Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/KkNCGC-uZi5fP0wwKai5VFNoefM.roa
File: KkNCGC-uZi5fP0wwKai5VFNoefM.roa (raw, json)
Hash identifier: EkduW+arOpKvrwHQMT+CJsswrGpDY/+8eSnswzUk25E=
Subject key identifier: 2A:43:42:18:2F:AE:66:2E:5F:3F:4C:30:29:A8:B9:54:53:68:79:F3
Certificate issuer: /CN=7485bd93bbaae9d7c973ab386872f1148bb258d1
Certificate serial: 029E37B9
Authority key identifier: 74:85:BD:93:BB:AA:E9:D7:C9:73:AB:38:68:72:F1:14:8B:B2:58:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIW9k7uq6dfJc6s4aHLxFIuyWNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/KkNCGC-uZi5fP0wwKai5VFNoefM.roa
Signing time: Sat 01 Jan 2022 00:57:23 +0000
ROA not before: Sat 01 Jan 2022 00:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208632
IP address blocks: 45.92.44.0/22 maxlen: 24
2a0e:1d40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43923385 (0x29e37b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7485bd93bbaae9d7c973ab386872f1148bb258d1
Validity
Not Before: Jan 1 00:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a4342182fae662e5f3f4c3029a8b954536879f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3e:05:b9:ce:22:8a:52:07:a5:8c:15:16:f3:
a5:89:cd:0c:36:45:bb:c4:9c:c7:85:1a:c7:c8:ff:
7b:3b:94:fc:7e:bb:5c:29:ad:0c:cf:da:c6:de:ba:
df:e3:9b:6e:42:aa:51:44:b6:11:35:58:cf:60:65:
85:b4:fb:72:e3:b8:b1:75:a2:eb:8b:b6:c2:0c:62:
e2:ee:de:40:56:1e:f0:f0:0f:24:ad:e4:44:74:c2:
98:1a:18:03:ed:22:fe:b4:81:69:e4:c0:c7:4e:2a:
f3:8f:c4:ca:e8:e9:17:df:2c:3a:3b:71:b5:02:d8:
37:79:d1:f5:e0:59:3c:91:97:cd:08:e2:7d:a1:d9:
36:c0:a6:21:94:a1:6b:e2:e8:7f:e8:f3:10:87:33:
37:bd:b5:74:6b:7d:33:ab:f0:6a:f2:3e:4a:9a:e3:
ac:78:e7:65:60:48:ed:ee:14:6b:df:81:70:f6:0e:
c8:50:29:00:96:36:15:c5:9a:13:72:bd:d2:6e:69:
a0:a5:27:04:28:63:95:41:c5:a3:46:ab:f8:cd:0d:
bb:26:8b:2c:b2:2d:01:27:d1:7a:f0:c3:db:0e:75:
34:0b:ab:36:46:18:99:12:2a:bb:cd:55:aa:91:ca:
5a:2d:f0:12:4e:fc:a9:a1:3a:a6:29:bd:39:1c:ec:
05:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:43:42:18:2F:AE:66:2E:5F:3F:4C:30:29:A8:B9:54:53:68:79:F3
X509v3 Authority Key Identifier:
keyid:74:85:BD:93:BB:AA:E9:D7:C9:73:AB:38:68:72:F1:14:8B:B2:58:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIW9k7uq6dfJc6s4aHLxFIuyWNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/KkNCGC-uZi5fP0wwKai5VFNoefM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/dIW9k7uq6dfJc6s4aHLxFIuyWNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.44.0/22
IPv6:
2a0e:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
2d:14:c8:7d:08:c8:30:d0:73:65:f2:c1:3d:a8:0f:cf:60:88:
f4:4c:29:a1:65:40:03:a9:bb:be:78:80:fb:74:17:ba:7e:bf:
77:b1:53:0a:ff:f9:74:13:ad:f9:af:4c:66:d4:d9:ba:a8:14:
ef:92:f2:23:91:cb:55:58:11:96:7d:a8:b8:4f:ee:bf:43:71:
d2:0f:2c:11:8b:c1:3f:38:40:c3:de:dc:fd:a4:95:a0:2b:46:
36:6b:d9:2f:68:77:7d:4c:35:e6:81:a9:f3:58:72:aa:54:61:
2c:c0:5f:82:08:23:23:af:df:75:28:57:f6:05:e8:95:96:15:
7b:eb:d3:77:3c:01:bb:da:80:71:0b:da:d1:9e:1d:a1:9a:16:
7e:f1:08:6c:9a:af:f1:10:6b:b1:4e:d8:c2:db:eb:0c:86:e2:
d7:aa:e9:53:59:b3:05:d9:92:ab:e6:35:76:e2:7e:5f:7d:20:
88:b0:92:c6:c9:29:35:14:a7:9b:d1:75:ec:ed:3e:d7:31:d2:
67:ad:e1:c5:b7:1f:9f:3f:cb:ad:fd:02:09:95:9f:e1:ed:7d:
48:8d:9e:fd:b4:56:91:43:90:16:55:42:cd:e6:db:d4:a5:9f:
a5:0d:8a:55:61:2f:32:88:30:b8:43:76:5c:99:2f:5b:e6:9f:
83:c3:ab:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:08 2024 by rpki-client on console-fra.rpki-client.org