Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/pKevo_NeujmwCVZFp45b7KIFz3s.roa
File: pKevo_NeujmwCVZFp45b7KIFz3s.roa (raw, json)
Hash identifier: l6+qFlwyL64KTPnP2quBL38Eli+9FB6tQVq1xWFFZoE=
Subject key identifier: A4:A7:AF:A3:F3:5E:BA:39:B0:09:56:45:A7:8E:5B:EC:A2:05:CF:7B
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018AB18AAD2B16E4CB7EC915EC07231BD5F4
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/pKevo_NeujmwCVZFp45b7KIFz3s.roa
Signing time: Wed 20 Sep 2023 07:42:50 +0000
ROA not before: Wed 20 Sep 2023 07:42:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38915
IP address blocks: 2a07:3502:1070::/48 maxlen: 48
2a07:3502:1040::/48 maxlen: 48
2a07:3502:1090::/48 maxlen: 48
2a07:3502:11d0::/48 maxlen: 48
2a07:3500:19f8::/48 maxlen: 48
2a07:3500:19d8::/48 maxlen: 48
2a07:3500:1998::/48 maxlen: 48
2a07:3500:19e8::/48 maxlen: 48
2a07:3500:19a8::/48 maxlen: 48
2a07:3500:19a0::/48 maxlen: 48
2a07:3500:19e0::/48 maxlen: 48
2a07:3500:19f0::/48 maxlen: 48
2a07:3500:19b0::/48 maxlen: 48
2a07:3500:1200::/48 maxlen: 48
2a07:3500:1a00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:8a:ad:2b:16:e4:cb:7e:c9:15:ec:07:23:1b:d5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Sep 20 07:42:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4a7afa3f35eba39b0095645a78e5beca205cf7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:75:f3:94:fa:75:ba:0a:37:ad:e3:8d:00:
95:d9:92:fc:94:f2:3d:b1:c7:f5:25:cc:f2:6f:9b:
0c:44:74:25:dd:c0:dd:25:78:3c:55:e9:ca:33:e4:
b8:5d:49:0c:d3:12:28:45:cb:61:7b:7d:cd:f2:2a:
09:86:d8:ba:c2:ba:03:b6:87:de:33:5c:b3:0b:6c:
e5:32:75:70:5b:b6:5c:a2:39:1b:41:51:b4:43:9d:
c8:98:28:c4:e4:54:32:46:8c:1c:9a:3b:3f:44:a2:
4e:ca:80:f2:ee:39:ba:7f:ac:36:49:b3:8b:9c:4f:
b5:83:e0:5b:8d:ab:f2:5c:df:a4:e8:64:41:5c:68:
d7:aa:fc:88:da:d9:e3:60:93:0b:73:51:55:cb:a5:
54:b0:30:56:63:02:01:f8:05:52:24:4e:9c:89:dc:
9b:df:76:b5:61:cb:88:1f:96:4e:7f:99:fe:18:e0:
9e:d9:65:77:49:33:1d:32:9c:81:7e:e2:36:3f:2c:
0f:ee:eb:3a:23:90:92:35:c0:2f:15:9d:23:cf:28:
e4:68:ef:3b:96:7b:23:3f:a3:ae:2f:cd:cb:26:3c:
3f:e0:5c:ba:96:30:c2:f0:94:14:b7:fe:8c:91:a9:
46:cc:43:ff:37:1a:6f:21:8a:63:86:b3:f3:29:44:
0a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A7:AF:A3:F3:5E:BA:39:B0:09:56:45:A7:8E:5B:EC:A2:05:CF:7B
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/pKevo_NeujmwCVZFp45b7KIFz3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1200::/48
2a07:3500:1998::/48
2a07:3500:19a0::/48
2a07:3500:19a8::/48
2a07:3500:19b0::/48
2a07:3500:19d8::/48
2a07:3500:19e0::/48
2a07:3500:19e8::/48
2a07:3500:19f0::/48
2a07:3500:19f8::/48
2a07:3500:1a00::/48
2a07:3502:1040::/48
2a07:3502:1070::/48
2a07:3502:1090::/48
2a07:3502:11d0::/48
Signature Algorithm: sha256WithRSAEncryption
5c:0d:d1:3b:ee:ca:01:b6:e9:fc:ac:b6:45:9f:5e:b2:cd:61:
05:c7:c3:31:b2:48:bb:ab:1b:20:e9:2b:bc:66:e4:89:78:ac:
b6:6d:08:6b:a8:87:33:ab:0f:c4:f2:06:88:7f:11:ce:32:cf:
3c:df:82:19:2f:28:0b:a7:6a:89:e0:9c:d8:ad:a7:0d:1b:6a:
ca:38:5d:93:ec:cd:dc:90:57:50:39:25:db:59:07:e2:bd:a6:
73:13:2e:b0:17:81:db:90:ed:0d:eb:a5:ab:1f:9d:04:7a:97:
0a:98:e3:95:13:07:2e:8a:2a:b4:d9:47:b0:a9:67:8a:a8:77:
c9:9e:fd:9a:8b:91:c3:02:b2:07:5d:2a:b1:26:59:0e:2e:92:
e5:e9:c7:aa:cf:4a:d8:70:b9:a1:f6:c5:fe:32:ce:55:dc:62:
19:9c:ba:e5:dc:4a:dd:e4:ad:89:0e:a8:3e:f9:0a:de:54:59:
76:cc:55:6f:e2:32:d5:d9:11:b7:49:a7:7d:80:c4:a3:6c:31:
c9:63:fd:98:82:b4:f5:1a:c2:aa:a8:e7:38:91:4f:19:28:4d:
76:b7:bf:33:58:9e:6c:30:ad:1f:7d:63:fb:2d:a9:68:05:58:
0a:55:f5:9c:46:48:ca:05:cf:63:a2:33:98:bd:70:f7:55:9e:
79:ca:eb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:33 2025 by rpki-client