Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/KzXb-GAIiluztxWbXEztv2KxINE.roa
File: KzXb-GAIiluztxWbXEztv2KxINE.roa (raw, json)
Hash identifier: RfAT/ToLMD66v1yb0qJDxKlt/UFCsEuoJitem9+zGng=
Subject key identifier: 2B:35:DB:F8:60:08:8A:5B:B3:B7:15:9B:5C:4C:ED:BF:62:B1:20:D1
Certificate issuer: /CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Certificate serial: 01942143AB490CE4F68AEAD63B06B071F3B6
Authority key identifier: B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/KzXb-GAIiluztxWbXEztv2KxINE.roa
Signing time: Wed 01 Jan 2025 09:47:50 +0000
ROA not before: Wed 01 Jan 2025 09:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42687
IP address blocks: 185.217.141.0/24 maxlen: 24
2a10:c700::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ab:49:0c:e4:f6:8a:ea:d6:3b:06:b0:71:f3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Validity
Not Before: Jan 1 09:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b35dbf860088a5bb3b7159b5c4cedbf62b120d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:75:65:d1:6b:eb:8d:b6:90:98:4d:98:02:3a:
50:f9:f6:fd:6b:b7:a2:7a:98:ab:e9:ce:a1:fc:9a:
fb:d0:15:c7:51:89:33:ca:45:d8:5c:a4:c1:bd:da:
cc:4e:9c:0e:ce:a8:56:1f:ce:a7:2b:00:67:54:6a:
ba:d7:cd:1a:9a:ab:4f:a9:1f:b9:be:68:bf:94:2f:
30:9c:dc:27:02:a1:03:7d:2a:74:13:bb:c0:d4:7b:
c0:01:8a:cd:8d:76:05:71:f7:88:d4:79:74:df:63:
26:80:cc:de:4d:47:f7:1e:cd:bc:ea:fd:f9:d3:10:
f3:87:ce:8b:9e:5b:62:36:40:36:21:60:8f:e2:50:
7a:a3:c5:43:8d:0e:d8:3d:45:2c:f9:e1:0f:2c:59:
ea:d0:c7:6b:e5:78:b8:5e:b9:4c:fb:1e:6f:74:4b:
b9:b9:b5:72:6d:96:8c:f9:55:4f:6a:ac:e3:ef:1f:
82:29:67:2f:04:b8:a6:11:2a:11:ab:ae:45:f0:0a:
09:17:99:5f:6a:b9:4c:2d:0e:80:21:2f:e1:13:20:
42:68:1a:30:53:9a:d6:d1:fa:75:74:41:ef:e0:bc:
e7:ec:8f:0f:59:52:da:3f:d6:33:23:03:d7:21:3e:
3d:0f:b0:7d:38:a0:a3:d0:8c:ad:ff:0a:19:37:65:
a0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:35:DB:F8:60:08:8A:5B:B3:B7:15:9B:5C:4C:ED:BF:62:B1:20:D1
X509v3 Authority Key Identifier:
keyid:B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/KzXb-GAIiluztxWbXEztv2KxINE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.141.0/24
IPv6:
2a10:c700::/32
Signature Algorithm: sha256WithRSAEncryption
22:17:34:cd:a8:05:70:c4:ff:fb:55:da:56:cd:7e:f9:b4:6c:
a0:3b:ed:45:05:b6:c3:a8:e9:4a:ac:f7:66:49:c5:ab:39:46:
77:83:8b:b8:24:09:b5:57:3e:d9:a9:10:73:1b:02:dd:49:4e:
89:22:68:f5:7b:41:db:d8:da:10:36:c6:4c:4f:49:7b:ad:d2:
4b:5a:11:53:9d:c1:30:d9:56:53:6f:6c:3e:7a:58:f1:b1:1a:
f7:06:6c:67:ac:81:16:ef:d8:b2:65:90:dc:9e:62:a1:8b:5c:
38:28:31:87:4d:14:9a:c6:f3:32:50:98:52:0a:4c:00:1e:25:
c2:20:c1:94:16:99:1c:c2:5d:e0:4e:4c:62:8a:5d:ea:2e:85:
37:f4:3e:51:8d:aa:dc:a8:55:4a:bb:2b:40:74:cd:55:0b:c8:
a3:0c:60:cd:c4:b9:3a:28:19:bb:7a:25:dc:14:b4:2e:fc:3c:
02:dc:c5:c5:94:1f:0c:35:81:0d:48:c1:91:c2:28:df:0a:ef:
d5:72:61:41:46:da:5a:e8:b3:86:c3:d8:a7:a8:6f:a0:ca:b8:
b3:49:fb:94:c2:41:42:3e:3f:59:ec:70:95:9a:9e:14:ee:02:
a7:e4:75:ca:84:4e:40:d0:39:09:2e:a2:e4:ee:17:7e:95:01:
a3:b7:dd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:28:09 2025 by rpki-client