Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/kqb25aOd2dONCILhLpMpjKA4ONo.roa
File: kqb25aOd2dONCILhLpMpjKA4ONo.roa (raw, json)
Hash identifier: 81zlV+DB7xkrdpiYtcJMF5GTMluhg5rNyhE9uSyQquw=
Subject key identifier: 92:A6:F6:E5:A3:9D:D9:D3:8D:08:82:E1:2E:93:29:8C:A0:38:38:DA
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 01856DD40D9EEEA88AC522B92502C60053A1
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/kqb25aOd2dONCILhLpMpjKA4ONo.roa
Signing time: Sun 01 Jan 2023 14:54:51 +0000
ROA not before: Sun 01 Jan 2023 14:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199522
IP address blocks: 89.30.156.0/24 maxlen: 24
89.30.157.0/24 maxlen: 24
83.98.216.0/24 maxlen: 24
2001:16f8:4000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:0d:9e:ee:a8:8a:c5:22:b9:25:02:c6:00:53:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jan 1 14:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92a6f6e5a39dd9d38d0882e12e93298ca03838da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:b8:54:f0:2f:f3:c5:4c:da:84:62:db:fd:
f8:40:df:e2:ad:bc:3e:56:e4:46:f1:60:1d:5e:f1:
c2:90:ac:79:1c:15:99:41:f1:cc:a0:87:7d:ea:e9:
8d:aa:a1:e8:4a:fc:fd:47:84:50:4d:ba:56:6b:99:
ad:9a:e1:46:97:d8:fc:a9:e7:c4:dc:22:af:1c:6d:
2b:cd:cf:36:7d:fd:e2:a5:d9:43:57:bb:a6:22:0c:
23:29:99:c2:3d:66:2f:ae:8e:81:a7:16:b4:0b:14:
aa:39:6a:d1:35:1e:20:9e:c2:9c:d0:ae:70:59:b6:
8f:5a:35:17:24:9d:95:f8:55:dc:3c:7b:62:76:51:
c3:2d:67:a3:af:e7:39:02:22:44:d9:f8:cb:35:8a:
d5:f3:c5:d0:d2:e1:bb:32:1a:ed:37:60:d1:19:1a:
f4:8c:a3:08:7b:52:ae:49:ff:51:e6:e3:bb:9a:69:
dc:7b:e7:30:5c:ba:e5:64:bb:33:fd:ff:7e:08:74:
33:2e:05:c7:4c:ce:65:c0:7c:ca:ce:94:02:42:b2:
79:e0:ed:ee:85:25:14:97:ee:2f:e5:ca:a4:f8:5e:
d3:12:7e:bf:fc:25:17:25:15:c4:0e:82:da:64:cb:
05:c6:ff:6b:8c:c9:f0:d5:d9:00:10:7e:2a:8a:0c:
ca:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A6:F6:E5:A3:9D:D9:D3:8D:08:82:E1:2E:93:29:8C:A0:38:38:DA
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/kqb25aOd2dONCILhLpMpjKA4ONo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.216.0/24
89.30.156.0/23
IPv6:
2001:16f8:4000::/48
Signature Algorithm: sha256WithRSAEncryption
0c:6a:27:a6:dd:75:c2:0d:53:b5:cf:08:19:1e:b1:e1:71:02:
55:ef:d6:c8:6d:b5:ca:31:cf:11:1f:cc:e3:84:aa:59:a3:d0:
4a:b9:e2:5f:b2:18:4c:13:2f:68:6c:db:b2:c0:52:ab:26:08:
28:1b:8b:a3:2f:a3:d0:25:12:46:25:37:b6:e0:10:00:e4:37:
49:c5:ee:b3:97:2d:00:cf:e0:52:a1:4f:98:b5:00:b3:f0:33:
56:9f:b9:95:22:fb:3f:cb:33:02:30:1f:92:cc:86:ef:58:65:
c2:19:38:c6:5e:bb:56:03:40:eb:ae:fd:31:be:73:3c:c6:8e:
50:a7:88:18:4d:98:f1:fc:a7:c6:c8:ef:53:16:11:6d:b2:51:
93:93:34:21:c7:bb:8c:2a:21:93:46:b8:54:16:d8:64:19:1d:
07:18:f5:20:0e:5b:da:8c:c8:a3:3e:56:07:ae:3c:10:06:2d:
5f:4e:82:4a:08:71:87:9a:c0:8d:d6:74:2c:31:2c:70:23:59:
52:af:97:2c:45:ad:f8:61:2c:81:cf:52:67:37:d4:30:b1:66:
e8:31:5d:87:a1:b5:0c:a3:d7:93:34:1e:e6:47:5c:8d:93:7f:
c3:0b:f9:9b:2b:24:6c:c7:02:fc:eb:12:f3:0f:2c:8a:ff:47:
1e:05:d1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org