Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/KkX1FAmwiKwIJBNfn_yY1YwDI9Q.roa
File: KkX1FAmwiKwIJBNfn_yY1YwDI9Q.roa (raw, json)
Hash identifier: 8QcDFRHpRGG9iir1Oy2yupwnntaPpTobJ9xdnTsGCEo=
Subject key identifier: 2A:45:F5:14:09:B0:88:AC:08:24:13:5F:9F:FC:98:D5:8C:03:23:D4
Certificate issuer: /CN=0b1c467eb9408b11d06f1f67e5a9cc423c39ac2f
Certificate serial: 041DA19F
Authority key identifier: 0B:1C:46:7E:B9:40:8B:11:D0:6F:1F:67:E5:A9:CC:42:3C:39:AC:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxGfrlAixHQbx9n5anMQjw5rC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/KkX1FAmwiKwIJBNfn_yY1YwDI9Q.roa
Signing time: Sat 01 Jan 2022 09:58:26 +0000
ROA not before: Sat 01 Jan 2022 09:58:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207059
IP address blocks: 185.167.77.0/24 maxlen: 24
185.167.78.0/24 maxlen: 24
185.167.76.0/24 maxlen: 24
2a0b:4e00::/48 maxlen: 48
2a0b:4e00:1::/48 maxlen: 48
2a0b:4e00::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69050783 (0x41da19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1c467eb9408b11d06f1f67e5a9cc423c39ac2f
Validity
Not Before: Jan 1 09:58:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a45f51409b088ac0824135f9ffc98d58c0323d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:dc:ec:af:15:08:d6:02:fd:3f:54:24:6e:
99:22:1a:fd:25:74:44:5f:11:ee:29:e6:90:c0:03:
82:b7:81:47:c9:2d:f7:4c:06:58:3a:bc:b8:24:e3:
4f:86:df:be:a8:94:a9:9b:a3:16:27:15:e2:f5:35:
4d:76:04:93:ca:7c:c7:4b:0f:fb:77:f7:94:72:8b:
b5:a7:9b:cf:4a:c0:0e:44:44:88:a0:01:b1:30:a1:
a8:22:32:be:87:ec:42:87:32:ea:ca:ec:2b:8e:27:
ca:83:5d:42:a4:9d:d0:e9:e5:79:6c:e6:20:03:46:
5b:8d:8d:4e:5f:96:de:1a:fb:57:b0:46:19:68:4d:
0e:d3:16:34:36:a5:8a:1d:f9:5f:5f:0f:91:3d:99:
1e:32:ce:c1:78:5b:79:83:9c:44:99:a8:bb:a3:19:
3a:57:37:fb:ac:b9:f1:5d:6a:15:90:cc:17:6f:fd:
18:27:13:62:7f:e5:2a:9a:8c:44:30:ed:7e:4a:d4:
dd:36:aa:eb:81:e6:33:25:20:08:8e:14:15:39:86:
e4:49:10:36:2f:de:e0:34:0c:3b:d0:3f:ac:17:eb:
8e:32:3f:47:12:e3:d7:0c:7d:17:7f:72:3b:2d:b1:
da:ed:95:2a:60:55:80:f3:61:06:a3:e1:65:0a:14:
a1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:45:F5:14:09:B0:88:AC:08:24:13:5F:9F:FC:98:D5:8C:03:23:D4
X509v3 Authority Key Identifier:
keyid:0B:1C:46:7E:B9:40:8B:11:D0:6F:1F:67:E5:A9:CC:42:3C:39:AC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxGfrlAixHQbx9n5anMQjw5rC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/KkX1FAmwiKwIJBNfn_yY1YwDI9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/CxxGfrlAixHQbx9n5anMQjw5rC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.76.0-185.167.78.255
IPv6:
2a0b:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
32:ab:de:30:1f:4c:61:dc:dd:da:b6:ee:a3:9e:f3:3c:14:ff:
6d:db:1c:72:7a:c8:d3:a2:e1:f5:f3:26:cf:42:03:0a:cf:3f:
33:58:67:ce:53:dc:46:e7:be:dd:b4:3c:bf:a7:11:7c:80:30:
8b:11:71:ec:4a:af:6c:81:07:3a:28:a7:e5:f3:15:8b:e8:bf:
fd:b7:0c:f9:90:f9:17:1e:64:53:83:0f:3f:e4:97:e1:c7:cc:
44:d7:ed:ac:ec:84:85:17:91:69:f8:2b:8d:20:3f:9c:27:ff:
3d:1f:d4:e0:83:c8:62:4e:b6:28:a4:cd:af:0d:27:fb:28:f4:
84:12:de:3a:b4:5e:e2:51:9b:dd:d7:61:76:67:c6:d0:16:cd:
5c:42:36:ab:8e:64:93:a9:d0:e6:53:65:96:d4:ac:a5:25:f4:
67:58:a8:48:e7:b3:68:41:25:d8:a7:e7:44:76:b2:4a:4e:bc:
d4:4a:35:83:f4:2d:1a:9b:44:0e:46:86:35:c3:d0:ba:01:35:
fc:3b:1e:a0:ad:1c:f1:7a:3c:8a:55:db:7d:c7:b0:f2:71:1b:
dd:76:82:e7:ba:21:87:5b:fd:83:07:3a:c0:a3:21:7d:48:c3:
8d:92:24:40:c5:e1:45:d8:1c:43:11:dd:ab:fc:c4:84:db:38:
f0:8d:43:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:22 2024 by rpki-client on console-fra.rpki-client.org