Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1c47e3-3883-4884-b6d6-2a79a9ca2f41/1/kSu0jCbkorv460Q0Dc9AY5NHtSs.roa
File: kSu0jCbkorv460Q0Dc9AY5NHtSs.roa (raw, json)
Hash identifier: KFCAL4bi1mKXh/DaYtf9BO6fe+ex+nDmeSXhSzDe4nI=
Subject key identifier: 91:2B:B4:8C:26:E4:A2:BB:F8:EB:44:34:0D:CF:40:63:93:47:B5:2B
Certificate issuer: /CN=103279df905d71d2b1af15c5abf28f66ab019a2d
Certificate serial: 018CC86F22BC52B0C6856949C266D0A7A047
Authority key identifier: 10:32:79:DF:90:5D:71:D2:B1:AF:15:C5:AB:F2:8F:66:AB:01:9A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDJ535BdcdKxrxXFq_KPZqsBmi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1c47e3-3883-4884-b6d6-2a79a9ca2f41/1/kSu0jCbkorv460Q0Dc9AY5NHtSs.roa
Signing time: Tue 02 Jan 2024 04:29:35 +0000
ROA not before: Tue 02 Jan 2024 04:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42765
IP address blocks: 171.25.164.0/22 maxlen: 22
91.204.148.0/22 maxlen: 22
91.233.168.0/22 maxlen: 22
213.108.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:22:bc:52:b0:c6:85:69:49:c2:66:d0:a7:a0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=103279df905d71d2b1af15c5abf28f66ab019a2d
Validity
Not Before: Jan 2 04:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=912bb48c26e4a2bbf8eb44340dcf40639347b52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:59:95:9d:38:18:e4:3b:4f:51:b2:94:09:ad:
97:c2:75:42:2a:30:52:be:00:31:b7:e8:4a:20:54:
b5:bb:bd:62:f1:3d:3a:bb:a8:36:5f:1b:1a:f8:10:
2f:c3:be:6f:88:6f:92:00:7c:bb:9b:04:bb:5b:90:
ae:bb:fb:f6:1b:de:13:03:28:e2:dd:30:a2:fa:5d:
e2:aa:78:18:51:a0:2d:c0:54:c9:8e:01:79:67:55:
76:15:58:ea:47:d1:29:b6:e1:11:e3:d7:3d:5a:45:
45:d1:22:e6:e7:d8:0c:63:b0:ad:0c:f2:a1:ff:44:
2f:6c:20:01:6f:2d:b0:0d:9e:80:0c:1b:e3:bf:3c:
bc:bc:65:21:9f:69:40:47:08:6f:08:9d:d6:56:c0:
07:63:39:41:01:73:3f:32:0f:0b:26:70:df:f6:b7:
7a:58:d3:a8:b1:ec:fa:72:c6:93:55:e7:1f:4a:68:
72:4e:c7:5a:e2:e9:6a:05:78:c2:5a:d5:fc:68:9d:
11:69:0b:40:d8:03:f4:af:83:9d:9b:63:f3:8d:8c:
10:05:33:56:8a:d2:01:1d:c7:c0:eb:cc:97:38:44:
c5:8b:48:ae:c4:1a:b1:0c:02:9e:93:36:30:7b:cb:
2f:68:85:4f:3e:b1:8c:1c:2a:e2:28:4f:a1:83:f2:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2B:B4:8C:26:E4:A2:BB:F8:EB:44:34:0D:CF:40:63:93:47:B5:2B
X509v3 Authority Key Identifier:
keyid:10:32:79:DF:90:5D:71:D2:B1:AF:15:C5:AB:F2:8F:66:AB:01:9A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDJ535BdcdKxrxXFq_KPZqsBmi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1c47e3-3883-4884-b6d6-2a79a9ca2f41/1/kSu0jCbkorv460Q0Dc9AY5NHtSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1c47e3-3883-4884-b6d6-2a79a9ca2f41/1/EDJ535BdcdKxrxXFq_KPZqsBmi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.148.0/22
91.233.168.0/22
171.25.164.0/22
213.108.208.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:96:be:44:47:b4:44:2b:be:3b:2e:72:b5:9f:50:11:64:60:
43:7a:4f:3e:38:15:1d:45:df:30:7c:3b:0d:ce:1f:76:93:f8:
ff:51:b9:67:6d:c7:c5:59:c2:8e:ed:98:67:30:0a:e6:ee:1b:
a3:2e:59:55:28:b4:6b:58:31:d9:66:96:83:7f:01:6a:43:c8:
e4:57:81:a9:3a:8d:a8:16:21:93:91:c7:4f:6c:bf:69:c7:30:
af:df:09:d9:03:4d:d1:2e:14:f1:71:49:05:10:d7:65:80:b9:
7e:e4:4f:49:d7:75:84:09:b4:f1:02:59:7c:23:eb:a4:68:4d:
7f:86:3d:d0:81:ed:64:fe:a1:7e:36:8c:5e:f1:8a:81:e8:09:
74:45:3c:65:70:b7:89:80:47:e4:09:5f:1c:a6:fc:42:7e:d6:
33:0d:3a:4e:d7:92:21:30:a7:9f:59:94:46:4c:f0:8d:84:a1:
1c:aa:16:e4:62:29:46:cc:a1:fb:7f:b6:91:2a:3d:db:c0:3e:
75:bc:5c:4d:fa:b6:a0:b2:16:e4:e2:21:47:30:6d:7f:af:df:
8d:52:bb:f5:fa:a4:80:6b:18:52:84:a3:cb:a5:83:2b:b9:10:
b7:6a:36:e1:87:ef:9d:ad:d9:4d:a7:69:bc:01:1a:d6:b2:32:
07:fe:02:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 11:06:52 2024 by rpki-client on console-fra.rpki-client.org