Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/kRDMo16QxnzpDZp8ho21oFLEQFc.roa
File: kRDMo16QxnzpDZp8ho21oFLEQFc.roa (raw, json)
Hash identifier: dCYxTOC+dPCqAApiwWXrc/jzTgWLPRuxwIlE6xBri1w=
Subject key identifier: 91:10:CC:A3:5E:90:C6:7C:E9:0D:9A:7C:86:8D:B5:A0:52:C4:40:57
Certificate issuer: /CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
Certificate serial: 02B974D7
Authority key identifier: 48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/kRDMo16QxnzpDZp8ho21oFLEQFc.roa
Signing time: Wed 22 Jun 2022 15:34:32 +0000
ROA not before: Wed 22 Jun 2022 15:34:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 130.193.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45708503 (0x2b974d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
Validity
Not Before: Jun 22 15:34:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9110cca35e90c67ce90d9a7c868db5a052c44057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:81:52:a5:7d:c3:56:de:27:4d:3f:bc:7a:52:
e5:55:e4:ff:d1:07:c3:fb:e3:6c:5b:ba:0a:b5:49:
92:05:a5:dc:8f:d6:93:6b:e3:68:0d:52:66:23:43:
ce:94:73:0c:bc:30:4c:91:24:14:8e:b7:f9:09:d7:
44:02:69:6b:94:f9:83:e0:93:53:e9:cc:30:17:0f:
c3:ae:fe:02:85:f4:00:13:f7:99:51:e4:b7:ed:67:
5c:d2:b9:19:ca:7f:e0:a5:37:76:1f:10:76:76:34:
9e:8d:86:81:e7:72:6e:4c:c1:86:56:1b:dd:29:98:
d3:17:72:2c:e7:33:91:46:df:21:b9:41:76:9d:ce:
00:12:68:8d:80:ae:c4:aa:9a:3e:46:a6:03:5b:0e:
0b:b2:ec:40:1e:7b:e4:62:97:cb:53:38:49:83:e6:
b8:da:1d:f5:50:3a:c2:bb:f1:64:5e:07:d0:3f:bf:
95:89:a8:fb:f9:f6:6e:9b:38:45:27:e4:38:ac:27:
f6:f6:f1:fb:1a:06:c4:37:b2:2d:bb:13:a7:d1:01:
f1:3d:e7:85:33:25:59:87:7f:3e:8e:f0:a4:ab:1b:
55:f7:63:5e:27:49:de:81:1f:2e:e6:9c:d8:0b:ef:
64:36:47:51:39:54:a9:26:18:61:94:fa:40:ad:e5:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:10:CC:A3:5E:90:C6:7C:E9:0D:9A:7C:86:8D:B5:A0:52:C4:40:57
X509v3 Authority Key Identifier:
keyid:48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/kRDMo16QxnzpDZp8ho21oFLEQFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/SPjN0W88Ppoig1oYYjE2_U8ODdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.75.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b8:e3:e9:a5:61:8b:d1:3d:9d:33:6b:5a:78:bd:74:0e:c7:
77:78:e2:2e:91:f1:50:49:1b:2c:c8:ff:e4:4c:bf:d9:e9:49:
79:e1:a9:aa:06:19:78:e1:af:d6:3f:04:7e:e8:0f:ff:1c:33:
26:55:eb:0c:5b:52:6f:1d:d8:d6:87:78:10:72:60:ac:67:d7:
ca:e7:61:5a:94:a6:2a:27:f0:01:85:6d:f5:47:4f:a4:ff:10:
07:b2:47:62:13:bd:2d:f9:dd:58:49:64:06:29:6d:30:b4:1c:
7a:64:a4:46:e5:1e:f8:b2:8c:ac:9e:3f:cb:12:9c:4c:4a:17:
9c:d5:33:37:c0:87:ae:ec:7a:60:7c:0e:44:2f:c6:c8:c1:e7:
4d:1c:90:c6:41:10:f9:49:42:af:4a:45:32:4b:da:6b:b7:a0:
e2:90:5e:4c:98:cc:1e:df:36:d5:18:c0:40:c9:00:16:35:af:
99:e8:9f:e6:08:54:36:4b:7f:e3:3b:d0:62:a2:6e:32:56:44:
65:72:01:fa:ff:25:07:a5:dd:f1:f2:02:94:b1:0e:0f:65:bb:
77:81:23:73:00:62:d5:be:df:10:37:3b:e5:99:1e:59:cf:9f:
6b:67:40:b0:66:12:87:86:62:ff:7a:47:09:8f:0f:5d:4a:df:
67:f9:09:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:31 2023 by rpki-client on console-fra.rpki-client.org