Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/KVRv651pyHQ8dVr_l4tymesDCSw.roa
File: KVRv651pyHQ8dVr_l4tymesDCSw.roa (raw, json)
Hash identifier: JvVbBoCatKnXO8BpzlopCYV9sbf/iWW1JhRwCYvkFIM=
Subject key identifier: 29:54:6F:EB:9D:69:C8:74:3C:75:5A:FF:97:8B:72:99:EB:03:09:2C
Certificate issuer: /CN=0d3c383b2d395162314b034871b8e94c92384e13
Certificate serial: 018CC49359F193A478DE977EB2963AAC496F
Authority key identifier: 0D:3C:38:3B:2D:39:51:62:31:4B:03:48:71:B8:E9:4C:92:38:4E:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTw4Oy05UWIxSwNIcbjpTJI4ThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/KVRv651pyHQ8dVr_l4tymesDCSw.roa
Signing time: Mon 01 Jan 2024 10:30:40 +0000
ROA not before: Mon 01 Jan 2024 10:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34939
IP address blocks: 193.110.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:59:f1:93:a4:78:de:97:7e:b2:96:3a:ac:49:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3c383b2d395162314b034871b8e94c92384e13
Validity
Not Before: Jan 1 10:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29546feb9d69c8743c755aff978b7299eb03092c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:66:3a:3d:1a:b3:48:01:1f:34:aa:29:ec:
5f:b4:e1:ac:47:55:ea:1d:e2:1f:ab:97:3a:7c:fe:
67:c9:14:f9:58:2b:9d:ad:6a:82:5f:b8:9a:f4:a8:
7e:2e:fe:41:50:7f:52:55:5c:1d:6b:3b:22:cf:9a:
dd:b8:5c:fc:d9:1b:cf:80:4a:ae:86:b8:55:ba:be:
c5:fd:07:35:72:5b:35:fa:55:71:e9:f3:2b:5a:92:
4c:df:52:0d:76:8e:3a:44:fe:51:b9:d3:df:c1:a8:
62:27:32:d2:82:34:d2:17:91:f0:78:31:62:07:c0:
3a:ba:2d:00:22:d3:af:23:d3:15:b6:02:ac:58:89:
0f:1d:6e:30:2d:e4:ee:a5:ed:5d:cc:c9:11:c1:ab:
c1:f5:e3:49:29:b3:86:50:bd:a9:c9:4e:26:89:7e:
6f:95:52:44:57:88:16:cb:96:16:29:5c:7e:c0:00:
24:6d:6d:a6:4a:74:7c:7a:69:15:30:e6:ab:f9:9a:
e2:d6:45:f4:f2:73:ad:42:ae:85:5c:c5:d7:02:32:
36:c8:91:cb:86:76:2a:d3:9e:35:3d:e8:e3:f0:69:
60:92:1a:90:f5:15:b1:57:47:78:cf:8f:97:b1:98:
f9:00:cd:12:d0:ae:25:69:ca:4a:c0:9b:59:8a:7e:
18:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:54:6F:EB:9D:69:C8:74:3C:75:5A:FF:97:8B:72:99:EB:03:09:2C
X509v3 Authority Key Identifier:
keyid:0D:3C:38:3B:2D:39:51:62:31:4B:03:48:71:B8:E9:4C:92:38:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTw4Oy05UWIxSwNIcbjpTJI4ThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/KVRv651pyHQ8dVr_l4tymesDCSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/DTw4Oy05UWIxSwNIcbjpTJI4ThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.81.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:18:c4:6d:5c:9a:e9:82:55:f8:f2:df:a5:2e:1a:03:ef:b8:
30:cd:4e:c1:e2:03:bb:0b:39:03:e8:d1:03:46:23:df:e2:89:
1a:a2:e7:61:76:76:29:e3:be:33:90:71:97:82:8c:67:92:3d:
96:da:e1:fe:33:21:7d:13:0b:82:81:12:1e:f6:f5:15:c1:4b:
46:21:bc:14:fd:b0:49:72:14:f5:19:e4:cb:39:d3:1c:d3:3b:
66:da:cf:be:b9:5f:d6:61:6a:6a:e1:5c:c4:ec:1f:ad:58:f7:
96:28:71:0c:f2:8d:68:c1:f6:20:10:47:b5:92:81:b0:a4:5d:
f5:85:46:d9:d6:93:d3:ad:0d:2f:94:b5:19:fd:bc:13:33:b1:
7e:ff:91:5d:ba:42:f0:58:56:f4:dc:2e:fe:a7:99:b8:db:24:
1e:48:00:b0:29:22:0b:27:7b:11:8e:c6:11:49:1d:44:33:d8:
02:c3:fb:b4:b2:58:f5:bc:fc:84:3a:3e:3e:37:f8:28:be:52:
8c:f7:e5:79:6a:5b:7b:14:3c:14:e5:07:99:11:42:5d:38:95:
36:0c:3d:0e:00:d3:d4:f1:d9:42:4b:1b:b6:0d:6e:57:6b:6f:
35:63:ae:ae:20:27:79:e4:1d:b4:45:fb:e5:97:2e:a1:6b:cb:
6f:84:e1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:43 2024 by rpki-client on console-fra.rpki-client.org