Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/KMJlwxRhktpoV-oz9eLAhmKZXJg.roa
File: KMJlwxRhktpoV-oz9eLAhmKZXJg.roa (raw, json)
Hash identifier: jWwIrDJoRxgbo/pUzOpB4jTtSe1i2v9p/mhe6qAn5WE=
Subject key identifier: 28:C2:65:C3:14:61:92:DA:68:57:EA:33:F5:E2:C0:86:62:99:5C:98
Certificate issuer: /CN=983dd29a579875009dbc4139668b148b8884b637
Certificate serial: 01856EA683104C92AE849178153947E8CCEA
Authority key identifier: 98:3D:D2:9A:57:98:75:00:9D:BC:41:39:66:8B:14:8B:88:84:B6:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD3SmleYdQCdvEE5ZosUi4iEtjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/KMJlwxRhktpoV-oz9eLAhmKZXJg.roa
Signing time: Sun 01 Jan 2023 18:44:44 +0000
ROA not before: Sun 01 Jan 2023 18:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43872
IP address blocks: 185.179.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:83:10:4c:92:ae:84:91:78:15:39:47:e8:cc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983dd29a579875009dbc4139668b148b8884b637
Validity
Not Before: Jan 1 18:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28c265c3146192da6857ea33f5e2c08662995c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:db:2f:0b:be:55:97:46:15:f1:b4:74:96:
ad:20:23:25:f1:4a:f7:fa:8c:ae:1b:8d:c8:14:4d:
98:35:d4:3e:8e:04:20:ff:a2:ac:ac:44:84:d0:f6:
eb:73:a0:a9:65:0f:64:11:d4:e4:20:91:6b:d9:c7:
f9:b9:6c:6a:0d:ce:b6:d4:9e:aa:6e:92:39:2d:bd:
2b:bd:22:55:b0:06:18:a4:2f:2d:80:42:b7:36:da:
93:fd:24:da:32:2e:12:3f:83:99:dc:2a:bb:2a:9d:
cc:a8:25:62:af:50:bc:54:52:53:75:c7:1b:2e:9c:
1d:ea:b3:56:66:0e:12:ff:f3:c9:5b:7a:c0:ea:67:
2a:e7:57:21:0d:31:fb:f3:3d:17:75:c5:5f:1d:c7:
11:dd:3f:6c:1c:f1:75:82:f6:4e:ea:21:da:e9:bb:
db:56:dc:fa:d6:26:8e:71:66:35:c6:da:f3:fc:3a:
96:11:39:02:98:b5:c5:34:aa:79:55:b6:c5:05:62:
4f:34:f4:b0:1d:6e:77:a4:ce:b1:7c:06:c1:de:d4:
a4:06:bb:19:4d:64:87:a1:37:eb:74:ff:b6:d2:ac:
3c:ee:56:e1:28:25:0d:36:90:1f:86:cd:d6:6e:6f:
d4:22:1d:6f:b5:2c:4b:45:30:03:6b:0b:38:3b:d4:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C2:65:C3:14:61:92:DA:68:57:EA:33:F5:E2:C0:86:62:99:5C:98
X509v3 Authority Key Identifier:
keyid:98:3D:D2:9A:57:98:75:00:9D:BC:41:39:66:8B:14:8B:88:84:B6:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD3SmleYdQCdvEE5ZosUi4iEtjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/KMJlwxRhktpoV-oz9eLAhmKZXJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/mD3SmleYdQCdvEE5ZosUi4iEtjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.120.0/22
Signature Algorithm: sha256WithRSAEncryption
14:1a:12:dc:df:97:68:62:54:37:5b:da:62:65:c4:c2:f4:4d:
cb:82:6c:2e:b1:1c:1b:1b:8f:9c:17:67:7c:b0:7b:f8:19:93:
d5:e7:53:f5:84:86:f9:d2:e8:e5:a3:70:13:7c:66:37:df:c9:
2a:d0:70:1f:b9:bb:4e:cd:fa:f8:74:2d:59:cd:e3:81:49:24:
f3:51:dc:6d:00:10:24:2d:c2:c9:2f:a1:f3:b1:bb:d8:6f:80:
61:91:7b:45:f3:87:fa:98:42:02:6e:5a:ad:5b:9a:82:a9:40:
f4:38:00:8b:5f:72:9b:ee:5e:53:82:37:e9:1d:fd:a9:ae:9c:
a3:67:b7:47:57:1b:86:f0:0e:cc:a8:d5:29:d0:98:1e:a2:7b:
50:02:8b:aa:0a:ec:94:ec:0c:34:e7:a5:49:63:2e:8b:dd:73:
16:f5:ca:05:40:54:0b:f3:53:dc:9c:93:28:ae:00:d0:9f:35:
30:da:2f:b5:a7:b5:57:14:85:dd:fc:b5:e8:21:0b:44:45:2b:
a1:aa:50:60:63:2a:7b:c2:83:e3:2e:1b:09:52:df:76:07:bb:
be:9c:a2:8a:b2:74:03:cc:c6:8a:4b:86:d7:96:39:86:c2:06:
51:07:0c:04:44:ae:d7:5d:f5:71:34:4f:96:7c:2c:e0:07:e9:
d5:12:d8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:44 2024 by rpki-client on console-fra.rpki-client.org