Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ac7b15-c695-4bf3-bdc8-63a68e9473e1/1/kuksTqxIg2OEdua46JUW1ib85iI.roa
File: kuksTqxIg2OEdua46JUW1ib85iI.roa (raw, json)
Hash identifier: YR1rcqUcgzTsj0/DeVQjhSydBckovKqOyMcuXIP4bL8=
Subject key identifier: 92:E9:2C:4E:AC:48:83:63:84:76:E6:B8:E8:95:16:D6:26:FC:E6:22
Certificate issuer: /CN=04306dee029d89d4d387c80d8188bb04c82f12c5
Certificate serial: 018CC56E31DA320F1ACA8CB0ED1FA8F65687
Authority key identifier: 04:30:6D:EE:02:9D:89:D4:D3:87:C8:0D:81:88:BB:04:C8:2F:12:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDBt7gKdidTTh8gNgYi7BMgvEsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ac7b15-c695-4bf3-bdc8-63a68e9473e1/1/kuksTqxIg2OEdua46JUW1ib85iI.roa
Signing time: Mon 01 Jan 2024 14:29:42 +0000
ROA not before: Mon 01 Jan 2024 14:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38984
IP address blocks: 188.65.232.0/22 maxlen: 22
188.65.236.0/23 maxlen: 23
188.65.238.0/23 maxlen: 23
185.23.228.0/23 maxlen: 23
185.23.231.0/24 maxlen: 24
185.23.230.0/24 maxlen: 24
195.135.238.0/24 maxlen: 24
195.135.237.0/24 maxlen: 24
195.135.236.0/24 maxlen: 24
195.135.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:31:da:32:0f:1a:ca:8c:b0:ed:1f:a8:f6:56:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04306dee029d89d4d387c80d8188bb04c82f12c5
Validity
Not Before: Jan 1 14:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92e92c4eac4883638476e6b8e89516d626fce622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:51:4f:9c:03:71:79:cb:bc:df:eb:59:4d:
ad:d7:e6:15:38:6e:28:a2:b2:0b:e8:9e:ae:f5:e9:
67:d8:ad:7d:89:96:92:46:dc:fc:1d:b7:cf:75:b5:
56:65:8c:5a:1b:fc:fb:5f:77:3e:8d:8c:07:b4:fd:
6e:f9:3e:6f:0a:52:c7:d4:60:a7:71:a5:45:31:dd:
e3:37:1f:54:80:06:1e:1c:95:e6:51:e8:95:73:ed:
c9:7f:16:b6:e8:c3:ee:18:b0:b2:77:43:e7:e6:db:
3c:fd:4a:73:0f:0d:01:4e:91:ed:b5:82:3e:ee:99:
72:5d:c9:96:10:46:f5:ba:bc:29:a3:a9:f0:80:ce:
90:9f:61:3b:9c:55:f1:80:ed:ec:38:52:b1:51:2a:
dc:e3:03:6b:74:fb:f4:a6:10:68:53:fd:d9:dc:42:
4a:6e:24:d8:1e:c1:94:d8:e3:f3:93:2c:e8:ef:2f:
d6:82:19:ad:88:af:76:37:67:83:e5:0c:1d:d6:cd:
3b:11:ec:f5:b2:59:3b:eb:f6:db:ec:64:61:c2:c8:
98:b4:21:7f:bd:2d:7d:44:57:c0:4e:e6:aa:61:d8:
3d:6e:0e:b6:95:5d:3e:fd:26:6b:e2:34:ec:3b:38:
4e:6e:d2:1d:61:a8:9b:f2:99:08:03:09:4d:dc:12:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E9:2C:4E:AC:48:83:63:84:76:E6:B8:E8:95:16:D6:26:FC:E6:22
X509v3 Authority Key Identifier:
keyid:04:30:6D:EE:02:9D:89:D4:D3:87:C8:0D:81:88:BB:04:C8:2F:12:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDBt7gKdidTTh8gNgYi7BMgvEsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ac7b15-c695-4bf3-bdc8-63a68e9473e1/1/kuksTqxIg2OEdua46JUW1ib85iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ac7b15-c695-4bf3-bdc8-63a68e9473e1/1/BDBt7gKdidTTh8gNgYi7BMgvEsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.228.0/22
188.65.232.0/21
195.135.236.0/22
Signature Algorithm: sha256WithRSAEncryption
24:bb:ce:bb:94:6e:86:40:eb:8c:96:33:74:ce:fa:cc:9f:94:
fc:e2:3b:2c:f8:1a:b3:2a:39:f4:d4:fd:a4:9a:aa:a5:7c:1b:
1e:56:d8:45:7b:7f:b6:ab:f5:39:96:69:99:02:d2:62:46:25:
e1:0d:2e:8d:f9:6f:0d:1e:70:b2:ab:94:3c:1d:48:2b:c4:c4:
e4:01:e2:b8:98:96:33:7b:bd:76:00:1f:16:43:88:7c:7e:2e:
e8:8d:5b:1f:c7:b4:e4:03:d9:56:85:4c:84:59:b1:b2:4b:06:
94:df:3f:59:80:fd:5c:d8:4c:d9:8a:fb:cb:6a:0d:e3:f7:3c:
e0:dc:0c:fb:97:f0:25:38:29:80:07:b6:5a:6a:97:38:53:5d:
41:fd:ca:25:bf:45:9a:2f:bc:2a:4f:cd:71:4e:09:63:ed:24:
4c:4b:fe:12:1c:fd:b5:71:5d:a8:17:2b:35:3e:97:33:41:3f:
71:09:ea:6b:f4:53:2e:a3:e1:5f:1b:58:ed:67:8f:e9:7c:f8:
e6:0f:23:d7:88:41:58:62:2a:0f:1a:26:7e:a0:17:f8:36:86:
48:64:37:8b:df:31:96:2a:73:8d:bd:1f:54:5c:8e:6f:f4:61:
c0:3c:bd:de:d1:71:5e:19:93:de:cc:95:6e:65:31:da:97:4a:
73:d9:a8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:20 2024 by rpki-client on console-ams.rpki-client.org