Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/kbcj0Cp8pdj_e9hWUBafXwS9owY.roa
File: kbcj0Cp8pdj_e9hWUBafXwS9owY.roa (raw, json)
Hash identifier: nIBHnsGumV10qMcxeEubt6FfV1/nXCx1jq6a1CqtUYQ=
Subject key identifier: 91:B7:23:D0:2A:7C:A5:D8:FF:7B:D8:56:50:16:9F:5F:04:BD:A3:06
Certificate issuer: /CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Certificate serial: 0185708CCEF729F6C688DEF58058EA25DD87
Authority key identifier: DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/kbcj0Cp8pdj_e9hWUBafXwS9owY.roa
Signing time: Mon 02 Jan 2023 03:35:54 +0000
ROA not before: Mon 02 Jan 2023 03:35:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201320
IP address blocks: 194.48.93.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:ce:f7:29:f6:c6:88:de:f5:80:58:ea:25:dd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Validity
Not Before: Jan 2 03:35:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91b723d02a7ca5d8ff7bd85650169f5f04bda306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:f9:6c:87:e1:eb:01:36:c3:00:d0:99:2f:
a5:09:80:e3:90:84:97:b5:18:31:4d:3b:87:6e:0c:
21:8d:3f:50:62:a5:7e:24:e8:dc:a4:49:a3:70:80:
f8:e4:ca:43:2d:7f:c7:39:ad:6b:94:66:11:47:ca:
47:3e:ce:26:f7:e6:0a:c5:b9:97:1b:bb:5e:29:9a:
17:1f:f5:71:30:b9:e6:a9:67:2d:03:d0:b2:83:1b:
0a:fa:46:ac:92:0b:4f:64:6e:17:42:f0:86:78:89:
53:33:f2:27:ef:fe:ca:32:98:8f:44:00:1d:65:c8:
e4:f1:fa:49:b5:e7:98:4a:9c:d5:30:02:b3:ad:14:
2c:7c:95:39:ff:21:d6:dc:83:6c:c3:e5:78:cf:d8:
d1:88:68:b8:0e:31:8c:96:d6:f5:26:45:dd:b0:16:
cd:0c:e4:db:53:10:83:ed:45:12:bb:de:18:7a:c9:
06:10:6e:97:6c:5f:a7:d7:73:d9:f6:fb:6a:2b:fa:
32:ef:ca:8d:f9:87:b1:d3:eb:b4:fd:90:dd:82:37:
8e:ba:fc:4d:15:97:c7:75:8b:51:48:14:06:20:76:
1a:ca:8e:98:21:4d:1b:05:ce:f3:82:2e:7b:67:3e:
1e:3e:c4:53:6b:2f:1c:6b:8b:00:7b:d0:7b:2e:44:
97:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B7:23:D0:2A:7C:A5:D8:FF:7B:D8:56:50:16:9F:5F:04:BD:A3:06
X509v3 Authority Key Identifier:
keyid:DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/kbcj0Cp8pdj_e9hWUBafXwS9owY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.93.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:2c:97:b1:e4:50:0b:a4:b1:16:93:2e:e5:f5:07:41:41:cb:
f5:25:36:60:37:aa:f1:85:c4:6b:e6:87:41:39:5d:67:a0:ae:
75:f8:dd:4f:cc:3a:81:04:a9:9a:fe:d1:db:62:a4:73:0f:d5:
77:f6:76:91:7b:f4:18:6d:36:b4:a3:0a:35:f0:77:9b:95:d4:
aa:fe:a7:2f:f2:73:52:4a:27:f2:0c:94:00:0d:6b:a9:dc:2a:
4b:59:79:da:a8:a3:e1:91:e4:65:eb:4f:7a:e7:23:c2:54:a8:
f5:e9:dc:76:12:b9:23:4f:24:36:70:b2:b8:44:6d:09:7a:7e:
c8:4e:3d:1b:61:d4:60:a5:5e:31:f1:95:d4:80:73:d2:2a:42:
aa:72:5f:24:58:c3:b4:7e:5b:b7:dd:f9:c6:01:a9:9b:2c:77:
4d:65:9d:58:77:75:bb:35:fa:95:20:66:8d:54:94:2c:63:3f:
84:62:40:50:45:79:00:3c:ce:7c:5b:0b:c3:a3:78:f5:9c:69:
49:46:3f:a2:0d:6f:27:f5:11:9b:5f:1e:0c:64:97:71:81:00:
c4:79:99:cc:19:49:72:1b:05:15:8a:df:04:72:5e:e4:f6:38:
b5:ca:dd:63:c3:06:70:fb:78:64:d5:d9:40:65:76:a9:d0:fd:
5d:24:53:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:47 2025 by rpki-client