Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/Kbl-_oYXMYpL8dVcX_bEkvFZlEQ.roa
File: Kbl-_oYXMYpL8dVcX_bEkvFZlEQ.roa (raw, json)
Hash identifier: nhTH9X9DA/Nb46yBwPdXcazKX5Cr8w6pdFuDtUw+RJ8=
Subject key identifier: 29:B9:7E:FE:86:17:31:8A:4B:F1:D5:5C:5F:F6:C4:92:F1:59:94:44
Certificate issuer: /CN=3c653d592d91cbc738c69180186277e8783238af
Certificate serial: 38839DCA
Authority key identifier: 3C:65:3D:59:2D:91:CB:C7:38:C6:91:80:18:62:77:E8:78:32:38:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/Kbl-_oYXMYpL8dVcX_bEkvFZlEQ.roa
Signing time: Sat 01 Jan 2022 10:57:28 +0000
ROA not before: Sat 01 Jan 2022 10:57:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44944
IP address blocks: 188.188.0.0/15 maxlen: 17
185.23.244.0/22 maxlen: 24
217.72.224.0/20 maxlen: 24
2a00:1cf8::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948149706 (0x38839dca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c653d592d91cbc738c69180186277e8783238af
Validity
Not Before: Jan 1 10:57:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29b97efe8617318a4bf1d55c5ff6c492f1599444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:84:32:2c:a7:ef:d8:84:a0:a8:b0:9f:69:
d6:a2:76:fb:63:06:09:73:8c:be:78:5f:7e:c1:34:
e5:4d:1b:c3:9c:bb:1a:77:91:8b:67:fd:f0:eb:c2:
da:c1:12:47:9f:93:c7:60:46:40:f6:e9:0b:40:26:
98:d2:37:46:b1:a6:65:db:be:c3:14:3b:8b:19:62:
4b:5f:67:04:12:4e:f3:bc:32:b9:f9:e8:6e:89:70:
5e:02:83:9c:1f:2b:e8:ba:8e:ac:a4:7f:9c:b9:21:
8f:d6:d9:e3:3b:64:39:09:d5:6a:e7:63:b4:7a:4d:
e2:40:4c:ac:e8:ae:37:00:3b:8a:1f:7d:e2:80:7c:
27:ce:e5:31:b4:01:55:83:2b:19:bb:31:ad:ac:62:
3d:30:ce:a6:c4:f2:7a:3e:1c:7c:54:8f:7c:f8:6c:
6b:fc:6e:0c:3f:cb:f3:ab:5c:51:95:df:2f:6f:9a:
6b:ef:d7:63:02:02:ed:a9:0f:eb:d6:3a:ef:94:97:
dd:6c:32:f2:7a:2a:e5:bc:4a:73:00:98:7a:f2:a5:
0c:70:26:a0:a7:ac:0e:45:96:e3:dc:27:f7:a9:05:
8b:d5:40:76:96:0c:1d:77:f9:64:15:d9:4f:87:f4:
22:c6:83:b6:55:b9:31:58:6b:53:f1:02:91:af:d5:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B9:7E:FE:86:17:31:8A:4B:F1:D5:5C:5F:F6:C4:92:F1:59:94:44
X509v3 Authority Key Identifier:
keyid:3C:65:3D:59:2D:91:CB:C7:38:C6:91:80:18:62:77:E8:78:32:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/Kbl-_oYXMYpL8dVcX_bEkvFZlEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.244.0/22
188.188.0.0/15
217.72.224.0/20
IPv6:
2a00:1cf8::/29
Signature Algorithm: sha256WithRSAEncryption
9c:19:9f:27:18:7e:b0:40:d2:2b:06:4d:91:82:5a:c6:ea:bd:
89:c1:23:d8:8f:d9:3b:5f:99:d9:d8:a1:c4:53:94:5f:ed:aa:
4a:ea:5f:28:0c:81:f7:5c:be:25:99:16:14:0a:58:58:bd:1a:
88:a2:70:d3:ba:d2:6b:70:ff:bc:31:a7:d4:80:ff:09:04:2f:
97:9d:c6:58:68:cf:3a:fd:be:36:03:b7:99:2b:aa:9a:a9:ff:
cb:1d:f8:86:bd:9a:2c:1c:a9:a2:d1:38:1c:0e:ee:8c:95:3b:
97:65:09:7e:e0:01:aa:aa:35:0c:b9:95:1c:84:ea:a7:03:91:
49:9d:d5:58:2a:81:8c:8c:0d:b7:d5:ff:43:32:4d:a0:3a:ab:
42:23:8a:7d:af:3f:96:50:e4:23:68:12:07:85:13:e3:33:a2:
0f:2c:d1:ad:c6:97:b6:56:7a:00:4b:35:a6:6f:50:db:bd:0f:
7c:10:24:a0:96:d3:d6:80:b2:c6:26:83:f0:1c:6e:03:4d:b4:
56:2b:d8:3a:c3:dd:5b:8d:c9:34:c4:3a:c2:4f:f4:87:30:aa:
55:d0:bc:2b:f3:2c:42:81:52:0c:f4:04:f5:40:c8:aa:27:a3:
a3:a9:de:7c:0b:33:01:ae:a5:ef:f8:66:eb:61:41:ce:ef:f0:
2e:96:d0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:18 2024 by rpki-client on console-ams.rpki-client.org