Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/0d7a7e-e404-46a6-a890-ffe01e46c502/1/KGRSyDYNB8t7DwpFkBuzI4RtTUk.roa
File: KGRSyDYNB8t7DwpFkBuzI4RtTUk.roa (raw, json)
Hash identifier: LlpElT622jmRXZ3e99ETnyg9j44fpFThRZPmA3f1h44=
Subject key identifier: 28:64:52:C8:36:0D:07:CB:7B:0F:0A:45:90:1B:B3:23:84:6D:4D:49
Certificate issuer: /CN=4b83eb58a202314ee1fdb2238f2b6895f643c57b
Certificate serial: 0C77C487
Authority key identifier: 4B:83:EB:58:A2:02:31:4E:E1:FD:B2:23:8F:2B:68:95:F6:43:C5:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4PrWKICMU7h_bIjjytolfZDxXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/0d7a7e-e404-46a6-a890-ffe01e46c502/1/KGRSyDYNB8t7DwpFkBuzI4RtTUk.roa
Signing time: Sat 01 Jan 2022 10:01:28 +0000
ROA not before: Sat 01 Jan 2022 10:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44901
IP address blocks: 185.140.209.0/24 maxlen: 24
185.140.211.0/24 maxlen: 24
185.140.208.0/24 maxlen: 24
185.140.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209175687 (0xc77c487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b83eb58a202314ee1fdb2238f2b6895f643c57b
Validity
Not Before: Jan 1 10:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=286452c8360d07cb7b0f0a45901bb323846d4d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:ed:9d:41:ea:43:90:72:01:e6:01:e5:75:
23:f0:c4:4e:5a:9e:8d:3b:e0:67:5e:b8:0b:c1:28:
10:a0:64:7f:ca:d8:8c:3c:3e:6e:b8:d7:43:b0:ca:
14:fc:57:d0:bc:d6:2c:71:1e:5a:0a:d2:12:79:cf:
38:35:dd:f5:4b:2f:07:9b:56:23:69:46:d6:e3:40:
9a:e1:e8:17:b9:7f:5c:bc:db:b5:60:fb:c9:d2:c7:
84:12:0e:22:44:62:3c:4c:15:42:78:69:d1:42:27:
2e:86:af:63:41:ca:29:a2:8c:08:e5:b2:15:ba:22:
9a:ad:ab:11:be:53:71:6e:66:73:22:ad:24:15:ab:
e7:90:eb:6c:26:5f:39:b0:44:c1:b2:d2:d9:70:12:
9c:be:a3:e8:31:d9:d9:92:5d:b8:64:e9:9a:d8:63:
14:c1:38:95:f6:15:b1:94:61:ff:6f:34:23:e4:82:
a2:8a:cd:92:e4:ed:68:cc:04:f7:86:36:e9:5b:08:
24:bb:ba:fb:b2:96:d5:e4:d7:d7:7f:89:f1:bb:56:
9d:f2:55:0c:f8:1d:79:9b:7e:de:fa:1c:5d:17:f4:
5c:29:63:cf:2c:8f:2c:1c:ee:47:2e:d2:2a:ac:fd:
08:ef:fb:22:1c:f5:42:08:47:5b:82:06:5d:ed:a6:
8b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:64:52:C8:36:0D:07:CB:7B:0F:0A:45:90:1B:B3:23:84:6D:4D:49
X509v3 Authority Key Identifier:
keyid:4B:83:EB:58:A2:02:31:4E:E1:FD:B2:23:8F:2B:68:95:F6:43:C5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4PrWKICMU7h_bIjjytolfZDxXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/0d7a7e-e404-46a6-a890-ffe01e46c502/1/KGRSyDYNB8t7DwpFkBuzI4RtTUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/0d7a7e-e404-46a6-a890-ffe01e46c502/1/S4PrWKICMU7h_bIjjytolfZDxXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.208.0/22
Signature Algorithm: sha256WithRSAEncryption
06:72:cd:8b:c4:0f:b6:38:0d:c4:26:b5:94:b3:e4:b8:44:ea:
d9:42:39:c3:2f:cb:2d:91:34:a2:8f:42:b5:e5:3d:30:4b:e7:
94:62:79:42:38:49:e1:2e:71:b8:d4:82:05:37:87:3a:e9:9f:
4c:4f:44:89:0b:4c:5a:0d:ad:49:88:02:2b:e4:0c:c7:06:37:
2e:aa:24:c7:fb:88:35:d8:12:fe:11:5f:68:6a:d9:90:99:1e:
aa:12:16:47:d5:3a:fa:ac:fc:3b:a0:7f:fd:b8:37:92:67:e9:
de:7a:fc:47:f3:fa:31:d8:49:27:f8:70:a6:d3:0e:68:0e:33:
f1:1b:f8:e0:6d:82:82:d4:e2:84:5e:05:b6:be:0d:61:76:1d:
6a:46:2c:31:d6:bb:64:65:60:0b:73:3c:ff:2e:fa:57:c7:c0:
b7:9a:19:9a:21:32:0d:73:e6:7b:e6:ee:1e:ab:ee:fa:22:61:
4d:62:47:62:b2:bf:9e:47:b4:c8:82:b9:b2:0d:6f:ba:c4:55:
d3:6d:d6:9e:48:0c:df:f9:87:b4:9b:15:96:ad:34:42:90:48:
63:15:f9:f2:87:1a:ab:95:7a:24:20:3b:d2:6c:e5:fe:dc:0d:
a3:51:f1:ad:48:52:86:13:85:23:eb:b5:8f:22:aa:50:d9:ac:
f0:a4:9e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:59 2025 by rpki-client