Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/KKUfcEPe_XmM6kt6ifFOcOSF8v8.roa
File: KKUfcEPe_XmM6kt6ifFOcOSF8v8.roa (raw, json)
Hash identifier: a09ip92IHypg/4v/IrulTMS7Yjr3g0e89e5zYMKA5sM=
Subject key identifier: 28:A5:1F:70:43:DE:FD:79:8C:EA:4B:7A:89:F1:4E:70:E4:85:F2:FF
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018515CA3C748B24D04860257176D8E27A5A
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/KKUfcEPe_XmM6kt6ifFOcOSF8v8.roa
Signing time: Thu 15 Dec 2022 12:37:33 +0000
ROA not before: Thu 15 Dec 2022 12:37:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 141.11.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:ca:3c:74:8b:24:d0:48:60:25:71:76:d8:e2:7a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 15 12:37:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28a51f7043defd798cea4b7a89f14e70e485f2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:da:0c:d1:a8:f2:56:b3:56:bc:bf:6b:02:
52:4e:07:26:af:0b:17:3c:4d:94:90:ae:df:3c:1e:
61:3d:e5:c9:47:38:20:35:e2:0a:f5:db:35:a4:f4:
55:99:5f:b9:f9:c4:b9:4a:72:aa:14:fc:08:79:f6:
5a:e6:6d:40:93:77:26:37:66:2c:6d:f3:e1:5c:27:
9e:4f:0e:e3:e4:4f:61:ac:5a:42:77:f0:5c:12:81:
2d:94:12:e3:cd:e8:2e:18:3c:0c:5e:2a:0d:3a:7d:
3f:c9:12:26:e3:bb:24:ca:5c:b1:ac:67:b0:1c:2b:
ba:ec:32:c2:34:d9:74:be:ac:e9:62:85:03:64:82:
d1:dc:5a:d7:cb:16:03:7a:a6:0a:df:50:bf:45:34:
7b:91:2f:31:fa:ca:3c:b5:f3:9a:6f:d2:5c:7d:9a:
db:bf:7b:cd:c6:88:cb:d8:f4:d2:22:70:ef:8a:d6:
40:01:f4:b2:c3:bc:bf:a6:85:4f:14:89:a7:e9:d1:
8f:c3:48:99:28:c8:6f:26:45:a5:b7:8d:b0:c6:d9:
d4:66:c1:98:9f:e2:14:e3:6c:09:30:c7:e0:f3:1b:
b3:2a:af:b4:57:1e:25:71:5a:9e:fb:5b:1c:db:5f:
e5:2a:c9:2e:e6:c9:b9:f8:27:99:fa:51:6d:e0:56:
70:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A5:1F:70:43:DE:FD:79:8C:EA:4B:7A:89:F1:4E:70:E4:85:F2:FF
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/KKUfcEPe_XmM6kt6ifFOcOSF8v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.240.0/24
Signature Algorithm: sha256WithRSAEncryption
01:52:e2:e1:0b:b0:06:af:24:f7:ce:3c:bf:8f:61:1c:78:6a:
3d:31:c8:b9:1e:db:ff:92:85:89:e8:6e:da:ed:bd:5a:63:32:
63:ba:27:c3:0e:df:14:d9:c0:d1:bd:5b:04:5c:a3:85:0a:8d:
35:27:b0:4c:98:b4:7a:ee:1d:3f:7d:0c:2a:4e:06:17:cc:32:
2a:49:dd:82:37:70:c8:41:27:36:08:88:09:32:72:48:35:3b:
b2:ea:17:5d:be:4a:d4:c9:c9:fa:8f:43:4b:27:f0:50:18:34:
e9:f8:d8:e0:d9:12:0a:80:d1:17:3c:be:e4:00:9b:d5:45:2b:
67:c8:2c:94:ef:23:32:a2:3f:16:e7:ab:fa:44:b6:cc:d3:9c:
78:66:ea:b1:6e:0e:b7:b5:8c:7c:68:54:02:df:3c:b4:99:0d:
7c:9a:1f:61:29:9e:a8:dd:88:62:25:ca:1d:f6:78:62:0f:7c:
3c:3d:a1:f7:c2:54:ed:04:6d:2f:af:16:93:0d:ba:b4:b9:9b:
63:44:ee:2b:b6:a9:62:55:08:9f:ff:2e:5e:9b:d4:48:16:b6:
f4:d0:d2:8c:7e:c2:b4:f2:d2:53:11:92:12:2f:cf:8d:a3:ce:
56:58:bb:ad:16:c9:cf:9d:e0:af:74:e4:34:1f:8e:44:f9:b3:
5c:c9:d7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org