Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/KgY46sCJUiJO3B9kMUNlqgIynYI.roa
File: KgY46sCJUiJO3B9kMUNlqgIynYI.roa (raw, json)
Hash identifier: t7glnKn6v1cVmSWFcqmruicQ5F6t9Cu5L7uOpUI0ZwI=
Subject key identifier: 2A:06:38:EA:C0:89:52:22:4E:DC:1F:64:31:43:65:AA:02:32:9D:82
Certificate issuer: /CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Certificate serial: 018570C2DC006128A3D79465C36B8D6405B2
Authority key identifier: C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/KgY46sCJUiJO3B9kMUNlqgIynYI.roa
Signing time: Mon 02 Jan 2023 04:34:56 +0000
ROA not before: Mon 02 Jan 2023 04:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39758
IP address blocks: 93.113.25.0/24 maxlen: 24
77.81.138.0/24 maxlen: 24
77.81.137.0/24 maxlen: 24
89.36.21.0/24 maxlen: 24
89.42.110.0/23 maxlen: 23
193.203.204.0/23 maxlen: 23
93.113.212.0/24 maxlen: 24
46.102.232.0/23 maxlen: 23
93.115.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:dc:00:61:28:a3:d7:94:65:c3:6b:8d:64:05:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Validity
Not Before: Jan 2 04:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a0638eac08952224edc1f64314365aa02329d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:15:c5:56:26:c7:e0:bc:bb:6d:3b:09:8c:78:
a4:a9:ac:2e:6d:d9:7d:6b:3e:fa:49:86:89:a6:4c:
79:17:00:f2:8a:25:f7:9a:32:0a:a7:81:89:bb:09:
c2:4e:e6:8e:34:47:a6:01:7b:8f:cc:51:61:47:1e:
65:19:26:23:91:56:0c:a5:3d:37:8d:25:a3:99:f9:
9c:e6:e5:33:e3:b9:44:83:29:43:f6:fd:a8:6b:e0:
fc:3f:2d:6b:75:0a:0d:ca:e3:e6:1e:64:25:fa:ee:
1f:64:b9:78:43:07:6d:b7:b0:c9:34:01:20:a9:8d:
c1:6c:22:83:d9:5f:04:72:23:15:d5:38:79:d5:62:
5d:0c:57:f9:f0:84:bd:ba:72:32:d8:5f:80:d0:07:
65:3a:ab:ed:3e:db:82:c3:b6:ca:a6:bf:0d:91:c7:
29:19:a6:5d:67:ef:7b:42:56:58:7d:4b:db:19:6d:
c1:d5:fd:c9:77:f2:07:d9:f8:c7:77:b4:3a:df:46:
0e:91:d7:9e:b2:a6:db:90:a9:aa:a7:8a:4e:6d:a1:
da:ab:b4:0d:12:b9:63:f4:23:55:aa:0f:4c:d1:b3:
05:bd:9a:03:ce:08:ab:d8:de:24:2e:a2:17:3e:de:
ac:5f:43:a5:11:4f:d6:0e:be:0b:50:9f:36:b7:a7:
21:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:06:38:EA:C0:89:52:22:4E:DC:1F:64:31:43:65:AA:02:32:9D:82
X509v3 Authority Key Identifier:
keyid:C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/KgY46sCJUiJO3B9kMUNlqgIynYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/xRhkSsRh3dLPS8WtXCtCYlNcOMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.232.0/23
77.81.137.0-77.81.138.255
89.36.21.0/24
89.42.110.0/23
93.113.25.0/24
93.113.212.0/24
93.115.248.0/22
193.203.204.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:9f:d9:96:19:89:ff:96:c1:29:03:05:8c:d8:85:4a:05:b5:
50:46:86:1d:70:32:69:5e:1c:54:ce:1f:d5:d3:eb:b0:b2:07:
56:c0:3c:cd:8e:9c:67:bb:60:73:e0:7a:b9:95:f6:87:57:9e:
25:3f:63:a2:1b:2d:eb:df:71:d8:db:b0:32:81:a0:32:b1:5a:
67:3a:e9:13:51:f0:c0:e1:1d:5e:33:50:a1:24:4e:db:75:a0:
37:8e:9d:3e:55:f7:7f:d7:fa:c9:97:e1:02:7e:f7:77:04:ab:
30:32:96:68:05:8b:bf:45:0b:07:92:cb:7a:e6:d5:18:7a:70:
d5:be:50:a3:e3:e3:b2:c4:72:5c:9d:85:d0:8f:0e:81:cd:9d:
93:b6:e4:ac:a4:81:c9:22:87:e1:1c:72:ad:7c:09:75:e6:dd:
fc:1b:f5:8f:be:7d:9f:e3:19:35:f5:a9:8f:bb:d7:74:a8:10:
c0:87:49:d1:97:fc:c8:36:dd:5b:95:60:48:d7:d5:ec:48:b8:
6f:5f:d7:16:11:e3:6d:ee:c2:55:d0:01:e0:22:0f:78:cd:99:
d0:68:54:f4:cc:ce:1b:30:ad:e7:45:49:95:a2:37:d4:45:91:
ec:33:f4:34:7b:99:f7:17:d8:cd:f2:78:78:09:e8:1c:e8:e0:
03:87:9e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:47:07 2025 by rpki-client