Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/kcfojaX6xzAWdFkUv-gCMXigiz0.roa
File: kcfojaX6xzAWdFkUv-gCMXigiz0.roa (raw, json)
Hash identifier: QTRxc3J4Y+6ywE+DQ2Itt2wHSqS1NATiNUw8//+lxYc=
Subject key identifier: 91:C7:E8:8D:A5:FA:C7:30:16:74:59:14:BF:E8:02:31:78:A0:8B:3D
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 018433B76DA587BC5DA136A7A55B6370BCB2
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/kcfojaX6xzAWdFkUv-gCMXigiz0.roa
Signing time: Tue 01 Nov 2022 15:02:49 +0000
ROA not before: Tue 01 Nov 2022 15:02:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59711
IP address blocks: 185.80.54.0/23 maxlen: 23
185.174.133.0/24 maxlen: 24
185.80.52.0/23 maxlen: 23
185.174.135.0/24 maxlen: 24
91.193.18.0/24 maxlen: 24
185.117.90.0/23 maxlen: 23
77.83.196.0/24 maxlen: 24
77.83.198.0/24 maxlen: 24
185.104.194.0/24 maxlen: 24
185.104.193.0/24 maxlen: 24
193.42.36.0/24 maxlen: 24
5.149.248.0/23 maxlen: 23
5.149.254.0/23 maxlen: 23
79.141.164.0/23 maxlen: 23
79.141.172.0/24 maxlen: 24
185.81.114.0/23 maxlen: 23
185.81.114.0/24 maxlen: 24
185.81.115.0/24 maxlen: 24
2a01:8640:12::/48 maxlen: 48
2a01:8640:f::/48 maxlen: 48
2a01:8640:a::/48 maxlen: 48
2a01:8640::/48 maxlen: 48
2a01:8640:2::/48 maxlen: 48
2a01:8640:11::/48 maxlen: 48
2a01:8640:13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:33:b7:6d:a5:87:bc:5d:a1:36:a7:a5:5b:63:70:bc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Nov 1 15:02:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91c7e88da5fac73016745914bfe8023178a08b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:0d:90:fd:95:91:d4:3c:15:df:b3:c3:b4:
d7:16:51:0c:0a:bb:d3:c3:20:49:1a:3d:01:74:81:
1e:dc:6b:d5:3d:9a:2c:e0:26:66:15:96:ca:ad:77:
79:9c:27:35:8d:47:87:4f:7a:61:00:9c:11:72:fc:
9e:1c:27:e1:8d:12:e9:53:87:44:01:7b:db:54:c7:
e4:fd:f7:14:b4:77:11:a7:29:98:57:65:66:03:61:
e7:95:77:ac:13:85:45:94:06:83:0b:73:9f:cf:8b:
b8:18:d3:52:48:81:4f:b2:97:6b:a8:06:44:f5:e0:
de:ac:7a:ae:33:0f:b1:c7:dc:4a:ac:92:a9:c2:5d:
d0:5e:e6:37:f9:1c:c4:2b:10:b1:9f:d6:27:81:10:
ed:6d:00:30:d1:8b:13:16:b4:aa:0e:36:04:25:ed:
b3:0b:47:d4:54:cb:ab:da:77:1f:1d:92:7a:ab:b7:
b7:7c:01:07:a4:4f:d2:7f:80:77:2b:f0:d3:1d:b8:
0d:e0:46:f1:26:c1:23:32:00:27:f0:26:13:a4:fd:
67:9d:41:6f:45:8a:3e:35:22:cf:57:16:ed:e4:94:
af:ad:8a:10:e3:6a:ee:6a:bc:ea:53:e9:49:6f:06:
a3:ff:04:43:e9:b0:80:9a:1e:f9:90:e1:b6:55:99:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C7:E8:8D:A5:FA:C7:30:16:74:59:14:BF:E8:02:31:78:A0:8B:3D
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/kcfojaX6xzAWdFkUv-gCMXigiz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.248.0/23
5.149.254.0/23
77.83.196.0/24
77.83.198.0/24
79.141.164.0/23
79.141.172.0/24
91.193.18.0/24
185.80.52.0/22
185.81.114.0/23
185.104.193.0-185.104.194.255
185.117.90.0/23
185.174.133.0/24
185.174.135.0/24
193.42.36.0/24
IPv6:
2a01:8640::/48
2a01:8640:2::/48
2a01:8640:a::/48
2a01:8640:f::/48
2a01:8640:11::-2a01:8640:13:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
17:03:bc:c8:82:8b:54:de:9e:e8:80:4f:73:19:20:ee:7c:88:
32:d5:10:0d:67:a0:4c:73:81:ad:b6:08:1c:cd:e2:82:fd:1b:
6c:41:4c:fc:56:d1:6e:3a:ee:73:57:f3:b2:9c:2c:a6:f9:8b:
22:6f:7c:97:e7:b2:23:0a:e5:0e:2a:7c:03:75:4d:14:02:0e:
26:1f:91:ee:bb:94:4f:5f:37:9a:28:2d:03:1d:1d:d7:e5:f9:
38:22:d1:0e:26:7b:5e:a6:84:3e:e3:63:1b:8e:8a:05:d7:1d:
74:d9:fa:1c:ca:1f:19:36:eb:86:34:24:cf:57:2f:c9:49:7f:
72:8d:04:4f:45:40:77:d3:32:10:8f:1c:90:b0:fd:8d:32:3b:
2e:03:ab:13:58:c3:05:2e:14:c5:9f:74:a6:84:78:2c:05:d4:
6e:01:39:3d:e2:8d:c2:1e:e2:d0:8f:62:e2:cb:d7:8e:08:d8:
63:ac:2e:c6:73:51:63:10:04:5a:d2:6a:ff:b8:37:f6:19:c1:
4b:5a:62:21:a6:5f:1a:64:0f:f5:db:4f:8a:c2:06:69:b3:65:
16:7a:af:3f:9c:0f:c5:06:b7:b2:7f:c0:db:58:a9:07:03:cc:
e1:d1:bc:0a:86:5a:1a:56:48:fc:5b:fe:f7:65:2e:dc:19:f8:
51:62:90:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:12 2025 by rpki-client