Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/KY-8tyxm8krun-KcnLj1YGl4-Ss.roa
File: KY-8tyxm8krun-KcnLj1YGl4-Ss.roa (raw, json)
Hash identifier: tdhsl9bzRHCl9P43Dk8MItRy+yi11GJdg7XgF4mepA0=
Subject key identifier: 29:8F:BC:B7:2C:66:F2:4A:EE:9F:E2:9C:9C:B8:F5:60:69:78:F9:2B
Certificate issuer: /CN=cb77f3aad154c7e5fa6524dab6d218855d17adf7
Certificate serial: 018CC726034290EBB2A42F8428CF74AF2B1F
Authority key identifier: CB:77:F3:AA:D1:54:C7:E5:FA:65:24:DA:B6:D2:18:85:5D:17:AD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y3fzqtFUx-X6ZSTattIYhV0Xrfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/KY-8tyxm8krun-KcnLj1YGl4-Ss.roa
Signing time: Mon 01 Jan 2024 22:30:06 +0000
ROA not before: Mon 01 Jan 2024 22:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212144
IP address blocks: 94.154.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:03:42:90:eb:b2:a4:2f:84:28:cf:74:af:2b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb77f3aad154c7e5fa6524dab6d218855d17adf7
Validity
Not Before: Jan 1 22:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=298fbcb72c66f24aee9fe29c9cb8f5606978f92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a5:95:e6:99:c9:90:91:aa:cc:ce:80:ec:8b:
95:d2:36:ac:cf:60:a2:92:2d:04:1b:33:ac:ec:85:
c5:b4:86:d5:49:43:ba:b9:78:f2:cf:f4:3a:3a:e9:
dd:47:ef:2d:d6:18:9a:7a:0f:34:ea:16:6d:a0:59:
7e:20:60:99:ef:52:30:db:0b:bd:fc:5b:d5:57:da:
4c:80:5e:89:ac:2f:1a:31:6d:fb:a9:1e:a2:5b:4a:
a4:f3:f4:ec:02:64:67:03:70:da:d3:1e:83:c0:c6:
4c:9e:f3:35:39:0b:e2:a4:c2:34:0f:95:ab:75:26:
2e:19:65:67:c7:6d:eb:3e:d2:11:59:ee:13:0f:d1:
14:d9:dc:bd:4c:90:3e:23:59:4a:2f:fd:49:98:74:
0e:16:3e:60:6f:f7:a7:e9:e1:22:72:f1:76:54:8a:
ab:83:ac:5d:d0:8d:72:38:a3:99:7f:43:99:25:62:
55:23:23:ff:5f:6c:6d:5d:31:cf:73:e0:7d:74:28:
8a:98:32:80:70:82:62:21:85:5c:69:9d:41:b1:2c:
03:23:01:c6:c7:b2:9a:a6:30:de:b2:3e:96:5f:04:
fa:84:6b:01:c1:f9:89:c5:c0:ff:f1:de:b0:29:88:
8a:fd:18:b1:ba:e9:62:0a:65:ce:99:fb:e1:64:79:
9c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8F:BC:B7:2C:66:F2:4A:EE:9F:E2:9C:9C:B8:F5:60:69:78:F9:2B
X509v3 Authority Key Identifier:
keyid:CB:77:F3:AA:D1:54:C7:E5:FA:65:24:DA:B6:D2:18:85:5D:17:AD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y3fzqtFUx-X6ZSTattIYhV0Xrfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/KY-8tyxm8krun-KcnLj1YGl4-Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/y3fzqtFUx-X6ZSTattIYhV0Xrfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.118.0/24
Signature Algorithm: sha256WithRSAEncryption
01:be:ea:e4:9c:f5:14:f2:e0:6f:be:26:1c:ec:d7:c7:21:82:
a7:b5:30:f7:82:91:79:62:fd:a4:de:4a:9a:b2:c2:4b:70:a9:
13:fd:05:f8:92:ee:bb:ac:6d:46:e9:8d:01:08:ad:36:f2:b8:
1b:05:51:eb:60:a5:9d:5d:c3:5c:ff:8f:b1:9d:1e:69:3a:d1:
28:f8:ba:89:f4:fc:66:98:c0:e2:f3:ed:a7:75:6f:8c:36:2e:
1d:5a:a8:e9:ee:8d:f6:5e:e7:29:73:94:ee:d9:c4:d9:1d:7e:
6a:6b:6b:63:fe:84:b9:ab:e8:ab:51:56:3b:95:d1:25:ef:35:
2e:a8:9a:72:ac:cb:b2:4d:61:b6:5c:b0:a6:4a:13:d4:38:be:
12:31:b0:dc:ab:25:03:9d:9d:ed:2f:bc:61:46:d7:c9:48:c4:
5d:08:49:45:97:77:df:b7:7d:0d:05:ba:6a:ae:9b:0b:2c:ba:
b5:60:ba:85:a3:60:51:f6:ee:37:aa:0d:62:fb:e2:c0:a3:e3:
70:86:21:f9:b9:99:08:76:4d:53:f6:a5:7b:ce:2b:7e:f9:a0:
29:a9:40:45:f8:99:72:f2:ff:c8:33:6a:c3:a5:06:f1:17:76:
e6:d0:19:03:30:d9:d3:35:b5:c8:cc:3d:66:d8:53:8c:ff:1e:
3c:f5:6a:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJgNCkOuypC+EKM90rysfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNzdmM2FhZDE1NGM3ZTVmYTY1MjRkYWI2ZDIxODg1NWQx
N2FkZjcwHhcNMjQwMTAxMjIzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOThmYmNiNzJjNjZmMjRhZWU5ZmUyOWM5Y2I4ZjU2MDY5NzhmOTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKWV5pnJkJGqzM6A7IuV0jasz2Ci
ki0EGzOs7IXFtIbVSUO6uXjyz/Q6OundR+8t1hiaeg806hZtoFl+IGCZ71Iw2wu9
/FvVV9pMgF6JrC8aMW37qR6iW0qk8/TsAmRnA3Da0x6DwMZMnvM1OQvipMI0D5Wr
dSYuGWVnx23rPtIRWe4TD9EU2dy9TJA+I1lKL/1JmHQOFj5gb/en6eEicvF2VIqr
g6xd0I1yOKOZf0OZJWJVIyP/X2xtXTHPc+B9dCiKmDKAcIJiIYVcaZ1BsSwDIwHG
x7KapjDesj6WXwT6hGsBwfmJxcD/8d6wKYiK/RixuuliCmXOmfvhZHmcZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCmPvLcsZvJK7p/inJy49WBpePkrMB8GA1UdIwQY
MBaAFMt386rRVMfl+mUk2rbSGIVdF633MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTNmenF0RlV4LVg2WlNUYXR0SVloVjBYcmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8yNzA5YjAtZjI2OS00NmJlLWFmZGUt
ZDU2YjM2YmRmYzk3LzEvS1ktOHR5eG04a3J1bi1LY25MajFZR2w0LVNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8yNzA5YjAtZjI2OS00NmJlLWFmZGUtZDU2YjM2YmRmYzk3
LzEveTNmenF0RlV4LVg2WlNUYXR0SVloVjBYcmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpp2MA0G
CSqGSIb3DQEBCwUAA4IBAQABvurknPUU8uBvviYc7NfHIYKntTD3gpF5Yv2k3kqa
ssJLcKkT/QX4ku67rG1G6Y0BCK028rgbBVHrYKWdXcNc/4+xnR5pOtEo+LqJ9Pxm
mMDi8+2ndW+MNi4dWqjp7o32Xucpc5Tu2cTZHX5qa2tj/oS5q+irUVY7ldEl7zUu
qJpyrMuyTWG2XLCmShPUOL4SMbDcqyUDnZ3tL7xhRtfJSMRdCElFl3fft30NBbpq
rpsLLLq1YLqFo2BR9u43qg1i++LAo+NwhiH5uZkIdk1T9qV7zit++aApqUBF+Jly
8v/IM2rDpQbxF3bm0BkDMNnTNbXIzD1m2FOM/x489Wo1
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:44 2024 by rpki-client on console-ams.rpki-client.org