Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/df18c9-af70-430d-b7f9-73c7ed293884/1/kmjEIsIwRTJpZcJsjW_cVTA1GII.roa
File: kmjEIsIwRTJpZcJsjW_cVTA1GII.roa (raw, json)
Hash identifier: 59MiMAs5RBgJTJyUeLBGR2Mfajs139PQFZUqvLpXORo=
Subject key identifier: 92:68:C4:22:C2:30:45:32:69:65:C2:6C:8D:6F:DC:55:30:35:18:82
Certificate issuer: /CN=d83a5e49dd9ec0f454e78930267d0d1c930728e3
Certificate serial: 0189654AC2B802CD583B83E56408344ACEB0
Authority key identifier: D8:3A:5E:49:DD:9E:C0:F4:54:E7:89:30:26:7D:0D:1C:93:07:28:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DpeSd2ewPRU54kwJn0NHJMHKOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/df18c9-af70-430d-b7f9-73c7ed293884/1/kmjEIsIwRTJpZcJsjW_cVTA1GII.roa
Signing time: Mon 17 Jul 2023 19:19:05 +0000
ROA not before: Mon 17 Jul 2023 19:19:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 94.124.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:c2:b8:02:cd:58:3b:83:e5:64:08:34:4a:ce:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83a5e49dd9ec0f454e78930267d0d1c930728e3
Validity
Not Before: Jul 17 19:19:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9268c422c23045326965c26c8d6fdc5530351882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9d:65:07:a4:c6:28:49:59:d0:84:f9:eb:b9:
67:8d:e9:df:b9:67:05:67:73:cc:3b:dc:05:47:8a:
5b:69:22:65:4b:61:7f:53:d6:cd:f6:3b:ff:e4:22:
41:c1:8f:2d:5a:ea:56:60:0c:78:bb:f6:3f:d1:be:
90:1d:4b:81:30:14:aa:f5:1d:cb:01:f6:16:da:7e:
95:b4:53:89:92:b2:a6:03:b9:f7:36:2f:27:95:5a:
08:54:c6:19:a9:96:43:fc:c6:14:7d:9e:1c:f4:51:
ab:95:e4:12:11:bb:00:bd:de:6e:31:e5:3a:9c:d1:
74:f3:d0:71:09:f3:8e:e9:9d:c7:e3:e8:0c:ab:2b:
83:7b:ea:ae:47:c8:77:11:24:10:8b:85:ca:28:08:
df:21:db:ab:74:dc:64:bd:41:66:dc:c6:41:05:a0:
6c:9b:60:68:04:f0:20:4e:fb:f6:4e:a1:8a:e8:d8:
69:b2:2c:fa:cc:f3:64:cd:00:b1:7b:73:a1:95:f7:
d4:87:b7:7e:d1:19:85:70:89:3a:c2:2b:d1:4c:7f:
ee:77:8a:3b:5f:5e:74:2c:9a:46:67:41:cc:ce:06:
e1:c2:fe:35:2e:19:58:8a:00:3c:2c:e5:19:ab:c6:
30:11:58:55:54:00:28:69:10:cc:7d:b8:92:4d:fd:
bb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:68:C4:22:C2:30:45:32:69:65:C2:6C:8D:6F:DC:55:30:35:18:82
X509v3 Authority Key Identifier:
keyid:D8:3A:5E:49:DD:9E:C0:F4:54:E7:89:30:26:7D:0D:1C:93:07:28:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DpeSd2ewPRU54kwJn0NHJMHKOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/df18c9-af70-430d-b7f9-73c7ed293884/1/kmjEIsIwRTJpZcJsjW_cVTA1GII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/df18c9-af70-430d-b7f9-73c7ed293884/1/2DpeSd2ewPRU54kwJn0NHJMHKOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.75.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:28:7e:c8:8a:cb:6d:e1:98:87:c9:eb:c7:88:6d:9c:31:9c:
07:f7:15:24:68:59:8e:e2:23:fa:6a:f2:a4:24:f4:46:b6:1a:
f5:bd:c2:7c:50:60:07:59:0c:fc:3f:16:0c:6f:c1:23:ea:c4:
32:96:fa:99:95:f7:0e:82:b0:6f:1f:b3:ba:47:5c:fb:ca:01:
c2:85:57:29:05:07:16:6a:a6:c9:c2:97:37:d5:94:ab:3d:17:
d9:70:27:af:61:06:ce:97:8b:54:bd:6d:75:24:25:82:fb:86:
b3:8c:a3:0f:e5:85:2e:29:c9:55:3c:f1:56:ff:31:b8:50:ac:
2f:d0:31:5f:5d:c3:97:10:9b:9f:b7:66:b0:b3:9e:b9:2c:35:
7f:d6:be:eb:1a:e8:fc:dd:c7:23:35:bc:66:7a:af:7f:52:e3:
31:f2:67:2b:6d:05:21:96:0e:56:77:e9:e9:b3:df:0c:fb:b3:
f6:00:9d:e0:4e:21:78:cb:43:85:d8:43:4c:cd:e1:11:33:aa:
52:11:f7:49:86:b0:cc:5c:42:a9:88:72:80:01:36:b8:be:eb:
58:8d:8c:60:76:a4:83:08:20:d5:db:88:24:47:22:2d:e0:27:
90:ec:74:a4:c3:47:23:f2:fd:c2:d2:f5:ac:30:b8:10:ae:b3:
0b:17:bc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:02 2025 by rpki-client