Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/KC9Xm8XTsxHjP2oBF63KwGoQZXU.roa
File: KC9Xm8XTsxHjP2oBF63KwGoQZXU.roa (raw, json)
Hash identifier: rRTGv4juOh3K0TNuy2Fzstjt8N6bOdFTpfoX1jP0T6k=
Subject key identifier: 28:2F:57:9B:C5:D3:B3:11:E3:3F:6A:01:17:AD:CA:C0:6A:10:65:75
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD50D8425DE3E38AD4D6A2917A89B7F
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/KC9Xm8XTsxHjP2oBF63KwGoQZXU.roa
Signing time: Mon 02 Jan 2023 00:15:11 +0000
ROA not before: Mon 02 Jan 2023 00:15:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3223
IP address blocks: 89.40.104.0/23 maxlen: 23
188.213.22.0/24 maxlen: 24
188.213.19.0/24 maxlen: 24
89.40.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:0d:84:25:de:3e:38:ad:4d:6a:29:17:a8:9b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=282f579bc5d3b311e33f6a0117adcac06a106575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fb:c5:d4:c5:c9:39:93:a5:16:68:45:ea:63:
4f:6f:28:4b:19:1e:5b:7a:5a:be:a3:51:d9:ae:11:
05:18:30:32:a4:92:fc:36:4e:87:37:82:f4:75:63:
e5:3d:cc:9e:12:73:7b:dc:4a:12:97:f5:1b:a3:84:
c6:28:ad:df:ec:da:5c:5f:b4:af:c9:fe:f1:ef:98:
b2:30:90:51:98:59:35:bc:b3:81:ab:91:8c:9b:b7:
46:1b:d6:08:9d:29:a2:57:7b:5f:76:55:70:04:c2:
99:63:ee:94:69:8f:21:4b:8c:f3:0b:fa:6d:bc:c7:
6c:41:50:a6:d8:db:90:8d:2d:28:c1:8f:a1:e0:fa:
b4:39:0a:61:53:34:dd:48:95:d6:bd:2a:22:21:f6:
c4:ec:73:12:30:d9:4d:84:ea:bd:ea:27:3a:2e:36:
47:2e:4c:a4:3c:6d:42:fb:62:fe:6e:0b:52:e8:07:
c9:29:cb:23:c6:b5:8e:60:2e:cd:66:fc:39:77:4b:
51:aa:83:f0:96:92:7e:d7:91:18:83:c4:32:98:77:
f4:ef:60:c4:30:d2:46:b0:6a:c4:de:ce:5c:cd:13:
41:ef:13:d0:5f:b3:15:b8:d4:7d:61:90:ca:54:7b:
9d:18:b1:2d:09:cf:0c:3b:98:26:1b:d8:74:08:71:
f2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2F:57:9B:C5:D3:B3:11:E3:3F:6A:01:17:AD:CA:C0:6A:10:65:75
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/KC9Xm8XTsxHjP2oBF63KwGoQZXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.104.0/23
89.40.233.0/24
188.213.19.0/24
188.213.22.0/24
Signature Algorithm: sha256WithRSAEncryption
48:18:d2:54:f4:5f:a5:2b:35:6f:a1:45:3b:47:c6:ae:ba:54:
0c:7c:f3:70:cf:4a:be:97:91:d4:45:50:01:6d:ea:d2:af:f5:
41:e7:f1:36:e1:f5:e4:87:62:04:19:b3:2f:44:c2:14:0b:3f:
44:2d:8d:db:4c:a3:e4:fb:99:a5:d0:96:80:bc:e0:52:43:cb:
c3:96:c3:4d:f1:86:85:7d:c7:dd:7b:10:01:2d:9d:77:c2:e7:
ca:35:7e:eb:6d:10:1a:28:17:3b:85:99:13:16:21:ca:d0:93:
14:13:4e:9a:ca:14:06:f6:37:2f:90:4a:d6:39:7e:2e:51:99:
dc:f1:94:5c:17:c7:f3:fc:93:e8:27:bd:ff:4c:47:c2:43:88:
43:a1:7f:db:af:aa:8e:e8:9a:ff:c6:9e:73:35:82:db:99:98:
03:d7:01:1e:b4:25:2d:0f:8e:5c:b8:fe:82:57:59:52:b5:13:
ff:1d:03:95:44:aa:61:78:23:cd:8d:3d:75:38:58:6e:16:ea:
ff:e4:20:67:80:5e:31:06:c7:10:d0:15:8b:1c:b6:0d:ce:fc:
2c:ac:33:25:dc:2a:06:0e:e2:2a:0f:d1:9e:59:90:ec:93:8b:
0f:01:9e:cd:bc:7a:20:49:5c:c3:4d:c3:0b:43:93:da:bf:a2:
ed:39:24:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:13 2025 by rpki-client