Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/KGXGULqPenaxgRcZexOaxMw7uAU.roa
File: KGXGULqPenaxgRcZexOaxMw7uAU.roa (raw, json)
Hash identifier: a8sv7Oftobeso8n8GcBbyLJbE8e5Okcyojcck4A3GpI=
Subject key identifier: 28:65:C6:50:BA:8F:7A:76:B1:81:17:19:7B:13:9A:C4:CC:3B:B8:05
Certificate issuer: /CN=04feaefea82b6103dc2b8971e9bdda01669a1357
Certificate serial: 01941FFA67B682DDFD02FB9E29BEB1AA78F4
Authority key identifier: 04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/KGXGULqPenaxgRcZexOaxMw7uAU.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198792
IP address blocks: 5.39.224.0/21 maxlen: 21
2a00:fb40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:67:b6:82:dd:fd:02:fb:9e:29:be:b1:aa:78:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04feaefea82b6103dc2b8971e9bdda01669a1357
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2865c650ba8f7a76b18117197b139ac4cc3bb805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:86:5b:55:b5:99:1f:1a:ee:52:6f:6d:53:
d3:4f:f3:bf:d4:83:b1:f9:67:c3:50:c6:70:9f:fc:
12:42:8a:f4:c6:d0:30:90:c1:57:83:4c:75:03:22:
e0:9e:3a:92:0e:a7:2e:01:eb:2f:86:54:3d:b8:12:
78:d3:31:7c:46:9b:6b:39:b3:67:9d:19:0d:41:d0:
0d:1e:34:00:1f:e8:da:cf:6c:71:ca:3b:ca:bd:d9:
0d:59:f5:83:1f:a2:d6:9f:72:f9:37:8f:b3:d4:db:
4b:36:ba:94:7f:92:b3:c3:97:3a:35:7c:23:d5:98:
ea:64:47:c0:1d:f5:17:7c:5e:59:d4:0b:03:2f:a1:
22:76:4f:5e:dd:3b:c1:b2:09:69:b1:cc:a3:25:02:
7d:9d:8f:a7:52:a2:b0:f0:5c:5b:07:c9:a9:c0:40:
87:c6:b0:fc:c1:01:6e:ad:f7:3a:71:c8:dc:fb:a8:
2b:34:53:d0:12:66:f6:5f:c7:04:7d:59:dd:6c:78:
75:87:bf:87:d9:1d:96:db:a2:31:36:b9:2e:6e:14:
ae:73:f6:63:a9:52:1d:87:a1:3c:39:f0:e5:b5:02:
14:c4:7f:93:04:30:85:f4:e3:0e:14:6c:5c:b5:e7:
14:d9:f6:53:17:e7:0e:92:74:ed:a7:67:7f:fb:8a:
9d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:65:C6:50:BA:8F:7A:76:B1:81:17:19:7B:13:9A:C4:CC:3B:B8:05
X509v3 Authority Key Identifier:
keyid:04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/KGXGULqPenaxgRcZexOaxMw7uAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.224.0/21
IPv6:
2a00:fb40::/32
Signature Algorithm: sha256WithRSAEncryption
c8:b0:2f:d7:04:cc:52:fb:06:56:bb:09:c2:ba:e1:74:35:a3:
a6:ae:17:a8:1b:0a:19:c3:84:f9:32:12:d1:1e:2e:c7:d3:8f:
6a:ce:e3:1f:73:2c:07:10:99:17:0b:9b:82:57:52:94:b5:41:
f8:06:87:2e:f5:5f:19:59:6a:f3:90:e8:66:53:5b:74:f0:6f:
bf:36:5a:0c:ca:ca:2f:af:f0:b7:f4:11:76:89:fc:99:f7:30:
d5:c2:8c:60:c5:54:49:00:b8:c4:cb:5c:01:37:84:d3:12:36:
ad:ad:48:8d:52:88:2a:04:3b:60:5b:c0:32:92:fa:3a:ef:e9:
94:af:85:76:d5:ef:9d:5e:f6:e0:99:18:c0:d7:42:fb:0f:e0:
2c:30:12:88:9a:6d:b0:06:0d:fd:89:41:c4:be:5c:5e:2c:50:
49:f6:85:79:7b:45:8a:99:0e:fc:bc:cc:20:62:74:e9:37:bd:
52:d7:b2:23:eb:d5:21:39:c7:3d:cb:92:66:cb:ef:5b:46:81:
b9:5e:4f:8a:2c:92:42:d2:d7:ba:2c:c4:d2:e0:55:5c:07:f4:
d3:ca:51:53:46:21:e9:ec:9e:75:8a:ed:b7:dd:ec:43:a3:a5:
6d:0c:c2:9f:b9:63:84:51:45:92:c5:79:00:32:b7:26:03:26:
2b:7b:07:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:39:37 2025 by rpki-client