Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Kmhc6LXKUIVLzLv5tCuokciW4IE.roa
File: Kmhc6LXKUIVLzLv5tCuokciW4IE.roa (raw, json)
Hash identifier: eXIqc1/FtxszG+6YNb5XaKi1D0pVfVSzs2nMVmV/TKY=
Subject key identifier: 2A:68:5C:E8:B5:CA:50:85:4B:CC:BB:F9:B4:2B:A8:91:C8:96:E0:81
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 0193D879847E567B1CADB2FD7460EA6EB58C
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Kmhc6LXKUIVLzLv5tCuokciW4IE.roa
Signing time: Wed 18 Dec 2024 06:34:22 +0000
ROA not before: Wed 18 Dec 2024 06:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49664
IP address blocks: 82.177.48.0/24 maxlen: 24
88.220.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d8:79:84:7e:56:7b:1c:ad:b2:fd:74:60:ea:6e:b5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Dec 18 06:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a685ce8b5ca50854bccbbf9b42ba891c896e081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2d:d2:ef:8e:c1:cb:8d:3a:f1:47:39:97:5a:
06:74:b8:8a:9d:58:5f:b6:21:11:3e:d1:a1:2c:92:
d0:06:cb:01:f4:c8:2a:ec:b8:6a:51:b7:c7:99:3b:
df:f7:31:96:c1:05:08:57:5e:79:46:98:20:5c:f0:
de:84:ea:14:80:62:53:0a:05:3d:60:2d:9e:a9:ba:
62:82:94:38:a8:05:9f:1a:e0:09:e0:f2:7d:cf:e1:
d7:76:f4:c5:ed:16:63:6b:f6:0a:d6:ff:ff:eb:f0:
52:40:ae:9b:cb:a1:fd:03:c5:7d:54:26:7e:0d:15:
a3:5c:0c:a4:6a:aa:14:b7:f0:a0:af:57:b3:70:94:
da:ea:d5:19:b9:76:f8:0e:fa:61:26:3a:45:22:7f:
94:ce:98:f1:c1:4f:3d:51:eb:ac:ea:c3:25:ff:06:
dd:fa:62:bf:d3:f4:8f:a7:e3:84:4d:ee:56:14:bb:
50:f2:2d:5a:07:40:9a:64:1f:01:62:6d:56:26:05:
25:fe:a9:00:2c:3f:15:86:6e:a2:ba:8a:a6:69:4c:
88:0d:b4:4c:3f:52:a1:26:5f:72:32:c5:9a:e8:38:
82:24:6e:31:50:e3:19:20:be:7d:48:ce:2d:87:d9:
b9:33:44:41:69:13:96:36:6e:98:3f:41:f7:b6:d0:
fb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:68:5C:E8:B5:CA:50:85:4B:CC:BB:F9:B4:2B:A8:91:C8:96:E0:81
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Kmhc6LXKUIVLzLv5tCuokciW4IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.48.0/24
88.220.107.0/24
Signature Algorithm: sha256WithRSAEncryption
48:56:f3:e1:c4:8c:27:d5:2a:ae:b9:2f:27:26:90:4a:21:26:
27:8d:8a:db:01:03:ee:23:dd:78:a5:d8:2e:b5:a2:6f:7c:ad:
8d:79:0c:6b:85:8e:21:97:c3:4c:32:69:9a:4e:7c:68:51:36:
ca:bd:18:58:01:11:77:3d:24:5f:18:67:cf:52:93:b3:e0:2f:
26:d1:06:89:74:b7:1d:a6:73:aa:b6:f4:fa:0d:52:c3:35:1f:
21:20:10:f8:d7:ba:1f:44:12:c2:77:0b:65:47:81:b4:c4:e2:
2f:71:9f:d1:34:83:53:a5:4a:98:d2:9c:db:4b:aa:b8:4d:b0:
bc:53:62:b0:2f:07:0f:e9:52:8f:e9:93:f6:8c:50:23:ce:4f:
28:f7:8c:f8:eb:a6:88:78:1b:e5:f3:08:fb:a5:d7:60:83:1b:
91:f6:cf:33:16:62:d1:06:3e:29:90:50:13:f7:5c:e6:44:57:
be:8c:1a:c6:a3:67:0c:05:3a:ab:e8:f5:de:96:ff:87:8b:8b:
59:2c:51:f0:f8:df:e9:a1:8e:9c:1e:ba:77:ed:60:83:b1:58:
8c:08:25:29:c4:e8:87:bd:79:52:5e:ea:94:d9:b3:74:c2:00:
83:38:11:6b:ff:72:35:9c:17:80:77:b3:3a:42:86:fa:ed:41:
90:24:e8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:43 2025 by rpki-client