Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c2fdb2-f7e7-4384-8ebf-a8c056ababdf/1/KVt21Aw2kYa6sQmeBpiQe_XXej0.roa
File: KVt21Aw2kYa6sQmeBpiQe_XXej0.roa (raw, json)
Hash identifier: kXobiGVeXkvUEvOp42GZBHgPFyYhwJEe2x0z0LWlM/s=
Subject key identifier: 29:5B:76:D4:0C:36:91:86:BA:B1:09:9E:06:98:90:7B:F5:D7:7A:3D
Certificate issuer: /CN=8ef734eb4e7b1f87641c4293db223382bc75ba9e
Certificate serial: 03930DE9
Authority key identifier: 8E:F7:34:EB:4E:7B:1F:87:64:1C:42:93:DB:22:33:82:BC:75:BA:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvc06057H4dkHEKT2yIzgrx1up4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c2fdb2-f7e7-4384-8ebf-a8c056ababdf/1/KVt21Aw2kYa6sQmeBpiQe_XXej0.roa
Signing time: Sat 01 Jan 2022 16:05:43 +0000
ROA not before: Sat 01 Jan 2022 16:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42084
IP address blocks: 176.107.40.0/21 maxlen: 21
91.189.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59969001 (0x3930de9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef734eb4e7b1f87641c4293db223382bc75ba9e
Validity
Not Before: Jan 1 16:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=295b76d40c369186bab1099e0698907bf5d77a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:5e:36:b5:81:6a:7e:1e:50:c5:ac:9c:ba:
46:0e:16:87:bb:c0:8f:f7:4b:0e:e0:21:e8:66:95:
32:be:5c:d1:24:e0:fe:cb:42:70:93:d7:6d:28:52:
19:25:20:8d:10:d8:4a:91:64:4e:19:42:23:2b:fb:
94:f1:ac:7f:97:35:11:08:f5:5b:b9:53:4b:0e:b3:
4d:98:3c:a0:66:a6:21:55:32:96:f8:20:8a:37:3b:
47:54:cd:86:9a:32:c2:62:cf:2c:2e:fa:5e:7d:fc:
87:38:8c:07:4c:94:11:d6:d4:dd:e0:ef:b2:11:9b:
0c:b9:93:46:d7:dc:ea:ee:56:ad:34:35:70:91:4c:
86:3b:ce:84:0b:6f:53:23:6b:96:7c:c6:93:4d:17:
e8:3f:74:a1:01:58:e6:56:98:7a:67:55:27:03:b2:
54:c4:03:e5:c4:10:42:70:71:a1:11:15:ec:cc:af:
70:64:54:20:76:a4:16:16:e6:37:39:b1:58:48:79:
1c:20:92:3c:1e:2a:52:96:7b:48:91:77:6e:3b:e3:
e3:83:e4:b8:d1:a2:75:d7:0f:d1:b4:f9:be:cf:6f:
6b:98:03:c3:74:de:68:aa:01:7a:3e:32:98:2e:c2:
21:ac:e6:48:fe:c9:2c:01:3f:89:e6:a3:6e:c0:2f:
32:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5B:76:D4:0C:36:91:86:BA:B1:09:9E:06:98:90:7B:F5:D7:7A:3D
X509v3 Authority Key Identifier:
keyid:8E:F7:34:EB:4E:7B:1F:87:64:1C:42:93:DB:22:33:82:BC:75:BA:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvc06057H4dkHEKT2yIzgrx1up4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c2fdb2-f7e7-4384-8ebf-a8c056ababdf/1/KVt21Aw2kYa6sQmeBpiQe_XXej0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c2fdb2-f7e7-4384-8ebf-a8c056ababdf/1/jvc06057H4dkHEKT2yIzgrx1up4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.0.0/21
176.107.40.0/21
Signature Algorithm: sha256WithRSAEncryption
58:86:39:fb:9a:ee:52:ff:33:10:c0:21:54:b7:f3:19:cd:08:
d6:72:5c:e4:85:c5:74:79:f1:45:9b:4f:31:0a:f6:5d:9b:71:
f5:3f:8a:7d:ef:e7:92:74:3b:b4:72:21:06:5d:dd:72:b2:e3:
a1:f5:7f:27:0c:bf:32:e2:9b:1e:da:10:8a:0e:a6:77:2a:a4:
c2:48:a4:fb:2c:d6:c6:89:6e:7a:2a:96:bd:b9:1b:f9:8f:27:
51:58:1a:eb:12:01:4a:65:de:b5:f4:e2:55:32:4a:db:3b:1d:
f8:5b:d6:67:8b:e7:16:d3:36:a1:0f:82:42:7c:26:99:78:45:
cd:e3:42:9b:57:64:1a:bc:14:87:88:3d:9d:e5:58:a3:97:bc:
ff:a0:f3:4b:95:42:25:b6:70:7c:65:c1:7d:c6:48:f4:20:6c:
8d:17:7f:4d:be:23:e9:ff:6c:54:10:38:2e:7b:60:7e:ef:5a:
e1:54:2e:ce:2c:13:b4:a6:23:f8:58:b5:a4:e2:11:be:c7:69:
41:69:ff:19:99:00:ec:2f:10:02:e9:0a:07:78:de:2f:32:67:
e5:d6:fa:f8:18:9d:3c:8b:5e:90:10:e2:0c:ed:7b:84:0e:db:
a4:8d:12:d6:9b:c2:04:e4:fb:7d:98:67:ca:b9:6b:b4:21:6f:
ef:ec:10:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:54 2025 by rpki-client