Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/KGg3AGw_gFLVm-JLKE09eQHMxZE.roa
File: KGg3AGw_gFLVm-JLKE09eQHMxZE.roa (raw, json)
Hash identifier: 4UNZ0HuMwNaO6bMkJuoLFZd4fHYLivHa6hGL7FuGXjU=
Subject key identifier: 28:68:37:00:6C:3F:80:52:D5:9B:E2:4B:28:4D:3D:79:01:CC:C5:91
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A4CA194
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/KGg3AGw_gFLVm-JLKE09eQHMxZE.roa
Signing time: Wed 30 Mar 2022 16:14:59 +0000
ROA not before: Wed 30 Mar 2022 16:14:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.39.10.0/24 maxlen: 24
92.119.12.0/22 maxlen: 24
45.87.172.0/24 maxlen: 24
45.87.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172794260 (0xa4ca194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 30 16:14:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=286837006c3f8052d59be24b284d3d7901ccc591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:c9:4a:14:9d:6b:37:53:67:55:e8:98:e1:
b3:af:d0:fc:d4:d4:98:11:25:b6:9f:a9:ae:b7:a5:
4a:3f:94:e4:b3:d2:55:d9:dc:6b:7b:9e:c2:71:ab:
7d:bc:29:82:38:05:ea:cd:90:3e:83:3c:e0:0a:b7:
16:e5:80:f0:47:25:fa:bb:c0:92:d6:a3:c6:c9:0e:
b5:75:8c:fa:34:68:ef:b4:0a:f5:00:ab:fb:7d:f0:
e6:c2:92:89:10:b4:e3:5b:f6:73:d6:fe:9c:dc:74:
db:ed:c5:7a:8e:a3:9a:3f:9d:20:a9:1e:f4:32:76:
a1:f9:c0:30:dd:16:38:4f:e4:48:8f:3e:50:58:d7:
dc:70:a1:61:e6:8c:45:10:6a:8b:11:44:e6:9b:5b:
e0:5f:32:eb:cd:2a:5a:bc:20:a4:06:96:00:07:69:
af:d5:8e:54:2d:93:10:59:85:39:9b:4a:78:57:fe:
70:c9:79:71:3f:39:eb:0f:21:86:90:1c:f7:06:de:
2e:c8:68:f0:f2:5e:62:00:1c:76:5d:75:f9:8b:78:
cd:ec:df:5e:ab:0b:fd:eb:d2:33:4e:da:19:5d:ab:
1d:18:7e:b1:46:42:05:28:ad:3b:26:76:94:4e:7e:
98:16:fb:ef:18:95:78:4e:78:d4:f3:a3:26:c5:a6:
ad:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:68:37:00:6C:3F:80:52:D5:9B:E2:4B:28:4D:3D:79:01:CC:C5:91
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/KGg3AGw_gFLVm-JLKE09eQHMxZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.172.0/23
92.119.12.0/22
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
30:9a:1f:b0:a1:78:73:d9:c2:67:f2:c9:15:b7:5a:83:5f:d2:
40:97:cd:ac:c0:68:2b:93:00:cf:64:41:3e:19:37:40:3f:4d:
31:a7:2d:e4:bd:49:e8:f8:90:38:9c:5f:90:1d:a3:1f:24:86:
69:77:78:14:ba:1f:d5:4c:a4:20:65:be:7e:00:4c:b9:62:70:
b9:58:0e:e2:eb:9c:a8:91:66:49:ab:5d:18:4f:1a:ea:0c:1c:
36:5e:56:a8:2f:7b:98:00:38:fe:4c:04:48:b0:e2:0d:85:8a:
07:85:3b:89:eb:7e:24:54:3c:cb:00:d0:97:43:c4:f9:54:42:
9c:ce:d2:29:3d:71:b8:c5:88:a5:4a:3d:c4:7d:ba:b4:00:39:
6e:4b:a4:b2:be:8b:a8:00:b0:42:b2:a2:87:04:45:99:dd:44:
a4:f8:8e:cf:26:63:94:d7:49:29:46:20:89:18:2c:48:72:f1:
5e:05:4f:81:8f:ea:7e:92:c1:03:68:31:2a:d4:39:57:b3:61:
a8:2f:03:3c:ab:cb:80:34:87:d2:7c:6f:16:ba:35:ed:cc:53:
ac:99:a9:54:a8:09:29:90:c5:e0:ce:5e:cf:f5:c4:5a:4e:54:
23:26:d8:d0:3d:00:11:04:37:3c:94:e2:ed:cd:e3:60:c0:dc:
f1:ec:a8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:42 2025 by rpki-client