Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/526ecd-d54c-4686-afc4-617c79105cb2/1/kix709_VF_kTGS2bxNkEJQA2eiQ.roa
File: kix709_VF_kTGS2bxNkEJQA2eiQ.roa (raw, json)
Hash identifier: xdZLtOuYpyi+D9F7B/gjXGdO6qy8cb66TQpF6OmxMWw=
Subject key identifier: 92:2C:7B:D3:DF:D5:17:F9:13:19:2D:9B:C4:D9:04:25:00:36:7A:24
Certificate issuer: /CN=5f864c6019052d30ef3da57646b860fae4a3c76d
Certificate serial: 061B083C
Authority key identifier: 5F:86:4C:60:19:05:2D:30:EF:3D:A5:76:46:B8:60:FA:E4:A3:C7:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4ZMYBkFLTDvPaV2Rrhg-uSjx20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/526ecd-d54c-4686-afc4-617c79105cb2/1/kix709_VF_kTGS2bxNkEJQA2eiQ.roa
Signing time: Sat 01 Jan 2022 08:55:30 +0000
ROA not before: Sat 01 Jan 2022 08:55:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200780
IP address blocks: 91.234.104.0/22 maxlen: 22
95.178.108.0/22 maxlen: 22
195.35.96.0/24 maxlen: 24
195.133.148.0/22 maxlen: 22
2a10:780::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102434876 (0x61b083c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f864c6019052d30ef3da57646b860fae4a3c76d
Validity
Not Before: Jan 1 08:55:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=922c7bd3dfd517f913192d9bc4d9042500367a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:91:ae:7c:8b:37:01:dc:9b:33:ab:6a:ca:c4:
03:66:71:c3:d9:b0:5b:0d:63:fb:d0:0a:36:44:17:
08:fa:be:43:08:29:3f:8e:6e:81:8e:c7:34:63:4f:
b9:59:11:2d:b8:c2:d2:68:99:9e:1c:e3:fe:17:56:
da:49:1c:96:a9:cf:ac:c6:14:a5:ad:6e:46:4d:05:
6e:e6:80:cc:5e:84:40:d8:09:7e:55:e8:86:61:20:
c4:87:53:df:5a:07:b6:d4:ca:bf:36:d1:9f:a9:6f:
9d:9e:65:87:58:11:fc:8c:7c:0f:fb:1c:5c:3a:34:
84:66:87:e6:70:c8:c4:cc:85:29:87:a3:31:08:10:
cd:15:eb:47:6b:59:e8:44:de:d1:f7:a9:05:49:20:
b9:d9:ff:13:d9:bf:d8:06:dc:94:f7:48:fe:50:77:
6a:30:f7:c3:45:bc:f3:29:52:a7:2c:1c:a3:78:8a:
dc:6d:4c:ee:da:b4:d1:54:04:72:7b:80:3a:3b:f1:
cc:d7:0d:34:3c:09:b4:9f:44:58:d7:83:2d:e0:64:
87:76:38:14:9d:18:58:3f:c3:58:4f:61:68:32:c6:
e8:34:f7:84:e5:76:a8:4c:9f:3a:76:f0:76:21:25:
21:84:c9:5e:d8:a3:33:e3:17:46:a8:d0:f0:5d:79:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2C:7B:D3:DF:D5:17:F9:13:19:2D:9B:C4:D9:04:25:00:36:7A:24
X509v3 Authority Key Identifier:
keyid:5F:86:4C:60:19:05:2D:30:EF:3D:A5:76:46:B8:60:FA:E4:A3:C7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4ZMYBkFLTDvPaV2Rrhg-uSjx20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/526ecd-d54c-4686-afc4-617c79105cb2/1/kix709_VF_kTGS2bxNkEJQA2eiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/526ecd-d54c-4686-afc4-617c79105cb2/1/X4ZMYBkFLTDvPaV2Rrhg-uSjx20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.104.0/22
95.178.108.0/22
195.35.96.0/24
195.133.148.0/22
IPv6:
2a10:780::/32
Signature Algorithm: sha256WithRSAEncryption
25:2b:90:0c:bb:93:78:ba:e9:39:01:d9:45:df:69:39:74:c0:
06:1d:46:98:7b:08:42:12:53:bb:4e:81:ac:30:fc:66:9c:29:
61:05:13:9f:14:59:67:78:7e:ad:28:34:97:94:68:30:06:8c:
60:71:ee:1e:6e:41:02:11:16:18:4c:07:60:76:f3:80:60:51:
2d:60:f5:2f:e3:4d:15:5c:11:ce:f3:aa:07:72:34:a4:e9:98:
9f:c3:ba:8b:2e:7b:bb:c8:86:88:1b:b2:78:1c:89:dd:b3:a6:
72:29:9f:f5:06:a8:06:3e:68:91:43:4b:b8:16:28:1e:8a:3e:
a0:ab:98:2c:78:1a:c7:ef:e2:d1:77:82:3b:8b:8f:07:ba:0e:
1b:4a:7e:d6:38:38:63:a3:95:b7:bf:7c:0e:6f:66:a5:5b:4c:
a1:96:78:87:71:a2:66:0f:ca:10:47:98:65:c3:fd:85:82:d0:
96:8b:6e:b3:82:96:cd:19:31:8f:1b:27:a5:be:9c:a0:7a:3d:
fc:82:c3:32:f5:f8:8f:39:ca:4e:26:f3:75:f6:fd:1e:ff:62:
cb:0a:e5:32:ce:41:e0:55:ac:8d:8d:68:84:3a:99:d3:47:28:
f9:39:35:fd:5b:7b:c9:44:4c:b1:35:b3:49:bb:6e:38:85:1c:
ad:ee:c1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:30 2024 by rpki-client on console-fra.rpki-client.org