Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/knx-k64K8qtPJdpjfbdBly0qzMA.roa
File: knx-k64K8qtPJdpjfbdBly0qzMA.roa (raw, json)
Hash identifier: IMguB5nM9IcQmXJ0qeK17lHUHskMg+lyEigOOYrzZIY=
Subject key identifier: 92:7C:7E:93:AE:0A:F2:AB:4F:25:DA:63:7D:B7:41:97:2D:2A:CC:C0
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 0195CF7962835AB0222A9A7BFA492B07414B
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/knx-k64K8qtPJdpjfbdBly0qzMA.roa
Signing time: Tue 25 Mar 2025 22:43:13 +0000
ROA not before: Tue 25 Mar 2025 22:43:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29657
IP address blocks: 45.132.100.0/22 maxlen: 24
45.132.100.0/24 maxlen: 24
45.132.101.0/24 maxlen: 24
45.132.102.0/24 maxlen: 24
45.132.103.0/24 maxlen: 24
2a14:4d80::/32 maxlen: 32
2a14:4d87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cf:79:62:83:5a:b0:22:2a:9a:7b:fa:49:2b:07:41:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Mar 25 22:43:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=927c7e93ae0af2ab4f25da637db741972d2accc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:85:31:78:e8:6a:ba:12:ea:d5:a6:d1:b1:
81:b0:f5:9c:e2:25:f2:df:d8:45:ed:db:44:1c:04:
25:c0:3c:63:e2:9e:4c:a4:11:9d:34:60:d1:df:56:
e7:0f:a1:7f:e2:96:90:fd:cd:e2:7b:3e:f6:64:97:
c1:06:47:7a:66:7e:87:4b:1d:a1:01:66:69:3c:21:
d4:28:1f:11:08:77:01:8e:80:e2:f9:ea:32:e3:a3:
11:0f:02:c3:c9:85:fc:4f:4a:01:71:91:28:74:25:
64:ed:c3:1a:38:21:de:39:eb:21:e2:aa:27:92:6c:
b6:20:9f:e7:7d:de:80:41:13:3a:ca:90:b6:7a:fc:
a1:ce:1a:8a:f1:8c:ef:c8:5d:53:06:ee:1d:e2:57:
62:48:f3:50:82:28:31:a0:67:23:3b:9e:b5:da:0b:
ba:f4:07:3a:41:1d:84:8a:a0:b3:ad:63:80:ec:f5:
9a:4d:bb:b3:15:03:f9:3b:23:35:1f:48:b5:28:38:
a4:86:1a:a0:01:74:1b:d9:74:ac:35:61:2b:c4:44:
7f:94:4b:91:40:58:9d:16:03:7d:00:19:72:ad:76:
13:bd:00:ce:44:ee:7b:a3:96:06:e1:fd:62:cc:5c:
45:55:79:64:b7:52:61:3c:78:de:b0:3b:34:3b:b2:
40:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7C:7E:93:AE:0A:F2:AB:4F:25:DA:63:7D:B7:41:97:2D:2A:CC:C0
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/knx-k64K8qtPJdpjfbdBly0qzMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.100.0/22
IPv6:
2a14:4d80::/32
2a14:4d87::/32
Signature Algorithm: sha256WithRSAEncryption
61:a2:a1:c3:1f:ff:4f:d9:53:22:c5:6f:30:2a:7e:f9:52:36:
25:12:63:94:24:3b:34:94:d3:79:cb:64:b1:2c:8a:5b:03:1f:
96:8e:db:15:9b:00:c1:56:0f:da:f3:34:3e:b3:0e:c7:20:f9:
af:0f:05:52:48:f4:62:3f:82:c8:13:cf:9f:f0:c5:e1:a8:30:
18:c8:6d:93:cd:da:d7:4b:b1:12:51:30:0d:b1:a3:19:13:4c:
4e:36:76:5b:9b:bf:49:c9:57:1d:1e:24:8a:18:44:d8:dc:ae:
62:46:14:87:f6:56:4a:2b:a6:5d:05:02:a8:57:51:f3:e6:cc:
c8:d5:04:45:b2:ac:8f:7f:32:f9:9b:16:4e:07:33:0f:58:0a:
f3:33:cb:cc:e3:d3:50:82:ed:46:b9:02:df:c7:78:25:d3:36:
e1:b0:6f:6f:08:0a:ee:9f:e7:6c:41:86:fe:3a:d4:8b:b0:c9:
32:ec:e1:b3:6c:b0:7c:79:2e:07:31:2b:d6:62:82:c7:97:1b:
bc:72:b4:f8:01:d0:70:13:9c:3e:45:a0:d0:a2:44:21:42:da:
ff:39:1b:ba:72:b5:e2:60:0c:18:df:04:3f:3b:76:3d:af:8b:
16:79:5a:48:94:49:41:9b:2a:00:a9:c3:00:98:98:bc:47:4e:
c7:65:01:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net