Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/KBRxKCKr_usL9dz3Cekrywjm-Iw.roa
File: KBRxKCKr_usL9dz3Cekrywjm-Iw.roa (raw, json)
Hash identifier: dTxMMGr2nQqD8ZnZq27PlGPiWTnQwhvR0vHwG/avx/o=
Subject key identifier: 28:14:71:28:22:AB:FE:EB:0B:F5:DC:F7:09:E9:2B:CB:08:E6:F8:8C
Certificate issuer: /CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Certificate serial: 018AD2584D6A95CDCAA5D8B21F9A47EF60C0
Authority key identifier: 03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/KBRxKCKr_usL9dz3Cekrywjm-Iw.roa
Signing time: Tue 26 Sep 2023 16:35:16 +0000
ROA not before: Tue 26 Sep 2023 16:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46573
IP address blocks: 93.95.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d2:58:4d:6a:95:cd:ca:a5:d8:b2:1f:9a:47:ef:60:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Validity
Not Before: Sep 26 16:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2814712822abfeeb0bf5dcf709e92bcb08e6f88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8f:a6:98:dd:2a:2f:51:5b:19:5d:0e:9b:a3:
8a:04:5e:05:cf:ce:c9:b2:55:64:6d:c5:b9:57:bd:
7d:8c:ef:6a:e0:0e:8c:3b:dd:0e:03:9b:ef:90:81:
ed:fe:a1:07:a5:84:43:e6:89:03:ed:68:32:78:08:
e2:59:af:08:c8:90:0f:60:56:67:d6:85:4b:e7:3c:
f3:9f:c2:b3:05:5d:88:5a:db:6f:20:12:ef:4d:0d:
27:4a:a9:70:b0:ab:ce:39:ba:db:0e:58:9f:33:c9:
25:03:fe:c4:7a:33:77:33:c7:84:92:0b:1e:c8:24:
3e:ce:7e:81:38:3d:49:6a:4b:01:01:19:dd:b5:b4:
32:ec:d8:b2:24:c4:bf:22:7d:48:c3:24:a8:d8:47:
34:f5:d1:af:65:cf:67:ee:8e:1b:47:2e:dc:1f:45:
58:37:5d:74:94:d9:88:29:44:52:35:6c:25:f8:f1:
fe:37:bb:71:95:53:24:06:9e:ea:21:02:cc:85:84:
3e:f6:36:ee:e1:03:9b:ec:b6:f9:2e:1b:4d:74:1e:
bc:b3:a7:b0:4e:c8:07:3e:80:7c:50:68:77:8f:fa:
4e:5f:89:8a:65:ba:c1:51:93:86:04:09:25:90:a6:
7d:46:b4:48:55:ed:b3:5e:69:a3:bf:6b:aa:2e:08:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:14:71:28:22:AB:FE:EB:0B:F5:DC:F7:09:E9:2B:CB:08:E6:F8:8C
X509v3 Authority Key Identifier:
keyid:03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/KBRxKCKr_usL9dz3Cekrywjm-Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/A5nswJFEFGzBdbWKTeQAx2Wa5PU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.113.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ca:a8:ae:de:57:59:c6:f1:ce:fe:bf:bd:e4:f4:a4:1f:87:
64:9f:e1:29:5d:35:56:e2:74:6d:3a:21:5f:aa:0c:33:ac:95:
15:83:73:9a:6a:ac:d1:f2:87:83:47:95:12:38:b0:60:85:a1:
d0:fd:e2:8c:23:79:b0:66:4c:87:19:53:bc:b7:55:af:40:65:
39:83:69:62:b6:17:27:00:c7:a4:03:16:b1:58:d3:cb:b9:67:
ee:d7:99:60:be:40:5d:99:a1:a7:77:7e:92:f9:90:8f:7e:9d:
56:29:cf:1c:b0:33:60:93:a4:4c:f8:46:87:ec:47:d6:de:79:
1a:ce:f4:d4:90:69:06:ee:ad:3c:0e:71:5c:39:84:ba:46:42:
6d:31:97:23:59:22:a1:2e:30:41:d2:5f:68:a2:16:e2:59:df:
2e:80:65:9c:f2:dd:63:0b:36:49:2e:a7:3f:da:26:7a:a4:01:
8c:d7:74:4a:5f:0d:4f:7b:5d:8b:b4:73:41:6b:18:bd:8e:af:
c8:ba:f1:75:9d:6e:3f:b1:45:d6:82:15:69:67:7a:c1:9d:87:
57:3f:f5:5c:e6:64:f9:8b:07:f9:28:f0:b7:24:20:ad:24:a8:
f3:a9:05:37:59:5e:02:45:09:f2:f0:cd:95:4b:ed:91:e7:5b:
86:30:5d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:38 2024 by rpki-client on console-ams.rpki-client.org