Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/kr-REGo_8n-nT4BW-8_RZFsikF4.roa
File: kr-REGo_8n-nT4BW-8_RZFsikF4.roa (raw, json)
Hash identifier: o4PNxelM7ovvCnsh4yH5WrKwypBPj6864mgxml77lJo=
Subject key identifier: 92:BF:91:10:6A:3F:F2:7F:A7:4F:80:56:FB:CF:D1:64:5B:22:90:5E
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018BCB1D001F039249F10A8CA0AF28D9DF1A
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/kr-REGo_8n-nT4BW-8_RZFsikF4.roa
Signing time: Mon 13 Nov 2023 23:55:57 +0000
ROA not before: Mon 13 Nov 2023 23:55:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6079
IP address blocks: 88.135.96.0/20 maxlen: 24
213.159.136.0/21 maxlen: 24
141.136.16.0/20 maxlen: 24
91.227.240.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cb:1d:00:1f:03:92:49:f1:0a:8c:a0:af:28:d9:df:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Nov 13 23:55:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92bf91106a3ff27fa74f8056fbcfd1645b22905e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5d:11:40:18:11:7e:e7:6e:9e:72:eb:25:95:
fd:a9:23:67:1b:2a:32:90:1a:11:00:74:98:ad:33:
c2:d5:23:02:a0:ce:88:d8:22:8b:85:7e:1a:da:5c:
a5:ba:ae:fe:e8:12:f6:bc:50:eb:38:09:4f:f1:bc:
60:35:cc:3b:48:d5:c1:9e:77:bf:fc:94:8c:b0:36:
e1:e1:13:16:ad:32:8c:d5:2c:0f:04:73:52:dd:85:
dc:06:d3:5d:ab:af:7f:5e:c7:1d:d1:45:6f:09:54:
e7:1e:a6:c7:55:89:47:97:fa:d8:59:2f:52:67:db:
a4:e1:53:27:6a:7b:80:d7:56:ca:3f:8e:fb:b6:cc:
26:a5:4c:8c:e7:38:4d:35:ff:14:fa:bd:9e:89:25:
87:a2:8e:7c:30:e4:c6:cf:6a:0d:4d:01:bb:52:7e:
87:a4:a5:68:33:e7:00:1b:46:e1:81:21:85:00:68:
8e:f9:86:a6:8b:d6:86:0e:c7:54:43:d6:a7:7b:09:
60:ec:0b:39:55:a6:60:33:6a:9c:01:ad:02:b1:16:
98:a5:31:71:34:b5:1d:10:31:d3:79:c3:56:97:38:
c0:e9:7d:cc:d4:49:43:ab:45:b8:b3:e0:fb:39:59:
23:40:0d:a4:f7:95:f8:6c:60:f1:63:86:e0:c0:4b:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BF:91:10:6A:3F:F2:7F:A7:4F:80:56:FB:CF:D1:64:5B:22:90:5E
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/kr-REGo_8n-nT4BW-8_RZFsikF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.96.0/20
91.227.240.0/23
141.136.16.0/20
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
22:b6:e6:84:d7:c8:30:24:08:32:6e:fb:4a:75:3e:35:2d:5a:
cf:b6:bc:eb:77:ea:52:61:b8:27:fa:a4:bd:97:ce:ac:cb:76:
08:d9:a4:e2:d7:2d:52:1e:83:5c:6e:a1:45:62:e9:2f:ab:01:
96:c0:55:cf:d8:d0:cf:ba:0e:fd:ad:a0:7c:82:93:6d:68:ba:
b0:58:62:fa:76:0d:1f:51:87:25:d3:e2:7e:d0:39:71:4f:63:
70:e4:ec:88:fe:6a:8d:1f:4f:ad:57:39:d3:39:fb:fc:69:9d:
aa:cd:b3:fc:ac:67:8e:f2:e9:06:a2:1c:44:55:83:12:7a:e5:
3a:cd:f7:79:7e:e4:0a:2b:c8:d1:73:50:bc:dc:60:07:bc:b8:
36:90:99:80:28:e7:96:22:48:4b:b9:4e:6e:67:bf:e8:da:3e:
4d:48:9d:6e:f0:e0:e0:1a:e7:5f:e7:62:c1:d8:35:81:49:cf:
0a:aa:20:1e:28:9b:bb:63:4e:ce:ff:9b:3b:9d:77:6b:c8:b6:
4a:be:96:67:69:42:3f:54:3b:81:11:1f:54:5e:64:29:f7:b4:
15:72:84:e3:f9:c2:ec:ee:f4:d0:ec:8d:c2:82:de:36:13:7e:
f5:a7:57:78:70:19:42:ec:51:ce:39:55:b1:48:50:d8:2a:31:
1e:ff:14:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:47:20 2025 by rpki-client