Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/KNKAIq0DjOtfC25vXKy45Ns1fBw.roa
File: KNKAIq0DjOtfC25vXKy45Ns1fBw.roa (raw, json)
Hash identifier: TM2vd1twDJoLoKiDbW9n+eKYVFIYpHkGRLUfgYcYPR4=
Subject key identifier: 28:D2:80:22:AD:03:8C:EB:5F:0B:6E:6F:5C:AC:B8:E4:DB:35:7C:1C
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 01847457375E46FCC6C1263A7F31DB50B22A
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/KNKAIq0DjOtfC25vXKy45Ns1fBw.roa
Signing time: Mon 14 Nov 2022 04:13:03 +0000
ROA not before: Mon 14 Nov 2022 04:13:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.66.148.0/22 maxlen: 24
45.13.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:74:57:37:5e:46:fc:c6:c1:26:3a:7f:31:db:50:b2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Nov 14 04:13:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28d28022ad038ceb5f0b6e6f5cacb8e4db357c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:17:d4:cd:15:a5:c1:03:be:e1:21:b6:a6:
8d:25:42:d9:26:05:b6:3e:42:c8:a8:67:18:45:21:
36:c0:e0:5f:be:f6:be:f8:a2:42:b3:27:13:92:7f:
d2:90:14:30:a6:a8:a5:4a:82:c5:71:6b:19:f5:8b:
e7:f5:12:cd:6a:a7:e9:05:2d:a9:46:21:1d:c5:6c:
4a:a0:62:b7:e4:4c:82:4b:49:2a:f2:a2:49:26:71:
df:38:a9:cc:54:03:b6:67:00:b8:98:9f:b2:63:44:
10:cc:34:3f:63:0f:23:08:1d:1f:17:60:b7:35:bd:
c1:6f:d6:24:e4:2a:93:66:43:fe:55:fd:99:f0:a0:
42:4e:86:73:f1:f4:45:88:cb:f2:bb:a5:45:86:96:
03:c1:e7:f2:d4:29:b9:73:93:e4:08:19:b0:fa:e7:
01:73:69:9c:2a:66:ef:e2:2a:6b:77:0b:12:ef:19:
89:5c:1a:49:db:4d:e9:03:dc:33:48:4a:01:f4:aa:
cd:74:53:1f:c4:db:40:eb:79:cd:4e:92:9d:ac:9d:
cf:c9:26:28:59:99:f2:85:57:92:56:4c:88:54:47:
35:ea:62:04:a5:69:0e:f0:e1:15:b6:76:05:fb:fc:
a2:18:0a:2a:42:e1:d9:08:d4:3a:63:66:89:13:95:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D2:80:22:AD:03:8C:EB:5F:0B:6E:6F:5C:AC:B8:E4:DB:35:7C:1C
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/KNKAIq0DjOtfC25vXKy45Ns1fBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.149.0/24
45.66.148.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:b0:dd:c2:0e:60:f1:e2:ef:e8:69:44:9f:14:59:15:a2:d3:
15:95:61:36:21:aa:5e:97:df:5a:2c:86:93:14:04:33:a4:9c:
a3:74:6b:36:fa:fa:60:bf:55:52:40:8f:ab:50:ba:93:5b:26:
62:74:be:8a:80:47:d1:ee:c3:72:18:8a:a1:40:d8:bf:1c:92:
22:fe:9d:f1:62:12:9e:d7:eb:af:ab:44:62:50:73:a8:8d:5e:
2f:47:f9:43:31:71:16:c4:f5:dd:4f:0e:52:ae:e5:0d:e0:b2:
f7:2f:88:37:fd:b7:4c:4e:e9:b2:0f:14:f3:b2:cb:54:53:7c:
53:e4:f8:8c:f4:c1:54:b4:5c:ef:18:7f:3c:bb:97:6d:41:bf:
4d:ae:f7:cf:53:c5:f4:65:fb:58:07:1c:38:d5:ea:ba:14:29:
21:58:2e:c1:dd:bb:a7:53:fd:99:d0:f8:41:84:7e:84:ac:4e:
26:c1:ff:11:c5:09:3e:7d:69:b0:57:02:79:44:b7:60:0f:2a:
b9:f4:96:18:30:4f:ca:3d:62:38:89:0a:f2:ec:5e:76:cb:4e:
e1:0d:b1:9e:de:c0:2d:db:c7:ee:90:ae:92:8a:d9:8d:40:84:
85:c0:3a:4b:00:bb:41:6f:43:97:a1:3f:6d:23:30:98:62:1b:
6d:d6:ca:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org