Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b85190-def2-4b57-9bb4-7063d5c50973/1/KDgt24n1vHti0m6PzOoeOD6muSs.roa
File: KDgt24n1vHti0m6PzOoeOD6muSs.roa (raw, json)
Hash identifier: TphHsWrql8cue+AA1/z3Y+YwRovVOpgJsNZ0/7Oe6k8=
Subject key identifier: 28:38:2D:DB:89:F5:BC:7B:62:D2:6E:8F:CC:EA:1E:38:3E:A6:B9:2B
Certificate issuer: /CN=334d04b85d64b55c80e1d7622f6163615fedaeef
Certificate serial: 011F8D
Authority key identifier: 33:4D:04:B8:5D:64:B5:5C:80:E1:D7:62:2F:61:63:61:5F:ED:AE:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M00EuF1ktVyA4ddiL2FjYV_tru8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b85190-def2-4b57-9bb4-7063d5c50973/1/KDgt24n1vHti0m6PzOoeOD6muSs.roa
Signing time: Tue 26 Apr 2022 14:23:44 +0000
ROA not before: Tue 26 Apr 2022 14:23:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51177
IP address blocks: 45.128.116.0/22 maxlen: 22
193.201.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73613 (0x11f8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334d04b85d64b55c80e1d7622f6163615fedaeef
Validity
Not Before: Apr 26 14:23:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28382ddb89f5bc7b62d26e8fccea1e383ea6b92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:6a:f0:8e:39:84:e5:24:f1:64:29:60:c1:
49:f9:28:cf:79:26:78:0b:27:35:bc:46:01:3c:96:
15:0d:fa:36:9a:2c:50:42:f0:31:b9:24:e7:19:47:
d0:74:3a:84:ae:1a:93:67:2f:3a:93:14:e6:b8:43:
55:4a:c1:55:61:fb:e9:a2:c1:07:f7:e6:06:24:ed:
4f:fb:39:f1:16:e8:32:93:0a:e2:43:fe:75:46:bb:
f9:02:1e:94:ec:42:0b:a6:5f:fd:3a:da:a6:2a:35:
64:21:79:11:df:b3:eb:57:bf:d6:e3:ed:a3:93:ba:
71:32:20:ea:84:ed:48:14:61:02:79:d8:5e:40:9f:
3a:b2:8b:50:ed:fc:b2:67:fa:c8:05:d0:69:e8:9e:
d3:4a:4b:d8:df:d6:39:a2:31:ca:88:dd:45:64:3b:
6a:6c:48:a0:bf:9f:03:c8:b3:12:7c:d8:7e:d3:79:
2d:b5:a7:93:11:23:01:ff:56:ac:8a:6d:14:e5:9a:
cd:a4:ab:59:05:2c:85:5e:65:e5:fc:f4:2a:8a:43:
2e:db:15:b3:ba:29:e6:9c:e3:14:d5:80:37:95:12:
31:ef:f9:9e:cd:40:29:c8:5b:29:2c:d9:30:8f:6a:
69:88:ec:83:63:c6:62:c9:79:78:f9:2d:93:56:f1:
90:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:38:2D:DB:89:F5:BC:7B:62:D2:6E:8F:CC:EA:1E:38:3E:A6:B9:2B
X509v3 Authority Key Identifier:
keyid:33:4D:04:B8:5D:64:B5:5C:80:E1:D7:62:2F:61:63:61:5F:ED:AE:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M00EuF1ktVyA4ddiL2FjYV_tru8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b85190-def2-4b57-9bb4-7063d5c50973/1/KDgt24n1vHti0m6PzOoeOD6muSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b85190-def2-4b57-9bb4-7063d5c50973/1/M00EuF1ktVyA4ddiL2FjYV_tru8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.116.0/22
193.201.82.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a0:ff:b2:29:bc:3b:b7:60:fa:f3:94:61:9f:36:56:9b:e7:
18:17:52:d2:2d:db:e7:74:cf:52:db:29:02:d3:37:c5:6d:b0:
c8:5b:d8:4e:ef:5d:cb:8d:ff:86:ec:54:3e:7e:6c:58:f6:db:
59:aa:e1:66:95:eb:5e:eb:bc:1c:f8:fb:57:85:08:dc:44:cc:
8c:2a:00:f6:db:7a:6b:c9:7b:f5:75:4a:7f:c3:37:47:6e:9f:
aa:d8:3b:31:cf:75:74:f8:90:fe:c2:a2:fe:45:b1:15:40:c3:
df:76:b1:2e:ee:29:8e:d6:e6:08:15:01:ca:f5:e0:fc:66:5d:
bd:75:b3:50:a4:8f:10:ec:9f:09:6f:f0:9f:58:61:06:98:b1:
14:10:c2:b8:a2:e2:8f:6b:66:9b:cf:c4:66:ca:fa:c2:16:47:
54:e6:c7:5e:68:8f:29:74:33:da:ec:e3:6d:96:e0:dc:82:c0:
6b:72:14:e3:71:27:f9:09:17:18:1a:ca:46:f7:fd:b8:de:5e:
f0:a3:f2:c0:2b:5f:87:b2:09:4d:20:b8:61:9b:25:16:10:15:
66:e5:20:2d:7f:66:82:e0:71:1f:a0:2b:8e:23:c4:21:51:ee:
03:21:cf:b6:81:89:3d:72:d5:9a:73:0a:61:af:83:4b:db:c8:
9c:3b:45:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:45 2025 by rpki-client