Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/kRAFkuohasCBdJasusy1XwvpJ7g.roa
File: kRAFkuohasCBdJasusy1XwvpJ7g.roa (raw, json)
Hash identifier: 02JvqktWAXNj04oOq/cJ3TrfblYdHmTj2HN1VeR7K14=
Subject key identifier: 91:10:05:92:EA:21:6A:C0:81:74:96:AC:BA:CC:B5:5F:0B:E9:27:B8
Certificate issuer: /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Certificate serial: 01856E6FD4062D8DE6C1B7A2A8DCD47EB119
Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/kRAFkuohasCBdJasusy1XwvpJ7g.roa
Signing time: Sun 01 Jan 2023 17:45:00 +0000
ROA not before: Sun 01 Jan 2023 17:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60664
IP address blocks: 92.43.50.0/23 maxlen: 23
185.97.178.0/24 maxlen: 24
185.97.177.0/24 maxlen: 24
185.97.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:d4:06:2d:8d:e6:c1:b7:a2:a8:dc:d4:7e:b1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Validity
Not Before: Jan 1 17:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91100592ea216ac0817496acbaccb55f0be927b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:6e:68:68:3d:51:c1:a5:42:9e:29:b6:2f:
fa:1a:e3:54:6b:ba:74:2d:4f:f2:77:51:d9:2e:7c:
47:75:79:a0:d3:fa:e6:01:ab:eb:2b:96:ef:d8:af:
09:ff:3c:88:7e:cf:ef:14:df:4b:0e:e9:b7:eb:b0:
96:5a:00:6a:de:09:3e:06:42:6f:b5:ae:58:24:28:
43:3f:39:52:c3:22:b1:59:1a:0f:30:45:8d:a2:0a:
61:14:45:1f:c8:2c:74:b8:44:86:c4:bd:bb:ec:b5:
f1:62:e4:55:66:fc:b5:52:ce:31:ae:9b:ad:f0:61:
7f:63:a5:a2:f6:05:10:9f:e7:19:e9:65:57:67:68:
81:ef:7a:2c:b1:b6:fd:1c:cd:84:68:6a:9b:f7:bf:
cc:46:fe:d9:3f:ea:9d:35:f2:c3:e2:e9:b6:b8:e7:
5b:73:96:e6:94:9d:4f:1c:64:81:62:50:f3:4a:43:
49:a2:e0:09:35:8b:5a:ac:14:ef:ca:07:f8:11:e8:
5b:3c:40:ed:8e:96:7f:bf:31:4b:c7:11:73:d8:84:
49:06:9a:3b:26:15:d8:f7:8c:ec:c9:e2:b7:a3:1f:
b6:9e:07:fb:63:ab:25:01:b5:7c:77:aa:54:88:ec:
af:3c:58:d1:f5:16:e8:c4:12:90:09:5a:75:17:c3:
e0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:10:05:92:EA:21:6A:C0:81:74:96:AC:BA:CC:B5:5F:0B:E9:27:B8
X509v3 Authority Key Identifier:
keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/kRAFkuohasCBdJasusy1XwvpJ7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.50.0/23
185.97.176.0-185.97.178.255
Signature Algorithm: sha256WithRSAEncryption
30:58:a5:6b:4e:76:c3:cd:6f:c5:32:cc:eb:36:4b:14:6d:ba:
bb:69:3c:18:2e:95:a9:37:aa:ef:b7:2d:4e:65:8f:e9:93:ee:
96:f9:4e:9b:1a:9a:a2:34:2f:22:d1:7f:0d:d2:57:24:ff:c8:
ed:04:1e:2f:39:9e:b7:8a:d4:71:a0:34:d3:25:71:88:f2:a4:
de:c0:06:8c:b7:22:6b:ef:d6:f9:b9:f7:e4:ed:bf:21:79:71:
ba:bd:85:a0:34:ed:6b:5d:07:0b:b5:bc:6d:32:e3:40:ae:0b:
aa:d7:b7:85:ca:ae:bf:b7:63:2a:6c:49:13:53:37:f9:94:fd:
04:81:f6:16:46:f2:36:15:e3:f6:3b:0d:94:6a:e9:b5:e8:20:
16:73:45:e8:6a:d8:4d:08:3f:42:e6:e2:af:4b:e7:1b:03:76:
ed:b7:9b:93:7c:6a:94:33:d8:ab:ac:b2:f9:97:b7:28:fa:b3:
d9:d3:d9:92:85:86:1d:e8:41:72:32:f5:73:e6:9c:c2:57:1c:
a1:e1:9b:d3:23:f7:ac:76:7f:60:cc:ea:b7:a3:dc:7d:63:fd:
bc:de:40:20:e3:cb:0e:4a:74:71:77:0f:2e:2e:86:27:b5:66:
bb:f5:c5:b8:71:8a:bc:12:05:20:a0:52:56:0e:75:96:49:eb:
15:6d:7a:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:01:06 2025 by rpki-client