Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/KGU3BAnUBKPs5bEZeekkZk4K6fM.roa
File: KGU3BAnUBKPs5bEZeekkZk4K6fM.roa (raw, json)
Hash identifier: cNEvMDpyd9+wSBJ4QbzgSbjzQuWUz7bYv9S9uLAGPC0=
Subject key identifier: 28:65:37:04:09:D4:04:A3:EC:E5:B1:19:79:E9:24:66:4E:0A:E9:F3
Certificate issuer: /CN=78bc6621ac9c88927bd35a6aef791d6ff629c696
Certificate serial: 01856F26B768704E0A7D0C13DA5445EDE871
Authority key identifier: 78:BC:66:21:AC:9C:88:92:7B:D3:5A:6A:EF:79:1D:6F:F6:29:C6:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLxmIayciJJ701pq73kdb_YpxpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/KGU3BAnUBKPs5bEZeekkZk4K6fM.roa
Signing time: Sun 01 Jan 2023 21:04:46 +0000
ROA not before: Sun 01 Jan 2023 21:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3339
IP address blocks: 188.215.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:b7:68:70:4e:0a:7d:0c:13:da:54:45:ed:e8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78bc6621ac9c88927bd35a6aef791d6ff629c696
Validity
Not Before: Jan 1 21:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2865370409d404a3ece5b11979e924664e0ae9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6d:0c:38:53:e6:89:e8:17:15:74:d2:e3:77:
58:9f:30:9e:83:db:cd:56:b1:08:13:f2:e0:8e:db:
50:45:cc:41:28:e8:11:7f:3d:c2:82:1a:1a:bf:8c:
e8:58:e6:7a:7f:78:ff:c5:ed:b5:1d:8e:9f:c0:cf:
3b:67:e0:48:61:68:77:ed:ed:14:57:18:65:c2:36:
a2:06:0e:3f:56:35:a7:38:d1:89:2c:13:7e:f5:ba:
89:78:25:70:b3:6a:95:97:46:a6:16:07:6f:44:e4:
3e:a8:dc:8a:e8:e5:4b:f2:2f:ea:bc:20:f2:83:04:
a1:82:19:39:3b:3d:b7:29:5e:fc:9d:f8:56:ec:85:
0c:56:ff:fb:90:c1:7d:ed:a3:4b:70:20:56:d2:d6:
1d:92:41:36:0b:78:06:48:e0:9c:9b:5e:d5:f9:36:
ba:90:ad:bc:85:bc:07:d1:e1:2b:78:97:f2:49:58:
8f:0f:5b:55:3d:83:4a:bd:01:04:26:6c:f8:4c:0a:
2f:5f:65:83:c0:83:95:f3:54:78:f8:2a:79:a2:4b:
56:65:97:3e:2e:06:5e:c1:45:29:99:b1:6f:bc:ba:
c2:1f:e7:33:6d:f9:6f:3f:4e:c2:8a:be:87:98:7a:
a5:a6:c3:69:19:b0:84:16:46:cc:1b:d5:22:bb:84:
04:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:65:37:04:09:D4:04:A3:EC:E5:B1:19:79:E9:24:66:4E:0A:E9:F3
X509v3 Authority Key Identifier:
keyid:78:BC:66:21:AC:9C:88:92:7B:D3:5A:6A:EF:79:1D:6F:F6:29:C6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLxmIayciJJ701pq73kdb_YpxpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/KGU3BAnUBKPs5bEZeekkZk4K6fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/eLxmIayciJJ701pq73kdb_YpxpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.224.0/22
Signature Algorithm: sha256WithRSAEncryption
84:66:6d:7c:6e:47:7a:bc:82:a3:f9:7e:ba:8f:12:78:c6:c3:
9f:72:be:99:04:fd:d7:d4:ca:6e:c7:7a:64:f3:85:13:68:84:
17:a0:8b:dc:38:b9:9e:07:f7:5c:56:79:66:6b:6d:de:2f:1e:
f7:dc:8b:3c:68:b8:0c:ba:e3:eb:95:6e:b4:e6:8e:99:54:a0:
6d:60:81:dd:98:97:e6:0b:52:1e:89:e1:08:2f:26:58:4f:d3:
dc:46:60:ba:e9:01:a8:29:c8:40:cd:a3:7b:e5:5c:53:91:ec:
a5:a4:44:80:f3:d7:ba:45:1b:09:d0:ba:47:d6:ee:61:b1:21:
2b:90:7e:27:be:d5:9e:e4:b6:d3:4d:ee:30:3d:14:61:f5:b3:
a5:da:a5:35:d9:44:78:cf:da:0a:e6:3f:7e:c2:18:42:2b:3a:
0b:b5:8d:e0:21:3f:6d:5b:d0:ef:74:00:13:04:0d:bf:65:f4:
ff:d4:c2:3e:7d:3e:3b:3a:02:fa:cd:28:98:42:ee:6e:ac:c1:
62:4b:3e:e6:2e:60:a1:89:fb:80:c1:b6:74:0f:b5:01:6e:31:
93:ba:27:b7:ad:34:4d:8d:6c:af:da:7d:b2:2d:71:a2:15:62:
0e:68:05:06:e3:68:ce:38:e0:70:e3:38:fc:2d:ca:11:ce:78:
1d:c0:b9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 10:35:12 2023 by rpki-client on console-fra.rpki-client.org