:0e:ca:78:6d:
9a:65:47:74:c4:26:ad:7b:19:85:6d:48:6b:41:35:d2:68:03:
62:bb:2b:f0:fa:5f:03:12:96:84:03:53:2c:4d:9e:70:52:9e:
62:f4:f0:1e:6d:40:19:c0:d0:3b:98:70:b9:19:f4:db:48:fe:
b0:44:ae:5b:74:c8:82:29:2d:48:16:2c:8d:ba:ee:b6:b6:0d:
9d:1c:17:72:8b:5d:2a:26:32:cf:9d:d1:c8:8e:90:91:08:d5:
b9:57:fe:50:b2:05:aa:33:c9:e2:b0:1c:00:48:8e:66:05:ac:
88:58:80:9d:b7:46:b4:29:70:e1:10:4e:6d:e2:f2:5d:cb:36:
57:d2:87:93:35:12:41:b6:65:af:ca:a2:61:78:97:ca:8e:69:
97:2c:c4:bc:3a:56:4d:31:a5:f9:d3:f6:87:cf:fb:be:3a:cb:
1d:3a:74:84:8a:12:ad:db:bc:9b:de:e8:68:e8:e6:07:e2:1a:
a6:b9:f3:02:04:0e:de:5c:1b:8c:b5:43:69:94:80:95:4a:c8:
dd:58:64:74:2d:43:80:6b:bc:2a:7a:04:d7:89:99:b2:a0:86:
67:1d:92:62
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQm2bIQbew2UHNJsvlMXMqxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5OTIxNTE4YzVkYTFiODRjNTk3MWE3OWJjNzRlOGFjMDc3
MGZkNDkwHhcNMjUwMTAyMTE0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTFjNGFiYmZkZWM0OWE1MWUzZWViYTFkNzM4NGFiZWQ0NjI3MmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBvSs8kLfRG6133OzfcJZ2Kb1qzs
Zev2z8HVPkQazdMewNhP8RzegPmw3bOIm2d26JqH4zl/HO0fdzdMv4Q8OOdaqZ5t
L7nj/wcvqL4i9ieBZ0GWVa0BOsctN+iomxokzsHH7gFSoJTAD6P57+GWzhCCZJCW
kRP6NJSmaX5DUo/Of1c8VxelG/nbBbJIFRiCjEvEm25dQI6xrzdr9VQ6nYyaSpX2
agaA0C9G5pdrEA4al8SwbuQxS2BCNphZU2RrDmZPWEE3shXatyB7bghu2YZVBbU1
uT4MZ4lA8TaDpGP/UFcI2SlmI00Ov8tRYOVMXbUKVA0C4TzUZ+R4ZYK3TwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFCkcSrv97EmlHj7rodc4Sr7UYnLdMB8GA1UdIwQY
MBaAFCmSFRjF2huExZcaebx06KwHcP1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1pJVkdNWGFHNFRGbHhwNXZIVG9yQWR3X1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83MTU4MzUtYmMxZC00Y2I4LTk2MTgt
NGVmMjgzY2U3ZmYxLzEvS1J4S3VfM3NTYVVlUHV1aDF6aEt2dFJpY3QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83MTU4MzUtYmMxZC00Y2I4LTk2MTgtNGVmMjgzY2U3ZmYx
LzEvS1pJVkdNWGFHNFRGbHhwNXZIVG9yQWR3X1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBW9kgAwQA
XrEUAwQCuUVoAwQAvNZsMA0EAgACMAcDBQMqBSFAMA0GCSqGSIb3DQEBCwUAA4IB
AQCRrq46ZqfzK1IxkgS+TK5wVZpHTPnIUvf8UvM3DkvlsA7KeG2aZUd0xCatexmF
bUhrQTXSaANiuyvw+l8DEpaEA1MsTZ5wUp5i9PAebUAZwNA7mHC5GfTbSP6wRK5b
dMiCKS1IFiyNuu62tg2dHBdyi10qJjLPndHIjpCRCNW5V/5QsgWqM8nisBwASI5m
BayIWICdt0a0KXDhEE5t4vJdyzZX0oeTNRJBtmWvyqJheJfKjmmXLMS8OlZNMaX5
0/aHz/u+OssdOnSEihKt27yb3uho6OYH4hqmufMCBA7eXBuMtUNplICVSsjdWGR0
LUOAa7wqegTXiZmyoIZnHZJi
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:12:09 2025 by rpki-client