Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/KTWjCpwyB71eHCbI5t8oPlCgNRY.roa
File: KTWjCpwyB71eHCbI5t8oPlCgNRY.roa (raw, json)
Hash identifier: 0CVvsvuj4PTPAFmVUGXz45hRsC7kKX+zReEGH6JV1M4=
Subject key identifier: 29:35:A3:0A:9C:32:07:BD:5E:1C:26:C8:E6:DF:28:3E:50:A0:35:16
Certificate issuer: /CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Certificate serial: 0194266BA5D9E1B5D7E61527F6BAE0D8FFAB
Authority key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/KTWjCpwyB71eHCbI5t8oPlCgNRY.roa
Signing time: Thu 02 Jan 2025 09:49:36 +0000
ROA not before: Thu 02 Jan 2025 09:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34427
IP address blocks: 77.87.160.0/21 maxlen: 21
77.87.164.0/23 maxlen: 23
185.38.232.0/22 maxlen: 22
193.84.9.0/24 maxlen: 24
195.80.226.0/24 maxlen: 24
2a02:720::/32 maxlen: 32
2a02:720:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a5:d9:e1:b5:d7:e6:15:27:f6:ba:e0:d8:ff:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Validity
Not Before: Jan 2 09:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2935a30a9c3207bd5e1c26c8e6df283e50a03516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:c4:9c:54:02:e5:66:87:1e:49:e6:e9:b6:
47:66:64:54:5c:6a:76:ce:bf:c8:5b:33:37:9c:3b:
8e:28:45:6a:be:88:a7:21:93:6d:4c:29:c6:df:f0:
c4:b3:05:21:8b:a9:5c:ca:2e:bf:59:fe:85:f9:f7:
67:91:55:63:c4:fc:14:8f:39:1b:41:76:db:fa:83:
a3:e3:49:41:ad:66:38:a6:56:9d:38:63:11:8d:7b:
d7:02:c3:8f:48:61:69:95:08:d9:98:59:a2:04:f2:
ce:ea:f9:97:60:c7:a8:69:5c:8a:42:a0:0e:8f:0a:
2d:c0:67:7a:f6:21:79:3a:aa:dd:95:f2:e8:6a:90:
53:97:94:63:5e:ca:ff:42:ab:07:1b:69:27:cd:78:
b3:44:54:8a:9e:cf:b3:0b:68:d1:db:be:23:fd:4b:
35:c0:21:c6:95:0b:45:52:22:68:f9:57:f0:94:3e:
e5:8f:ba:68:b9:e2:2a:78:30:2b:17:66:ac:96:52:
27:6b:91:f0:32:78:c6:61:2f:7e:ee:b5:0e:8a:57:
27:53:40:19:35:65:b9:b0:aa:52:2b:db:5a:bd:a9:
6b:77:85:e6:b4:2d:30:29:a1:79:75:01:34:09:e1:
61:f3:cc:79:92:e6:9b:f0:5b:67:0a:ba:c0:65:be:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:35:A3:0A:9C:32:07:BD:5E:1C:26:C8:E6:DF:28:3E:50:A0:35:16
X509v3 Authority Key Identifier:
keyid:47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/KTWjCpwyB71eHCbI5t8oPlCgNRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.160.0/21
185.38.232.0/22
193.84.9.0/24
195.80.226.0/24
IPv6:
2a02:720::/32
Signature Algorithm: sha256WithRSAEncryption
5d:17:51:7c:67:31:c2:a6:b2:0e:4a:2f:1e:6a:9d:39:ba:6d:
28:bd:c9:4c:2e:d5:f7:d2:36:ca:a1:cd:78:4c:fd:76:80:04:
42:96:c2:9b:84:70:c6:f0:18:30:3e:02:95:e4:e9:3d:61:15:
ac:a1:14:7a:55:dd:ae:0b:a1:9e:67:02:6c:d0:ab:01:69:9a:
27:ce:be:61:66:86:85:01:e1:9e:21:dc:81:13:0b:eb:fc:c9:
87:a1:1e:30:02:34:ae:09:a1:60:bd:92:1f:ed:d1:07:d6:53:
ae:13:74:39:7a:b8:e4:e3:b8:17:ba:08:3d:64:c1:ed:bc:b0:
08:38:16:70:52:db:62:3d:33:27:3c:fe:6b:78:68:1b:86:6e:
a5:c8:dc:25:c5:85:db:f3:61:75:9e:c1:e8:03:db:db:9b:c4:
cd:cc:26:94:fb:a0:19:9f:50:74:d4:31:4e:b3:91:00:2a:2c:
74:fa:d5:a6:dd:52:15:72:5a:e4:ee:7a:40:f3:2a:19:6d:6f:
9b:f1:98:f2:59:e5:a3:b9:12:37:82:4f:4e:f4:2a:5e:15:de:
45:12:26:0a:43:ba:66:3e:48:18:14:aa:95:73:5f:ca:d2:d7:
a3:05:36:96:26:72:d7:ab:b9:9e:23:2d:fa:70:32:35:92:3c:
83:94:54:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net