Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/KMIDP9A4Qel6QozXKwgNhF-DP7Y.roa
File: KMIDP9A4Qel6QozXKwgNhF-DP7Y.roa (raw, json)
Hash identifier: qITEjKj2NRIBPqMdepqgOlt23O8noFLsRgPVNdsQ7hA=
Subject key identifier: 28:C2:03:3F:D0:38:41:E9:7A:42:8C:D7:2B:08:0D:84:5F:83:3F:B6
Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Certificate serial: 0192E7FABB2CDE18029ECF57301545C46327
Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/KMIDP9A4Qel6QozXKwgNhF-DP7Y.roa
Signing time: Fri 01 Nov 2024 13:47:01 +0000
ROA not before: Fri 01 Nov 2024 13:47:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56655
IP address blocks: 45.88.200.0/24 maxlen: 24
45.88.201.0/24 maxlen: 24
185.14.97.0/24 maxlen: 24
185.125.168.0/22 maxlen: 22
185.181.60.0/22 maxlen: 22
185.243.216.0/24 maxlen: 24
185.243.217.0/24 maxlen: 24
185.243.218.0/24 maxlen: 24
193.243.189.0/24 maxlen: 24
194.32.107.0/24 maxlen: 24
195.16.73.0/24 maxlen: 24
198.140.141.0/24 maxlen: 24
2a03:94e0::/32 maxlen: 32
2a03:94e1::/32 maxlen: 32
2a03:94e2::/32 maxlen: 32
2a03:94e3::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e7:fa:bb:2c:de:18:02:9e:cf:57:30:15:45:c4:63:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Validity
Not Before: Nov 1 13:47:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28c2033fd03841e97a428cd72b080d845f833fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ac:05:64:19:2c:4d:a1:35:f5:3b:3f:2e:1e:
02:28:d9:ed:f7:2f:ad:b1:25:58:69:bc:7b:ee:9f:
5d:d3:3a:76:3d:e8:da:c3:8b:f6:18:1a:91:8d:1e:
ff:7c:c1:27:5e:db:85:d7:1e:bd:ef:30:a3:39:a0:
55:17:df:00:2a:94:09:30:6c:0f:f7:8c:85:4c:e5:
03:3a:77:47:78:97:e2:7f:05:83:05:13:95:43:90:
89:a8:15:bc:2b:b7:2a:b1:9f:b5:98:8a:21:6e:c4:
c5:a7:6b:d7:5a:35:12:c5:90:4e:58:08:3c:29:19:
b0:86:8a:d5:8f:de:a0:13:68:c3:94:6b:ed:4a:8b:
b0:de:90:c0:8a:d8:52:a8:76:16:c3:10:2b:6e:da:
15:98:48:40:24:9c:f4:5f:cc:9f:4a:bb:52:a4:37:
df:92:a3:c9:21:5c:e6:77:eb:43:2f:c9:e4:e4:58:
3e:8e:3c:1c:21:3f:88:ad:c6:cd:33:bc:f3:97:00:
32:38:e5:9c:7b:97:39:ea:9a:43:8a:61:7a:40:fd:
45:87:8e:b9:cc:a8:7d:e4:b7:db:c5:e3:16:d1:ba:
22:1a:8b:06:06:8d:3d:89:9e:83:87:96:47:2e:77:
35:92:6d:da:a5:e6:61:a4:db:95:df:36:b0:06:39:
d9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C2:03:3F:D0:38:41:E9:7A:42:8C:D7:2B:08:0D:84:5F:83:3F:B6
X509v3 Authority Key Identifier:
keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/KMIDP9A4Qel6QozXKwgNhF-DP7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.200.0/23
185.14.97.0/24
185.125.168.0/22
185.181.60.0/22
185.243.216.0-185.243.218.255
193.243.189.0/24
194.32.107.0/24
195.16.73.0/24
198.140.141.0/24
IPv6:
2a03:94e0::/30
Signature Algorithm: sha256WithRSAEncryption
c1:47:39:ce:de:44:6f:5b:a2:f3:80:9f:a3:d2:5d:50:74:26:
d7:ae:10:2a:77:aa:05:a3:2f:94:1e:9a:93:f6:a0:91:a1:43:
71:2f:6d:32:38:45:72:b1:38:ee:9e:2d:1e:94:57:fe:fd:95:
7f:db:b1:9c:66:88:44:8c:67:28:46:5d:d8:ab:4b:ed:60:a2:
c1:46:96:98:c4:7c:5d:63:fb:57:a7:dc:81:d6:a7:fb:39:16:
b3:e6:57:89:68:9b:42:9b:2a:cc:0c:2c:24:74:e0:9a:e6:b6:
7f:5a:ae:55:85:cf:dd:eb:c5:e6:97:3b:5e:e5:88:a4:42:03:
63:47:86:d8:07:25:3d:5c:4a:d0:4d:36:20:62:0b:97:b5:45:
7b:1b:eb:cb:db:39:8d:8c:77:6d:1a:93:58:a8:c8:26:1c:8c:
69:fe:96:9a:4a:7b:c2:eb:a9:19:74:6a:71:1a:75:e9:4a:41:
b5:86:74:24:37:d3:83:ac:be:a3:ee:14:d7:c6:f2:e5:1d:77:
60:ef:61:f7:51:ea:be:77:67:93:de:13:d4:74:ed:c8:9f:95:
5f:0c:f1:fb:e0:a7:ca:a5:74:98:db:88:8b:68:68:19:8a:cc:
27:5c:31:e0:80:42:4b:ca:6a:24:46:c3:0d:69:4d:ac:f4:0d:
e5:1f:33:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:22 2025 by rpki-client