Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/K4Kah_uKVuISj6VUaPJOBfAjBNY.roa
File: K4Kah_uKVuISj6VUaPJOBfAjBNY.roa (raw, json)
Hash identifier: xBkjKLZdmcuhsxTOXLG6xidpPM1INDdUgonGwEAjBbI=
Subject key identifier: 2B:82:9A:87:FB:8A:56:E2:12:8F:A5:54:68:F2:4E:05:F0:23:04:D6
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01856D11D71E0AE15494731612DA11E986B4
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/K4Kah_uKVuISj6VUaPJOBfAjBNY.roa
Signing time: Sun 01 Jan 2023 11:22:43 +0000
ROA not before: Sun 01 Jan 2023 11:22:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56681
IP address blocks: 178.254.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:11:d7:1e:0a:e1:54:94:73:16:12:da:11:e9:86:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 1 11:22:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b829a87fb8a56e2128fa55468f24e05f02304d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:ed:61:b1:e9:06:39:71:f6:50:78:e9:64:
cd:6b:3a:08:36:1c:8d:56:cc:73:0f:a0:48:2a:6c:
11:63:5a:fa:95:0d:26:1c:07:e7:b0:c7:36:50:9b:
0e:06:ca:dc:f6:4f:2b:54:53:97:97:63:69:e2:44:
7c:f6:68:c0:27:93:ee:6b:a2:88:8f:b6:0a:a6:b5:
6f:7b:4e:5a:75:b0:81:f5:ee:a6:27:88:2f:42:1e:
c8:21:b3:91:e4:36:7e:bf:49:ac:81:5c:32:9d:a3:
75:46:44:d4:13:a8:fe:c7:4e:a5:8f:b2:1f:65:ee:
44:73:f8:df:2f:50:1e:af:8e:95:47:4e:bd:07:cd:
0d:74:d1:48:5b:ca:28:35:1d:fb:83:06:89:27:2f:
5b:11:04:a2:e3:b9:b3:66:53:69:31:d5:32:01:84:
1f:6c:9c:36:42:1c:0b:b0:82:0f:7d:f5:22:68:f9:
6b:76:44:b8:e1:29:3f:ae:f8:29:89:91:d0:cc:e9:
b9:bb:e8:3e:2c:a6:c5:3c:d1:c2:45:43:20:30:de:
a4:9b:28:ce:04:bb:66:88:ce:37:b2:45:d8:c5:18:
34:f7:49:b1:94:77:1e:23:7e:6e:68:e6:d6:c9:ea:
99:2b:33:b9:10:ba:67:fb:ef:43:fd:36:00:f8:4c:
f9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:82:9A:87:FB:8A:56:E2:12:8F:A5:54:68:F2:4E:05:F0:23:04:D6
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/K4Kah_uKVuISj6VUaPJOBfAjBNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.186.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:63:16:e5:59:9c:94:df:6e:6d:9a:c8:fd:61:e2:a2:ab:b8:
d4:bd:15:8e:56:af:f4:83:e3:72:4e:6f:6e:49:04:a7:3d:ff:
61:f0:94:b0:ca:70:49:a6:78:54:2e:93:cf:00:a6:f3:fe:be:
c0:3a:2c:89:4f:3b:d3:62:30:17:07:87:dd:77:8b:f3:48:02:
58:d3:da:a4:d5:ae:57:65:e7:72:44:d5:4c:5c:21:05:08:38:
40:56:47:b9:80:12:41:e3:72:7d:89:d8:c4:84:7c:cd:52:d1:
cf:3b:24:eb:ea:ab:89:6e:32:4f:17:d3:64:15:92:7c:c9:a5:
bb:03:23:18:bd:6c:68:e7:0d:c8:98:79:83:6c:de:8e:7c:7e:
c3:00:71:a3:63:52:a5:cb:a1:8d:62:6e:5c:d9:7c:ce:5a:92:
b3:1b:56:f8:d9:f7:0f:94:a8:45:51:2f:dd:8c:3c:57:31:e0:
5c:9b:87:6b:8f:1f:9b:d7:1b:8f:6d:f6:93:ed:78:76:ab:f1:
91:ca:df:b8:bc:95:c5:a1:79:aa:8f:8f:24:b4:da:49:d5:0a:
c9:49:ca:f5:7f:f7:58:8b:b6:d6:89:3c:b9:bc:d9:e5:68:5a:
55:5f:5d:39:06:b0:0d:d7:09:e5:14:bd:26:ca:91:83:e7:eb:
85:58:a4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:54 2023 by rpki-client on console-ams.rpki-client.org