Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/KLII-TfEMBVAYXUM2zOql-bbJzQ.roa
File: KLII-TfEMBVAYXUM2zOql-bbJzQ.roa (raw, json)
Hash identifier: N2g2vrZ5tct4+V/8KbFxdCLKhZDsECP7GhWANqo+Rt4=
Subject key identifier: 28:B2:08:F9:37:C4:30:15:40:61:75:0C:DB:33:AA:97:E6:DB:27:34
Certificate issuer: /CN=e2963b30bb52efd98f0cee6324ff2f98a811b439
Certificate serial: 0185738FF0944542F2778D89B9CADD2F1A4F
Authority key identifier: E2:96:3B:30:BB:52:EF:D9:8F:0C:EE:63:24:FF:2F:98:A8:11:B4:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pY7MLtS79mPDO5jJP8vmKgRtDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/KLII-TfEMBVAYXUM2zOql-bbJzQ.roa
Signing time: Mon 02 Jan 2023 17:38:11 +0000
ROA not before: Mon 02 Jan 2023 17:38:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202425
IP address blocks: 89.248.161.0/24 maxlen: 24
89.248.162.0/24 maxlen: 24
89.248.160.0/24 maxlen: 24
89.248.165.0/24 maxlen: 24
89.248.166.0/24 maxlen: 24
89.248.163.0/24 maxlen: 24
89.248.164.0/24 maxlen: 24
89.248.168.0/24 maxlen: 24
89.248.169.0/24 maxlen: 24
89.248.167.0/24 maxlen: 24
89.248.172.0/24 maxlen: 24
89.248.170.0/24 maxlen: 24
89.248.171.0/24 maxlen: 24
89.248.173.0/24 maxlen: 24
89.248.174.0/24 maxlen: 24
93.174.89.0/24 maxlen: 24
93.174.90.0/24 maxlen: 24
93.174.88.0/24 maxlen: 24
93.174.91.0/24 maxlen: 24
93.174.94.0/24 maxlen: 24
93.174.95.0/24 maxlen: 24
93.174.93.0/24 maxlen: 24
93.174.92.0/24 maxlen: 24
94.102.48.0/24 maxlen: 24
94.102.51.0/24 maxlen: 24
94.102.49.0/24 maxlen: 24
94.102.50.0/24 maxlen: 24
94.102.58.0/24 maxlen: 24
94.102.56.0/24 maxlen: 24
94.102.57.0/24 maxlen: 24
94.102.52.0/24 maxlen: 24
94.102.54.0/24 maxlen: 24
94.102.55.0/24 maxlen: 24
94.102.53.0/24 maxlen: 24
94.102.59.0/24 maxlen: 24
94.102.61.0/24 maxlen: 24
94.102.62.0/24 maxlen: 24
94.102.60.0/24 maxlen: 24
94.102.63.0/24 maxlen: 24
80.82.79.0/24 maxlen: 24
80.82.64.0/24 maxlen: 24
80.82.67.0/24 maxlen: 24
80.82.65.0/24 maxlen: 24
80.82.66.0/24 maxlen: 24
80.82.70.0/24 maxlen: 24
80.82.68.0/24 maxlen: 24
80.82.69.0/24 maxlen: 24
80.82.77.0/24 maxlen: 24
80.82.78.0/24 maxlen: 24
80.82.76.0/24 maxlen: 24
2a02:6c8:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:f0:94:45:42:f2:77:8d:89:b9:ca:dd:2f:1a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2963b30bb52efd98f0cee6324ff2f98a811b439
Validity
Not Before: Jan 2 17:38:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28b208f937c430154061750cdb33aa97e6db2734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:65:23:4f:47:b7:0c:27:d7:bd:c6:2c:56:3c:
b4:c1:5f:81:87:e1:e5:e0:5e:62:01:76:6d:87:2f:
7f:b6:41:65:2c:1b:1d:47:d9:23:81:fa:72:1f:cd:
24:c8:fe:48:43:02:4d:6b:8f:65:6d:3b:7f:5c:c9:
67:d4:62:b6:41:af:7b:49:1a:e9:ea:39:94:9c:b6:
29:a4:b4:69:af:9f:4b:c4:95:b6:5c:b3:23:7c:d5:
e3:90:77:00:4e:db:c9:4f:ae:96:22:67:9a:7c:9c:
e2:d5:b9:1c:81:c8:f1:15:75:9e:e9:48:d6:d5:30:
48:6e:6c:9e:08:b2:b5:6d:1a:b8:35:15:10:ee:f6:
85:44:d4:fb:af:ff:5f:d8:49:4b:92:45:36:51:16:
9a:e3:ec:cb:0e:d4:59:fb:e3:34:ea:a6:01:a7:cc:
29:d8:96:8c:36:04:0e:9a:0f:49:6c:35:67:3b:85:
a6:a6:1d:ff:13:fb:0c:a9:2f:9f:df:36:0a:0a:b2:
2b:ff:a3:7d:7b:26:19:8e:57:12:4d:59:42:49:af:
5b:e9:2f:be:08:c8:8a:34:dd:45:ef:8d:dc:05:3d:
92:de:83:22:4c:e5:e1:a7:cd:dd:34:6f:0c:84:82:
5f:48:ce:84:02:37:31:fb:d7:ce:6c:3b:c1:37:a5:
7f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B2:08:F9:37:C4:30:15:40:61:75:0C:DB:33:AA:97:E6:DB:27:34
X509v3 Authority Key Identifier:
keyid:E2:96:3B:30:BB:52:EF:D9:8F:0C:EE:63:24:FF:2F:98:A8:11:B4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pY7MLtS79mPDO5jJP8vmKgRtDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/KLII-TfEMBVAYXUM2zOql-bbJzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/4pY7MLtS79mPDO5jJP8vmKgRtDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.64.0-80.82.70.255
80.82.76.0/22
89.248.160.0-89.248.174.255
93.174.88.0/21
94.102.48.0/20
IPv6:
2a02:6c8:8000::/33
Signature Algorithm: sha256WithRSAEncryption
16:a5:ff:8f:b2:65:84:5f:45:2d:09:09:d5:55:96:40:9f:64:
73:17:e0:d4:36:22:5e:17:b3:79:0a:bc:52:38:76:2c:4c:73:
8b:1d:a1:33:3b:c8:40:27:f9:26:85:3f:b4:46:cf:ee:2d:d4:
65:d9:35:05:e8:dc:54:59:88:5b:5f:94:10:9a:89:ed:fe:8b:
3d:f9:1e:66:49:3a:67:da:96:72:d7:8d:0d:df:db:28:47:7f:
2b:d9:63:5b:26:24:d8:d2:f6:b9:da:3e:dd:c1:a3:ab:88:3b:
d8:a2:80:a6:97:9a:50:dd:8d:e8:61:73:e1:f9:e5:3b:db:e9:
4a:1d:59:78:b8:c9:cb:44:ca:5d:96:d5:9c:56:95:fd:72:49:
2c:f8:47:92:90:49:59:ca:8d:a4:38:b5:71:2b:8a:54:4f:db:
fd:31:24:0f:1d:61:3f:c6:33:3c:bb:16:1f:fe:ef:9d:d0:df:
b6:d7:19:d6:b6:95:fe:c0:92:e9:1c:09:8d:6e:48:87:83:d4:
e4:b2:70:90:06:98:90:ed:af:4d:7c:f5:43:a8:b0:28:cc:b0:
c9:1c:d1:9a:df:98:10:78:67:84:7f:e5:cc:79:ae:fc:4e:0c:
0e:46:3b:7c:81:1f:6a:b7:cc:49:1c:92:a9:5d:09:f6:bc:cd:
9f:70:1a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:13 2023 by rpki-client on console-fra.rpki-client.org