Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/KSgdLldEqa59Zql4-IziLX55TPU.roa
File: KSgdLldEqa59Zql4-IziLX55TPU.roa (raw, json)
Hash identifier: XUqaNezvDdSkEpv/qzEgciAhag3ntITFRCYMF7kPQRw=
Subject key identifier: 29:28:1D:2E:57:44:A9:AE:7D:66:A9:78:F8:8C:E2:2D:7E:79:4C:F5
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0195B39D0FFE189CC972FE730EE958F07216
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/KSgdLldEqa59Zql4-IziLX55TPU.roa
Signing time: Thu 20 Mar 2025 12:52:49 +0000
ROA not before: Thu 20 Mar 2025 12:52:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62442
IP address blocks: 185.136.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:9d:0f:fe:18:9c:c9:72:fe:73:0e:e9:58:f0:72:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Mar 20 12:52:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29281d2e5744a9ae7d66a978f88ce22d7e794cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:82:04:ca:67:56:d0:b0:a3:f0:73:d5:f2:
2b:22:ca:58:25:e4:d5:7f:ad:1c:0b:83:db:c3:f4:
fb:3f:85:0b:69:15:38:e0:63:bb:10:3d:e3:ef:92:
1e:7a:4c:cc:6f:d7:f3:a9:87:72:c9:30:a5:2a:00:
f3:8b:fa:40:3a:bf:4d:22:be:9a:df:51:46:e5:5d:
12:6f:c3:b0:5e:9f:bd:a7:05:12:8c:ae:b8:34:65:
e8:4b:c7:7a:e7:76:28:4b:6a:ab:28:ba:d3:b5:7b:
37:50:65:a8:fa:af:0d:a3:5a:d4:9f:71:ce:30:d6:
f7:a6:7d:a7:8b:f4:e3:34:06:c1:c2:d0:75:ca:e3:
10:65:72:a2:fc:0e:9c:48:46:ee:56:93:f6:de:32:
43:c2:1c:8d:dc:30:88:e1:36:58:8f:36:23:87:91:
1a:30:dc:51:88:6b:c2:7f:92:9e:6d:01:bc:41:c6:
a3:a5:c8:84:b0:3b:ba:02:f9:57:3f:5d:90:aa:ec:
2c:03:09:2a:6d:a4:8d:95:fc:38:c8:37:59:51:3b:
e1:c7:27:62:08:73:b6:89:b2:59:2e:71:0c:a7:14:
57:f1:dc:7a:d6:0e:63:64:39:0d:03:09:4b:85:61:
41:e2:a6:3f:27:36:fd:c7:6d:4e:2e:fc:92:3b:f2:
a0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:28:1D:2E:57:44:A9:AE:7D:66:A9:78:F8:8C:E2:2D:7E:79:4C:F5
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/KSgdLldEqa59Zql4-IziLX55TPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.133.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c1:a3:a0:ef:cf:15:51:e4:be:fe:a1:31:a5:1a:f8:9c:47:
b4:31:82:6b:3e:51:0b:19:93:a4:d8:ba:14:d4:13:2c:55:a9:
18:71:12:15:e8:87:3d:c6:d3:28:fe:67:b6:b0:52:42:f1:a9:
41:0c:7b:fc:67:1c:fe:4b:ef:ee:09:b6:67:c2:52:c2:43:c9:
49:6c:68:13:5c:2c:e2:91:ca:27:01:68:d9:c7:85:d0:fb:17:
02:1f:f1:42:d7:62:bf:00:03:fc:f5:e4:f7:25:9f:a9:bb:bb:
9f:da:18:eb:30:29:00:ca:45:dd:72:1f:a9:7a:35:b8:74:1c:
7d:69:4d:98:ff:9d:e0:0e:7a:0a:39:fa:3b:50:d8:17:e8:49:
3d:b5:3d:8c:17:0a:d8:14:71:82:05:80:18:47:91:4b:0f:7b:
32:9b:38:bd:f4:60:3f:5c:93:b8:5d:be:0d:ab:9e:e7:dc:35:
3a:28:71:c0:16:32:45:b9:a4:8e:85:c0:5f:7a:26:d1:57:df:
1e:b2:59:8d:3a:0f:39:17:48:b8:ab:33:11:00:91:14:a3:24:
f8:46:42:6b:60:ee:67:ba:6f:5a:ca:7c:dd:ac:d8:66:77:14:
42:5e:6d:7d:85:a1:6a:50:3c:02:da:08:89:d1:85:a7:13:f4:
d7:bc:6a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:11 2025 by rpki-client on console.sobornost.net