Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/KoG2oojGlCdGqDDu5FePWugdels.roa
File: KoG2oojGlCdGqDDu5FePWugdels.roa (raw, json)
Hash identifier: 4uQTg/o6NyCg5ALnbV/5lgpCHaEirx63a8j6rqACCm4=
Subject key identifier: 2A:81:B6:A2:88:C6:94:27:46:A8:30:EE:E4:57:8F:5A:E8:1D:7A:5B
Certificate issuer: /CN=0b175873adeb83c8f16a2e0e3cbb251e58833a87
Certificate serial: 01856F4B48A226C2134CFB0A38E341050B22
Authority key identifier: 0B:17:58:73:AD:EB:83:C8:F1:6A:2E:0E:3C:BB:25:1E:58:83:3A:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxdYc63rg8jxai4OPLslHliDOoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/KoG2oojGlCdGqDDu5FePWugdels.roa
Signing time: Sun 01 Jan 2023 21:44:42 +0000
ROA not before: Sun 01 Jan 2023 21:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49882
IP address blocks: 185.88.184.0/22 maxlen: 22
185.88.184.0/24 maxlen: 24
91.92.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:48:a2:26:c2:13:4c:fb:0a:38:e3:41:05:0b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b175873adeb83c8f16a2e0e3cbb251e58833a87
Validity
Not Before: Jan 1 21:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a81b6a288c6942746a830eee4578f5ae81d7a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:80:bb:65:30:a2:dc:6b:0d:31:0d:2c:d8:75:
52:ca:bf:d4:df:74:a1:3a:c7:d7:b3:3e:53:b1:04:
94:d7:d8:05:2a:91:6f:42:d3:ad:23:5a:ef:a7:26:
83:3e:7b:df:92:88:6f:51:58:b8:6a:72:0e:6e:59:
ff:36:47:b0:5f:21:41:9a:ac:1b:fe:9a:4e:96:c1:
18:66:b2:91:fc:de:95:41:b6:c2:f8:6c:91:3e:6a:
0e:2b:c0:fd:86:51:ab:b6:9f:55:d2:fe:b0:27:84:
8b:f3:2a:91:c2:6e:93:b9:d0:5e:91:30:9e:aa:44:
bf:b6:b0:1b:b0:5b:cb:82:8c:24:c9:57:a2:df:b3:
47:d2:44:e2:67:01:9b:13:14:0a:d3:ea:6b:74:12:
21:bf:c2:42:70:e3:c3:20:e4:30:73:7e:d4:59:66:
57:61:b2:e0:fe:5e:ee:7f:25:9f:d6:bc:37:41:25:
52:ca:79:1a:13:02:b4:8c:a1:68:2f:32:ce:a8:4e:
ab:db:64:6a:d1:65:6b:11:11:46:e3:de:46:3c:24:
48:c1:08:5a:4c:46:90:09:16:fc:46:11:48:12:d6:
16:08:b7:bf:85:cc:70:ea:cc:03:4b:c4:c7:47:b5:
6f:a2:44:b5:34:62:7a:32:b4:66:90:62:cd:d4:f3:
b2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:81:B6:A2:88:C6:94:27:46:A8:30:EE:E4:57:8F:5A:E8:1D:7A:5B
X509v3 Authority Key Identifier:
keyid:0B:17:58:73:AD:EB:83:C8:F1:6A:2E:0E:3C:BB:25:1E:58:83:3A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxdYc63rg8jxai4OPLslHliDOoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/KoG2oojGlCdGqDDu5FePWugdels.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/CxdYc63rg8jxai4OPLslHliDOoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.196.0/24
185.88.184.0/22
Signature Algorithm: sha256WithRSAEncryption
71:e8:66:06:c2:7c:a6:a3:82:d7:fa:1d:80:90:58:59:a0:c5:
ad:24:f5:7a:37:ae:5f:c9:3f:79:13:d1:6d:75:51:94:9f:97:
97:86:f7:34:23:4c:6e:bf:08:cb:22:ee:d1:f4:53:43:7f:6f:
84:03:31:06:f7:c2:25:57:c4:f9:6a:bb:e1:6b:fc:cf:f1:8e:
96:d7:f7:c6:96:25:86:71:c8:a1:36:44:98:7b:e6:e2:2e:1f:
12:de:01:26:99:ba:c6:9e:48:37:ad:0e:8e:53:80:b6:f8:b1:
e2:68:5c:1a:51:fb:7e:40:8e:e9:99:3e:6f:9c:e0:2d:75:a8:
9f:42:88:ee:f3:d1:38:80:55:90:73:3c:15:e8:cb:43:5c:2d:
96:0a:92:52:04:b7:3d:b0:20:b0:f1:3a:49:7c:d4:b4:df:1c:
58:88:56:54:16:df:80:ef:70:8f:dd:71:a7:d0:52:0b:75:64:
94:9a:fd:5e:4a:db:bc:58:f8:17:8e:38:54:53:14:c4:0b:c5:
d6:b2:95:48:31:d1:73:cf:b6:cd:3f:31:3f:14:16:99:0d:2d:
3b:8e:5f:6f:f8:93:0d:80:0a:56:2a:8f:9e:e3:72:a6:80:0d:
26:fb:1c:2f:97:e1:c9:57:e2:f4:f5:4a:e5:c3:ba:2d:b8:62:
0d:fc:7c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 09:28:11 2023 by rpki-client on console-fra.rpki-client.org