Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/Kj_GYCscFmlVFFmndDSFfAkuFwY.roa
File: Kj_GYCscFmlVFFmndDSFfAkuFwY.roa (raw, json)
Hash identifier: 6AgFYxmuaSYjaFZUd8eJPcRWj8cD+HYqY6zQ9lI9XGM=
Subject key identifier: 2A:3F:C6:60:2B:1C:16:69:55:14:59:A7:74:34:85:7C:09:2E:17:06
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 01942369933868C58B734104A4958A86897C
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/Kj_GYCscFmlVFFmndDSFfAkuFwY.roa
Signing time: Wed 01 Jan 2025 19:48:29 +0000
ROA not before: Wed 01 Jan 2025 19:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206524
IP address blocks: 185.248.76.0/24 maxlen: 24
185.248.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:93:38:68:c5:8b:73:41:04:a4:95:8a:86:89:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Jan 1 19:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a3fc6602b1c1669551459a77434857c092e1706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a3:1d:a9:78:13:f5:a3:39:63:34:d9:16:22:
bc:91:42:74:83:03:94:52:ca:ff:2c:02:67:80:82:
4f:a9:86:2d:31:9b:88:fd:46:9a:4a:dc:ec:18:84:
aa:b6:14:cc:0d:25:65:a4:48:bd:a0:e4:46:a6:7c:
c2:f7:78:71:75:c8:0d:db:53:4c:5f:6f:12:bf:ed:
7a:11:d7:32:28:bb:1e:3b:f2:f7:df:e9:4f:86:e0:
bc:f1:10:4d:58:37:7e:77:7b:bc:21:69:82:b2:d8:
fb:52:7e:0f:39:cb:bc:3a:91:3d:ae:d4:dc:b6:12:
f7:5e:41:6f:f7:fc:49:85:81:52:e1:78:77:6d:25:
d0:99:76:ff:77:76:f2:7a:45:27:3e:e9:37:62:a2:
5f:ec:de:85:c1:b4:ab:e6:da:07:25:41:d4:9b:e1:
d4:17:0b:5e:a9:23:a1:b3:d3:8e:ce:1d:3c:1b:43:
88:06:99:36:f7:6e:b1:68:ff:1f:b0:da:7c:e0:03:
be:d9:d7:b0:4e:58:c8:a6:53:ce:5e:e1:78:5d:33:
41:19:62:97:1f:d5:36:1b:0a:c3:ec:eb:0b:41:03:
f0:62:e4:1d:b5:e6:20:30:5e:4b:d9:59:7f:e6:6d:
65:00:43:87:0e:01:4d:a3:29:19:ab:36:88:00:1c:
32:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3F:C6:60:2B:1C:16:69:55:14:59:A7:74:34:85:7C:09:2E:17:06
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/Kj_GYCscFmlVFFmndDSFfAkuFwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.76.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:13:87:5f:11:79:1e:4f:c1:ae:f2:9d:87:8e:82:20:75:4d:
22:30:21:a6:ee:2b:0a:9c:06:17:c9:89:19:9c:93:9a:83:8a:
ea:51:2f:a8:dd:f4:e5:15:a0:6c:c7:c2:5e:e8:31:eb:b6:49:
f5:ca:42:d1:63:bd:af:c8:9b:7a:e1:d7:52:d3:b3:f9:ec:c7:
18:f8:c9:a1:a9:04:3c:69:85:2e:0a:9f:39:67:e0:15:40:cd:
08:17:ca:6d:3a:03:ce:30:49:78:04:b6:6a:79:f8:a8:22:bf:
14:c5:59:98:19:d9:1f:8f:8d:39:b6:dc:27:fe:ef:9a:d0:48:
4f:79:c0:2b:d9:45:c0:75:31:96:8a:8a:2a:d7:91:69:97:dc:
80:02:19:72:75:5d:a6:9f:9d:65:d5:6c:9c:a1:9b:a2:26:c4:
6d:98:80:d0:08:da:a5:fb:16:90:65:9c:9e:1e:83:6f:3e:4a:
5f:cf:65:e9:9f:45:57:16:44:3f:a8:82:b8:4b:08:57:82:94:
98:bf:ac:aa:5f:85:73:4e:14:bf:44:de:7b:7f:58:d1:67:50:
63:a9:f1:62:97:19:5a:0f:e4:4a:88:06:cc:87:2e:fb:99:99:
29:48:f3:2d:8a:6d:61:da:4f:82:35:60:b6:84:d6:7f:39:a6:
6a:58:33:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaZM4aMWLc0EEpJWKhol8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2Nzk1MjJlYjg5MjU4OWQ3MzY0YWY1NzlhNzI0MDQwZTky
OWYwYWEwHhcNMjUwMTAxMTk0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTNmYzY2MDJiMWMxNjY5NTUxNDU5YTc3NDM0ODU3YzA5MmUxNzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qMdqXgT9aM5YzTZFiK8kUJ0gwOU
Usr/LAJngIJPqYYtMZuI/UaaStzsGISqthTMDSVlpEi9oORGpnzC93hxdcgN21NM
X28Sv+16EdcyKLseO/L33+lPhuC88RBNWDd+d3u8IWmCstj7Un4POcu8OpE9rtTc
thL3XkFv9/xJhYFS4Xh3bSXQmXb/d3byekUnPuk3YqJf7N6FwbSr5toHJUHUm+HU
FwteqSOhs9OOzh08G0OIBpk2926xaP8fsNp84AO+2dewTljIplPOXuF4XTNBGWKX
H9U2GwrD7OsLQQPwYuQdteYgMF5L2Vl/5m1lAEOHDgFNoykZqzaIABwy+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCo/xmArHBZpVRRZp3Q0hXwJLhcGMB8GA1UdIwQY
MBaAFMZ5Ui64klidc2SvV5pyQEDpKfCqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80NWM5ODEtMTc4MC00YzY2LTlmOTgt
ZGMxMGQ1ZDNiZDgwLzEvS2pfR1lDc2NGbWxWRkZtbmREU0ZmQWt1RndZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80NWM5ODEtMTc4MC00YzY2LTlmOTgtZGMxMGQ1ZDNiZDgw
LzEveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufhMMA0G
CSqGSIb3DQEBCwUAA4IBAQCsE4dfEXkeT8Gu8p2HjoIgdU0iMCGm7isKnAYXyYkZ
nJOag4rqUS+o3fTlFaBsx8Je6DHrtkn1ykLRY72vyJt64ddS07P57McY+MmhqQQ8
aYUuCp85Z+AVQM0IF8ptOgPOMEl4BLZqefioIr8UxVmYGdkfj405ttwn/u+a0EhP
ecAr2UXAdTGWiooq15Fpl9yAAhlydV2mn51l1WycoZuiJsRtmIDQCNql+xaQZZye
HoNvPkpfz2Xpn0VXFkQ/qIK4SwhXgpSYv6yqX4VzThS/RN57f1jRZ1BjqfFilxla
D+RKiAbMhy77mZkpSPMtim1h2k+CNWC2hNZ/OaZqWDOZ
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:38:44 2025 by rpki-client