Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/KzDiNsXqWjIXpJ6dQttWSdDqsdI.roa
File: KzDiNsXqWjIXpJ6dQttWSdDqsdI.roa (raw, json)
Hash identifier: YVPctjlzcSA1pGKqQm1MD1qrvD8PD0kzLruDfArDhoM=
Subject key identifier: 2B:30:E2:36:C5:EA:5A:32:17:A4:9E:9D:42:DB:56:49:D0:EA:B1:D2
Certificate issuer: /CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Certificate serial: 01828E7EAB78198DBCBCAC750E8C3CC31D5D
Authority key identifier: 9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/KzDiNsXqWjIXpJ6dQttWSdDqsdI.roa
Signing time: Thu 11 Aug 2022 20:00:42 +0000
ROA not before: Thu 11 Aug 2022 20:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 188.208.103.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8e:7e:ab:78:19:8d:bc:bc:ac:75:0e:8c:3c:c3:1d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Validity
Not Before: Aug 11 20:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b30e236c5ea5a3217a49e9d42db5649d0eab1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:75:65:c0:a8:3d:d8:28:f0:29:30:ca:4f:dd:
87:58:b0:46:0e:d5:49:db:e9:45:48:eb:3b:1a:84:
90:73:49:bd:34:82:22:11:39:a6:e3:1e:13:20:44:
4e:7c:9f:10:86:d5:2f:09:1e:db:e1:ed:60:5f:4a:
b5:2d:cb:40:6b:62:0c:10:8a:5e:17:28:d3:e0:31:
cd:19:26:c2:56:d8:c6:91:fd:8f:6a:04:2d:1b:62:
76:79:c3:73:ae:f0:26:d2:a9:97:2d:2c:7c:4b:2a:
c4:76:5d:24:e4:87:99:01:42:89:52:33:80:19:d5:
ea:7a:94:ca:f5:27:04:44:3e:57:91:16:17:5b:2b:
1c:47:06:0f:38:55:34:e1:f8:dc:3d:f8:17:a1:a1:
a1:11:f3:94:1d:ab:ff:67:b0:1a:2e:34:42:45:c3:
4c:d9:0f:d5:75:e2:40:7c:f3:3e:f3:1e:69:00:3b:
a5:9b:47:55:49:52:7f:af:56:24:7f:3e:39:f7:b0:
03:cf:ef:a6:a5:a7:e7:c1:a5:58:ed:33:8e:f4:14:
ba:8a:ce:c8:7b:a4:4b:ad:ea:5e:6e:88:c2:e3:60:
98:6e:d3:57:6e:99:f7:88:38:56:fd:3f:ef:5a:c5:
ac:50:70:e5:8c:b9:b9:ca:d2:0b:11:50:66:eb:78:
2d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:30:E2:36:C5:EA:5A:32:17:A4:9E:9D:42:DB:56:49:D0:EA:B1:D2
X509v3 Authority Key Identifier:
keyid:9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/KzDiNsXqWjIXpJ6dQttWSdDqsdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/mx6hXCG31V3qS9yGGxwK_J5DcDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c8:f4:cf:f7:64:92:59:c0:2b:ca:a9:fc:ea:3b:87:f5:79:
e3:4d:0f:65:47:a8:12:6e:8f:c1:1c:25:7d:5d:a1:7c:af:2d:
e6:cc:7d:be:28:c0:6e:18:ca:0b:0d:13:ed:10:42:d6:df:6f:
a8:e9:a7:e5:56:7f:04:f0:dd:ce:90:69:35:88:03:49:83:5a:
d1:d5:52:52:9a:b7:cc:9c:a2:84:e7:2b:35:f9:8f:47:1a:f6:
a9:24:bb:ba:3e:29:f2:ef:ae:a7:46:c4:d2:7e:97:3b:28:1d:
2d:54:c2:5e:fd:c2:da:ba:92:53:67:ef:53:ea:55:53:e1:a0:
fb:8d:70:1d:a0:ca:e9:aa:07:5f:0b:ab:0f:87:ca:6e:c5:fa:
32:f1:e9:1b:1c:05:b8:19:e5:e0:7d:47:8c:22:79:36:fb:6d:
db:a5:95:ac:c6:4f:fe:0c:9d:d4:02:ad:88:17:0b:f7:06:5a:
35:d5:b3:f7:5e:25:e4:ab:c6:b5:b0:2f:55:c4:2c:28:3d:31:
84:09:52:19:2a:a6:8f:04:e5:e6:8a:dc:e4:85:39:e2:f0:53:
05:65:90:2f:09:99:6b:63:25:89:e9:8e:4e:53:17:4f:84:47:
32:15:fb:71:b9:3d:27:f0:8c:63:fa:23:3e:10:af:be:78:79:
a0:70:f4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:01 2023 by rpki-client on console-fra.rpki-client.org