Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b5afad-c20b-40f0-b12f-c6a44b83fbcc/1/KK0xtFaIR5JGrqF4cW5vcFD-UkA.roa
File: KK0xtFaIR5JGrqF4cW5vcFD-UkA.roa (raw, json)
Hash identifier: FM0ky5Q7c82psw1IrxpDaqM9myGZjJlNb2YFYVvvXUg=
Subject key identifier: 28:AD:31:B4:56:88:47:92:46:AE:A1:78:71:6E:6F:70:50:FE:52:40
Certificate issuer: /CN=9ef9f7a0e82c737b2e62afeb221a9766aa0d3d27
Certificate serial: 0556CB66
Authority key identifier: 9E:F9:F7:A0:E8:2C:73:7B:2E:62:AF:EB:22:1A:97:66:AA:0D:3D:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvn3oOgsc3suYq_rIhqXZqoNPSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b5afad-c20b-40f0-b12f-c6a44b83fbcc/1/KK0xtFaIR5JGrqF4cW5vcFD-UkA.roa
Signing time: Sat 01 Jan 2022 12:58:41 +0000
ROA not before: Sat 01 Jan 2022 12:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42257
IP address blocks: 193.200.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89574246 (0x556cb66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef9f7a0e82c737b2e62afeb221a9766aa0d3d27
Validity
Not Before: Jan 1 12:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28ad31b45688479246aea178716e6f7050fe5240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:e0:e4:35:41:b2:bd:40:0a:e7:9b:36:a9:
3a:b8:6f:91:f6:3e:1d:f1:be:e7:5a:d0:f8:b8:da:
8f:1f:e7:02:4a:e9:b1:60:f0:ed:b2:5a:4b:5c:ff:
60:d2:76:f2:1a:53:c3:f9:79:5c:0a:1a:95:35:d6:
bf:33:c5:2a:9b:c8:5c:14:e3:7f:ee:2e:57:68:0f:
99:b3:ec:75:dd:70:4d:96:63:bc:4d:ab:7a:59:e4:
e7:7b:c1:1d:bd:75:08:1e:8a:1d:cf:81:82:e0:29:
06:03:c7:10:63:df:ac:5c:fb:f7:c8:7c:7b:a9:38:
13:11:1a:8a:28:05:e3:77:24:bb:82:98:92:86:48:
b7:b2:c3:d1:ca:f4:51:0b:ec:fc:5f:5c:d1:e8:5a:
f2:e4:c2:1c:54:f7:9c:6d:c8:b0:d9:b5:a8:8b:83:
47:3a:fd:00:89:00:58:0d:26:3c:9e:f6:3e:8c:f9:
41:33:01:14:2e:de:63:a4:6a:51:dc:35:c3:be:ea:
18:10:a1:3a:82:5b:c3:75:d3:e3:9f:7e:b4:92:23:
f3:f2:f0:70:4c:a0:1e:4d:df:61:7e:ad:00:f7:74:
0c:e9:cb:5d:00:26:0d:6d:19:18:0c:70:00:25:a4:
a2:39:b3:33:f7:c7:1a:52:c9:df:67:49:b8:c3:10:
e8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AD:31:B4:56:88:47:92:46:AE:A1:78:71:6E:6F:70:50:FE:52:40
X509v3 Authority Key Identifier:
keyid:9E:F9:F7:A0:E8:2C:73:7B:2E:62:AF:EB:22:1A:97:66:AA:0D:3D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvn3oOgsc3suYq_rIhqXZqoNPSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b5afad-c20b-40f0-b12f-c6a44b83fbcc/1/KK0xtFaIR5JGrqF4cW5vcFD-UkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b5afad-c20b-40f0-b12f-c6a44b83fbcc/1/nvn3oOgsc3suYq_rIhqXZqoNPSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.6.0/24
Signature Algorithm: sha256WithRSAEncryption
63:27:4b:a3:88:3d:cf:95:af:46:72:e6:89:63:b3:8f:1a:55:
d2:bf:53:91:42:d9:28:4b:b7:b6:28:2d:8f:01:f6:d9:45:ec:
c7:4a:a8:71:e3:b8:66:52:89:fa:53:85:30:80:a0:b1:08:78:
5c:7f:59:e2:a3:84:b0:fe:ec:4f:24:e6:6a:bc:dc:1f:cc:3a:
f9:6b:15:99:07:11:25:48:39:3d:7f:9e:1d:e3:a0:b5:fb:67:
8e:04:11:f2:11:4a:8a:58:ed:ce:76:bd:e8:df:72:1a:d0:aa:
47:75:2a:6c:a6:35:86:22:f0:fe:8c:6c:36:03:0e:96:b5:83:
72:76:61:ec:c7:dd:b5:8e:48:f6:f6:d1:50:30:6d:12:15:ed:
6d:24:fd:60:dc:ce:c6:58:a0:d9:cc:9a:78:63:c1:55:0f:fe:
68:e9:41:c0:3f:2a:35:df:22:99:26:16:d5:6e:dc:5d:d0:f4:
b7:c0:51:eb:4a:7c:c3:cd:80:47:6c:39:73:b2:bb:c4:c8:24:
1c:0e:71:b6:06:c4:73:23:4c:95:d7:2c:11:1e:9d:c0:e7:b0:
21:3e:64:ee:54:f1:d6:0e:af:1b:21:d9:14:25:26:12:48:4c:
75:d1:31:6d:7a:d2:b9:80:cd:f6:45:f4:e1:52:94:fb:ee:89:
3c:04:4f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:11 2025 by rpki-client