Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/kOS9_WYAwaV3sh8NP_52JLZaXUg.roa
File: kOS9_WYAwaV3sh8NP_52JLZaXUg.roa (raw, json)
Hash identifier: lWyW4oplFclTxF5toeTtReuv4VzR4K2YSslEGbPz7+I=
Subject key identifier: 90:E4:BD:FD:66:00:C1:A5:77:B2:1F:0D:3F:FE:76:24:B6:5A:5D:48
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0DA4A996
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/kOS9_WYAwaV3sh8NP_52JLZaXUg.roa
Signing time: Wed 15 Jun 2022 06:52:44 +0000
ROA not before: Wed 15 Jun 2022 06:52:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 194.233.147.0/24 maxlen: 24
195.180.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228895126 (0xda4a996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jun 15 06:52:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90e4bdfd6600c1a577b21f0d3ffe7624b65a5d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d2:24:47:01:b5:56:db:ff:aa:98:e7:42:eb:
54:b6:f7:89:39:51:34:29:93:ad:78:15:a2:aa:07:
46:6d:04:40:3a:fb:eb:83:40:90:51:12:10:85:b1:
0f:11:7d:fa:7d:61:c1:d9:ef:af:d8:97:22:ae:6a:
11:e5:e3:1c:29:79:2f:3a:65:11:f7:6f:2d:8f:e8:
4f:7d:86:1c:54:ff:85:2a:45:56:5c:88:ee:48:fb:
79:f2:b4:f6:54:ad:7c:10:dd:cc:9c:7c:cc:f5:f8:
27:5e:39:89:99:ce:16:fe:0e:5b:04:6e:67:5a:fd:
dc:27:cb:22:ee:83:2a:b0:14:59:fb:eb:6d:ec:ab:
e0:9b:49:00:49:3b:ca:f9:2f:d6:53:28:5c:88:4a:
3f:65:85:03:f7:ed:3d:1d:5f:fd:73:de:6e:80:3b:
22:91:c4:df:b2:25:68:e6:80:44:f0:f9:50:65:11:
2f:b7:79:53:94:58:80:a7:22:fb:ce:08:af:ff:2b:
ab:e0:fb:2c:71:87:6c:4b:71:9b:30:65:a9:1c:f4:
1c:ef:34:d9:25:0c:d0:a3:89:92:27:64:26:1d:80:
69:d3:70:be:06:52:6f:9b:03:ca:cf:7c:6b:dd:93:
6d:15:0c:cf:e4:c4:2d:29:84:db:03:f9:eb:29:d4:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E4:BD:FD:66:00:C1:A5:77:B2:1F:0D:3F:FE:76:24:B6:5A:5D:48
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/kOS9_WYAwaV3sh8NP_52JLZaXUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.147.0/24
195.180.138.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:5a:ed:3f:cf:be:30:13:25:30:7d:5e:c9:56:d7:45:68:4f:
fa:07:17:9c:2c:b6:9f:7a:10:0a:db:87:92:ae:25:28:ae:36:
4b:d9:8c:12:47:45:5f:7c:e0:b4:ff:68:f9:16:ea:83:21:70:
96:2d:31:e5:80:5b:ed:54:23:d9:5e:71:82:27:93:90:3d:48:
06:43:d2:5c:8e:25:8d:1d:fc:91:9a:09:7c:e7:e7:04:4d:be:
d7:4d:73:92:a8:4b:4e:98:64:36:2d:9c:94:ce:59:21:5d:00:
b2:1f:a7:8f:b9:8b:2f:25:1a:0e:a5:99:34:a1:cb:5c:1c:73:
46:ba:df:35:f4:73:83:92:2c:72:b8:46:15:99:e6:ed:75:32:
0c:cf:9f:5f:4f:e1:37:c3:c2:ec:d7:0a:5e:73:4d:2e:ca:ca:
cb:a2:d3:cb:6e:7d:20:ea:73:3f:83:88:fd:6a:2c:d3:b3:f1:
e8:65:96:cb:e5:44:1c:3b:c4:af:c6:0a:3e:48:6b:31:18:1a:
2b:83:bc:d0:6b:ee:14:ca:cc:6a:da:bb:ea:75:6d:53:43:5a:
2a:31:b0:09:da:c3:ba:23:0f:f7:0f:f0:ee:5b:77:79:90:af:
59:c7:e2:24:ea:a1:67:68:83:09:77:de:dc:31:8a:8b:24:f3:
e5:ae:3d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:17 2025 by rpki-client