Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/KrX4vP4sN9E2PeSWKxXJnBHWTCc.roa
File: KrX4vP4sN9E2PeSWKxXJnBHWTCc.roa (raw, json)
Hash identifier: LHHYgyeArLv/+VTI6JeBEcDUdYAZFQ1BoP6QnyinKP8=
Subject key identifier: 2A:B5:F8:BC:FE:2C:37:D1:36:3D:E4:96:2B:15:C9:9C:11:D6:4C:27
Certificate issuer: /CN=62b79dd3dc6463df003ed8f11e7cd6bdb140aef5
Certificate serial: 03C13105
Authority key identifier: 62:B7:9D:D3:DC:64:63:DF:00:3E:D8:F1:1E:7C:D6:BD:B1:40:AE:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yred09xkY98APtjxHnzWvbFArvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/KrX4vP4sN9E2PeSWKxXJnBHWTCc.roa
Signing time: Wed 16 Feb 2022 21:28:21 +0000
ROA not before: Wed 16 Feb 2022 21:28:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213391
IP address blocks: 185.228.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62992645 (0x3c13105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62b79dd3dc6463df003ed8f11e7cd6bdb140aef5
Validity
Not Before: Feb 16 21:28:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ab5f8bcfe2c37d1363de4962b15c99c11d64c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b5:70:0a:04:50:0a:9b:8e:7f:48:c8:4b:2e:
29:cf:d9:a4:f9:71:be:83:b1:e8:8b:a0:e7:41:7f:
f9:6f:54:19:eb:d8:d7:38:4e:b8:5a:c9:aa:36:63:
f0:6b:87:fb:1a:5e:c7:64:56:77:fd:8d:a7:cb:d0:
e7:6d:93:a2:3b:01:b4:8c:48:cc:d8:51:4f:13:74:
92:ea:45:8e:fa:3b:76:cb:ce:63:31:9c:90:b8:12:
5d:8c:cb:04:8e:ac:16:9c:00:5a:a6:28:62:38:28:
2e:f8:2f:be:f5:9c:1d:62:df:89:43:2c:3f:92:1f:
88:b6:11:68:86:38:f1:c6:ed:80:84:bb:bc:7a:7f:
2c:f3:0a:bb:f3:2e:83:31:ad:4e:34:b6:27:50:a5:
89:38:7f:df:7a:d6:7b:b8:02:59:ef:3d:92:ff:2f:
fa:3e:70:36:04:d2:30:aa:aa:bf:02:14:f4:4d:28:
b9:e5:29:30:d5:aa:2b:90:29:fc:5c:74:35:80:e4:
be:af:2a:5b:4e:24:e9:5f:ee:e9:64:0d:95:8b:1c:
7f:9e:74:8d:7c:aa:ec:a2:3c:79:f8:24:6f:74:b0:
5e:4d:77:95:80:8e:73:cd:bc:9b:c3:b4:b0:00:0f:
75:90:54:24:1e:63:d1:7f:90:7c:3b:e5:7d:3a:0c:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B5:F8:BC:FE:2C:37:D1:36:3D:E4:96:2B:15:C9:9C:11:D6:4C:27
X509v3 Authority Key Identifier:
keyid:62:B7:9D:D3:DC:64:63:DF:00:3E:D8:F1:1E:7C:D6:BD:B1:40:AE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yred09xkY98APtjxHnzWvbFArvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/KrX4vP4sN9E2PeSWKxXJnBHWTCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/Yred09xkY98APtjxHnzWvbFArvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.251.0/24
Signature Algorithm: sha256WithRSAEncryption
92:09:92:7f:4f:a2:37:a6:6b:3e:3c:c7:9f:9e:85:d8:23:f0:
b0:9d:f9:77:38:f7:b5:11:d8:1c:be:59:99:01:4d:b4:15:3d:
06:ed:9c:f8:b0:4c:7a:e6:04:1d:ea:85:e2:58:3a:75:4a:a9:
2b:b1:35:bb:ca:7f:60:3c:75:4f:1e:86:43:72:46:64:3d:53:
f0:da:2c:90:b2:67:83:23:ba:26:89:c1:72:a0:22:e3:04:3b:
20:bc:74:f5:b7:89:3b:3f:ba:ee:94:53:d7:d7:42:af:0b:14:
a6:05:b0:e2:bb:f9:62:85:a0:39:fa:b5:60:37:fb:fe:6c:ee:
45:80:c1:78:c8:5a:b9:2d:c7:df:4c:c2:f4:9c:2b:59:46:9d:
91:11:c4:48:a6:47:4d:68:1e:7a:d0:5b:69:c6:1d:8e:8a:df:
6c:c9:ba:7b:f6:3f:1b:46:e9:d2:fe:92:ce:a5:b8:b4:53:e6:
81:72:e3:56:cc:de:f8:33:b8:e4:9a:e1:7b:4c:2d:11:f0:5d:
1b:09:78:8e:4c:fd:8f:20:d1:a5:16:f0:d0:56:d9:20:b0:0c:
dd:d7:20:be:31:53:39:82:7b:68:ff:9a:31:3d:af:20:6e:35:
c1:9c:5d:9e:a1:fe:9b:6c:da:8e:30:f0:bd:4e:63:be:0c:05:
c8:cf:8b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:01 2024 by rpki-client on console-ams.rpki-client.org