Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/KedkKyoY8CHmT8oN6a1SBDpuKEU.roa
File: KedkKyoY8CHmT8oN6a1SBDpuKEU.roa (raw, json)
Hash identifier: 1va/KzLzZDcHDq1KPVfSIlSYK/LAS77lnBRYU3RGwQQ=
Subject key identifier: 29:E7:64:2B:2A:18:F0:21:E6:4F:CA:0D:E9:AD:52:04:3A:6E:28:45
Certificate issuer: /CN=925a9ca5b49cef38ea627c9b20d470a7f599f608
Certificate serial: 018A5EF589E090C6670E4D437CE77D0AEE5D
Authority key identifier: 92:5A:9C:A5:B4:9C:EF:38:EA:62:7C:9B:20:D4:70:A7:F5:99:F6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klqcpbSc7zjqYnybINRwp_WZ9gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/KedkKyoY8CHmT8oN6a1SBDpuKEU.roa
Signing time: Mon 04 Sep 2023 06:51:04 +0000
ROA not before: Mon 04 Sep 2023 06:51:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.9.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5e:f5:89:e0:90:c6:67:0e:4d:43:7c:e7:7d:0a:ee:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925a9ca5b49cef38ea627c9b20d470a7f599f608
Validity
Not Before: Sep 4 06:51:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29e7642b2a18f021e64fca0de9ad52043a6e2845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f2:e5:04:74:31:63:98:78:de:31:5d:0b:17:
49:8e:5b:06:4b:a6:1c:c8:d5:fb:1e:ce:e8:95:45:
76:97:55:ab:86:f9:2c:c0:0b:a0:1f:46:85:ae:43:
60:f0:83:cb:71:4b:f8:b6:6c:4a:3f:64:6e:e0:31:
bc:8a:17:c8:2b:61:84:24:2e:51:65:0b:a1:c6:b3:
ba:6e:b2:8a:2a:2e:f1:50:89:10:e6:ab:70:fa:36:
83:f6:77:b4:77:1c:c7:15:f3:f3:85:bd:68:91:cd:
91:ea:db:8a:54:c3:24:c7:2c:49:f9:bc:9b:df:11:
94:87:a4:9a:c8:59:6a:5c:c5:a6:70:a2:3a:f5:92:
c9:04:3b:17:2e:1c:63:7e:14:f1:ec:e6:59:63:9b:
cf:cc:f6:5f:c9:fa:bb:b0:52:94:a6:66:8c:95:91:
a3:fc:66:f8:aa:1b:ef:5d:ef:d9:80:50:dd:0a:b6:
aa:f6:04:b9:42:45:79:01:ba:e1:e3:70:5b:ef:fb:
b9:66:52:6a:95:5b:3e:11:c7:82:9d:99:33:e9:e9:
0e:10:f8:91:d1:7c:e1:fd:0c:b6:d0:e5:bc:4e:86:
d1:5a:35:53:b9:4b:27:46:64:4b:a9:bb:06:c0:75:
a5:db:33:60:a8:08:c9:ea:78:56:d7:8a:a6:54:6c:
0b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E7:64:2B:2A:18:F0:21:E6:4F:CA:0D:E9:AD:52:04:3A:6E:28:45
X509v3 Authority Key Identifier:
keyid:92:5A:9C:A5:B4:9C:EF:38:EA:62:7C:9B:20:D4:70:A7:F5:99:F6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klqcpbSc7zjqYnybINRwp_WZ9gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/KedkKyoY8CHmT8oN6a1SBDpuKEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/klqcpbSc7zjqYnybINRwp_WZ9gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.181.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:33:e7:8f:19:3f:3a:05:ed:57:a2:ab:92:9d:a7:a0:71:93:
71:aa:c3:12:a8:57:7a:e4:9b:3a:98:08:fd:1e:be:d3:5d:6c:
e2:53:4d:2b:c8:f2:96:48:77:04:4c:50:54:33:cf:63:b4:bb:
e3:fe:e7:a9:47:28:d0:f2:d3:0b:26:4d:73:a0:bc:f7:be:67:
e8:8b:ed:b1:4f:cf:ef:3a:70:5e:54:bf:ab:81:91:c0:cf:84:
f1:00:af:66:a8:eb:1b:e6:24:22:04:81:c4:a5:d0:cb:cd:c4:
ef:f4:b8:75:84:13:10:8a:a8:56:77:bf:03:14:00:03:6c:d5:
84:58:90:b3:e4:b2:e8:80:f3:4b:8e:53:5c:f8:f2:7a:86:ea:
46:d1:8b:bf:57:21:e7:44:30:e6:ec:2b:18:ca:9e:5a:cd:e8:
3c:ae:af:8c:c1:0f:45:00:db:13:17:5f:88:06:2a:d6:51:f7:
79:50:9f:74:28:cf:14:e4:8b:a3:75:c7:cc:c8:54:d0:ea:8b:
c2:5b:cb:29:99:9d:12:46:3f:3f:cc:f4:6d:b0:10:91:0e:d0:
ce:c1:be:84:ea:60:bd:3d:8f:bc:94:42:f5:5d:a5:8d:80:a0:
ec:0b:c4:07:bc:fa:cd:3d:14:e0:d0:b2:51:e2:72:d8:88:ca:
c2:14:39:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:06 2024 by rpki-client on console-fra.rpki-client.org