Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/kmxmfZYPAqE5EfQjyeQokbjS4ME.roa
File: kmxmfZYPAqE5EfQjyeQokbjS4ME.roa (raw, json)
Hash identifier: 9g6Lqtl1v+mcyDEuyx0SqAg49uYn2RdpiYz2KmN/Ibs=
Subject key identifier: 92:6C:66:7D:96:0F:02:A1:39:11:F4:23:C9:E4:28:91:B8:D2:E0:C1
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 018891948E6B9D1E05A6C405150A209E7A24
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/kmxmfZYPAqE5EfQjyeQokbjS4ME.roa
Signing time: Tue 06 Jun 2023 16:40:12 +0000
ROA not before: Tue 06 Jun 2023 16:40:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210000
IP address blocks: 31.41.34.0/24 maxlen: 24
176.119.223.0/24 maxlen: 24
194.156.188.0/24 maxlen: 24
2a12:3fc1:1001::/48 maxlen: 48
2a12:3fc1:1002::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:94:8e:6b:9d:1e:05:a6:c4:05:15:0a:20:9e:7a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jun 6 16:40:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=926c667d960f02a13911f423c9e42891b8d2e0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:de:59:d9:32:a1:90:45:09:f5:c0:0a:c8:db:
7f:a9:cf:f2:7d:93:69:af:5d:ae:6d:cf:aa:01:12:
8f:55:75:89:44:84:4c:de:75:2d:fc:99:7e:46:2c:
4a:94:f8:bb:2f:72:ff:f4:7d:eb:83:ad:6a:29:98:
d8:27:9e:93:f8:eb:f3:f3:80:30:88:b0:75:67:0f:
8e:77:84:59:46:35:68:1f:31:d0:8e:6a:a3:f7:45:
69:b4:7b:3a:5c:96:21:43:a9:2c:1e:66:c6:a3:8a:
ae:a1:f5:27:ca:cb:8d:c4:43:2e:a6:c8:ad:5b:83:
92:77:4e:ec:39:7c:e7:51:41:8f:68:2f:d6:4d:a5:
66:d7:c8:5f:de:82:de:2a:fa:17:7b:3d:03:32:f7:
55:7e:13:71:6a:9d:2d:45:89:21:06:9d:fb:0f:5f:
b8:9d:a1:6d:03:05:44:7c:44:13:c9:61:fa:00:3b:
3c:9f:e8:65:67:ec:2b:a0:80:86:f7:f9:45:11:d3:
4c:ea:a5:52:f7:ff:24:25:df:57:60:3e:fc:c1:57:
6d:59:14:22:61:eb:8e:99:dc:e5:a7:92:43:7d:24:
87:31:f6:8b:e9:42:34:b9:d5:7e:9f:f8:ee:41:62:
fe:67:81:d0:25:7d:12:3c:d0:cb:3c:5e:6e:5c:07:
a0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6C:66:7D:96:0F:02:A1:39:11:F4:23:C9:E4:28:91:B8:D2:E0:C1
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/kmxmfZYPAqE5EfQjyeQokbjS4ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.34.0/24
176.119.223.0/24
194.156.188.0/24
IPv6:
2a12:3fc1:1001::-2a12:3fc1:1002:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
99:74:d2:7d:7f:03:dc:be:7e:66:43:a9:34:02:cc:fe:a0:1b:
c6:0d:0f:3e:36:9c:13:4e:54:52:9e:f4:ab:a4:1a:9a:ac:70:
34:d8:ad:6b:62:0e:9c:73:b3:4f:a6:28:86:a2:c6:5f:af:ab:
21:f4:d9:43:a1:ef:0f:d9:36:69:44:78:6c:78:3d:d5:ce:24:
b2:f5:f7:6f:bf:7c:f7:25:75:ae:eb:cb:02:cf:a8:b7:34:0c:
6c:9f:38:d2:f3:14:4b:32:5a:98:50:53:1f:43:1f:1f:07:e9:
80:73:02:07:b3:46:43:ef:cd:78:45:a0:70:e5:06:8c:16:94:
0f:5f:e9:b7:91:d4:b0:9b:a0:ab:19:56:72:a3:5b:11:71:e3:
37:ca:a2:08:c5:b2:8b:a1:28:76:d8:1d:65:f9:dc:a1:c1:16:
3f:3d:2b:47:a4:26:1a:eb:3d:81:de:b5:e6:21:e3:95:de:8a:
00:85:9d:8d:38:9d:70:3f:df:e1:70:ac:b6:a0:6c:4f:70:6b:
d6:dd:52:c7:e3:90:c0:8d:36:cc:cb:2d:b1:5b:1e:74:50:1c:
d3:75:82:1f:e7:47:e3:55:0f:22:0e:64:b0:46:fb:ed:f7:1e:
6e:f7:82:c5:28:c6:6a:8c:65:6b:f3:f1:ec:52:67:88:04:27:
2c:6d:b3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:49 2025 by rpki-client