Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/KAI5_YQ6rHUnmrmJtD1RMLBKI4U.roa
File: KAI5_YQ6rHUnmrmJtD1RMLBKI4U.roa (raw, json)
Hash identifier: DC8uIPBChJyv8X+gBeTcXYAmkxPtajsLKmvF2REg34g=
Subject key identifier: 28:02:39:FD:84:3A:AC:75:27:9A:B9:89:B4:3D:51:30:B0:4A:23:85
Certificate issuer: /CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Certificate serial: 0A9023
Authority key identifier: 9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/KAI5_YQ6rHUnmrmJtD1RMLBKI4U.roa
Signing time: Thu 03 Feb 2022 16:57:17 +0000
ROA not before: Thu 03 Feb 2022 16:57:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 188.208.103.0/24 maxlen: 24
94.176.214.0/23 maxlen: 23
62.192.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692259 (0xa9023)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Validity
Not Before: Feb 3 16:57:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=280239fd843aac75279ab989b43d5130b04a2385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:80:74:98:cf:90:ea:bb:85:fc:dd:09:1b:
16:2f:6f:81:a6:f6:69:29:1b:7c:bc:d0:1f:a1:07:
1b:a8:59:2a:70:f0:eb:8a:49:71:c6:56:a9:d4:6b:
f2:1e:17:c0:67:1f:9a:04:a7:1a:b3:c8:a1:30:82:
1e:75:eb:4f:9f:4c:a9:95:27:d6:d0:b1:40:75:44:
38:58:e3:90:dc:d4:3e:18:7e:5f:82:63:ea:97:cc:
8d:19:5f:09:0f:67:db:eb:ec:71:41:9a:4f:ca:e2:
60:5c:fa:53:20:45:a7:f1:41:db:6f:30:9a:93:5d:
54:35:e8:ca:94:d1:56:7d:68:6c:90:51:b6:0a:d9:
56:37:42:e0:9d:25:25:31:68:ca:d9:a4:fa:d2:66:
cf:9a:aa:a3:19:ec:5d:8a:8a:1c:7e:94:b5:94:d4:
63:12:77:d8:44:13:5b:7f:3a:90:d4:7a:08:cd:ed:
c9:f7:46:8c:db:97:97:6c:22:b9:b5:3f:26:ee:5a:
6c:73:3f:6b:16:16:b8:6b:ec:4e:c4:10:e9:8c:21:
9c:31:41:bd:1d:23:1c:1a:96:ab:61:f2:f7:4d:67:
72:2d:52:f8:34:dc:59:1e:3d:67:8e:9e:07:07:f6:
f2:f8:0f:85:78:eb:60:17:2f:8c:ba:30:ff:65:39:
e8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:02:39:FD:84:3A:AC:75:27:9A:B9:89:B4:3D:51:30:B0:4A:23:85
X509v3 Authority Key Identifier:
keyid:9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/KAI5_YQ6rHUnmrmJtD1RMLBKI4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/mx6hXCG31V3qS9yGGxwK_J5DcDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
94.176.214.0/23
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
77:3c:01:d7:30:f2:11:c7:cc:53:84:5b:8c:e4:e0:a1:79:eb:
98:26:81:57:13:b3:fd:4b:7a:6a:3e:2e:ef:09:4e:ef:b8:43:
20:4a:24:87:c7:49:5c:d0:30:92:a9:b5:96:7f:f5:3d:9c:e8:
3f:95:06:0b:d4:61:31:21:06:df:fa:28:c2:c9:03:5b:02:49:
ea:c7:e8:41:fd:cb:f2:18:af:56:03:6d:2e:3f:c2:81:4d:6c:
61:a8:57:e5:89:bd:19:c6:42:5b:8b:0c:cb:17:02:a8:37:d7:
63:19:69:d3:b9:c2:27:ff:ac:1a:77:73:e8:00:74:03:d1:94:
a0:b1:6e:5b:96:b1:cf:55:02:22:30:ee:5b:33:ec:e9:5d:aa:
5c:93:a8:a7:bf:f0:cb:81:c5:0d:bc:4c:c3:5d:5b:23:ef:c3:
9e:53:a6:79:97:44:f4:2e:ac:e4:d7:b1:38:f5:3d:ad:39:c7:
9f:b1:2d:26:39:c2:a4:a0:f4:60:4b:01:60:a2:8b:ec:da:65:
1e:9b:3d:a9:c8:d4:2c:7b:30:49:f1:3f:e7:d1:43:ae:81:9d:
05:4a:11:7d:a9:ed:7c:ef:d4:05:77:11:32:54:49:65:53:02:
ef:fb:ce:b1:f2:e3:90:ea:78:47:7d:f8:47:97:85:7c:e5:31:
f1:bf:bc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:54 2023 by rpki-client on console-ams.rpki-client.org