Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/ksackl1zzcakyc01kLQkSlOfgIg.roa
File: ksackl1zzcakyc01kLQkSlOfgIg.roa (raw, json)
Hash identifier: 0qwukQ3IGuHIAm/1V9C5h1s0tQ56iNoUTBKfx2hcYh4=
Subject key identifier: 92:C6:9C:92:5D:73:CD:C6:A4:C9:CD:35:90:B4:24:4A:53:9F:80:88
Certificate issuer: /CN=85927a93283d62ce672efa1f9bef57a2356118aa
Certificate serial: 062580C7
Authority key identifier: 85:92:7A:93:28:3D:62:CE:67:2E:FA:1F:9B:EF:57:A2:35:61:18:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZJ6kyg9Ys5nLvofm-9XojVhGKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/ksackl1zzcakyc01kLQkSlOfgIg.roa
Signing time: Sat 01 Jan 2022 13:57:43 +0000
ROA not before: Sat 01 Jan 2022 13:57:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203649
IP address blocks: 193.31.64.0/24 maxlen: 24
193.31.67.0/24 maxlen: 24
193.31.65.0/24 maxlen: 24
193.31.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103121095 (0x62580c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85927a93283d62ce672efa1f9bef57a2356118aa
Validity
Not Before: Jan 1 13:57:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92c69c925d73cdc6a4c9cd3590b4244a539f8088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:5a:67:43:b8:c9:b7:c2:e3:93:bc:3e:72:
85:7d:82:05:ef:ed:45:85:19:d8:31:a2:4d:eb:e3:
3a:f4:cd:82:ba:aa:d1:55:cc:89:92:22:b2:db:61:
41:ab:4c:ce:7e:b7:b2:ff:35:82:b9:b6:41:d1:14:
2c:27:fc:b8:7a:eb:bd:33:9f:f9:55:00:e3:33:e2:
6e:1c:bd:62:c8:56:44:3c:eb:25:d9:e1:6e:b3:c5:
cc:88:10:bc:4b:a2:7c:2f:7b:10:f7:f9:22:2c:b2:
87:5d:78:f3:8c:6f:1c:8d:a1:41:96:fd:5b:64:7b:
81:c0:51:85:4c:60:41:09:b4:37:8a:14:b8:a0:e2:
b2:bd:af:b5:ee:f4:12:3d:eb:69:b9:ac:de:5c:63:
77:b6:10:3b:5a:a1:2d:ca:07:ed:56:93:65:63:47:
ea:b1:a5:38:97:36:0a:94:e8:aa:56:dd:ff:44:a2:
f2:fc:76:ba:85:05:e7:80:73:37:26:8f:fc:a9:b2:
07:05:54:ed:02:4d:be:3d:8b:4c:7c:be:2d:46:5b:
18:53:e0:63:cf:42:58:98:4e:bd:1f:b2:e0:5c:e0:
e3:3b:2e:2d:d8:14:47:a6:19:f2:54:7e:35:2b:7f:
6e:28:18:14:0d:5e:17:d8:22:f8:b6:b2:0a:8e:dc:
cd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C6:9C:92:5D:73:CD:C6:A4:C9:CD:35:90:B4:24:4A:53:9F:80:88
X509v3 Authority Key Identifier:
keyid:85:92:7A:93:28:3D:62:CE:67:2E:FA:1F:9B:EF:57:A2:35:61:18:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZJ6kyg9Ys5nLvofm-9XojVhGKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/ksackl1zzcakyc01kLQkSlOfgIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/hZJ6kyg9Ys5nLvofm-9XojVhGKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.64.0/22
Signature Algorithm: sha256WithRSAEncryption
97:a9:55:92:3a:68:7e:43:ec:8d:8b:2d:7b:26:fd:7c:04:94:
d2:a4:36:cd:22:bf:1d:c8:3a:46:96:5b:77:98:3a:b1:b7:b9:
7d:59:a2:f7:af:e2:a6:e5:c3:f1:c9:68:a7:6f:ba:9c:06:6c:
95:09:69:ff:56:9e:ac:b5:f5:8f:f8:a3:3d:00:40:ae:fd:9e:
8a:68:9c:0a:5d:86:41:5e:57:e6:38:ad:55:41:71:e0:42:c5:
20:f6:ad:28:cb:e5:d9:80:49:92:0c:b5:78:b7:a8:15:36:de:
03:ac:11:58:e4:bc:e5:7e:f7:ba:38:93:f2:fd:3c:fc:92:88:
19:e5:a0:4f:43:b9:13:16:d1:8d:ac:62:2b:b0:05:35:f6:54:
04:9e:1c:7a:25:97:54:bf:63:d1:2e:69:81:12:14:41:ab:d3:
b4:f4:9d:99:fe:fe:e6:ec:d2:66:05:23:5b:56:86:b3:23:cd:
8a:08:70:61:9c:ad:f0:5e:09:76:56:8d:de:42:9a:93:5c:8d:
88:47:a1:da:6c:cb:7a:97:17:5c:b2:09:57:db:0b:43:47:2d:
d7:95:ed:e6:4e:cc:d0:22:9a:03:25:ef:ce:a8:4b:ee:2e:55:
e4:ca:41:7d:d5:9e:d6:0f:4b:57:2c:ee:fa:f3:ba:87:f9:a5:
b0:58:c5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:21 2025 by rpki-client