Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kp-8zE0mx0zA5KGEjxOIGNBJTTg.roa
File: kp-8zE0mx0zA5KGEjxOIGNBJTTg.roa (raw, json)
Hash identifier: 9P0p1N8xjT8S/neA7UOdm2oTVACd2AZFFP7oQcTf2W4=
Subject key identifier: 92:9F:BC:CC:4D:26:C7:4C:C0:E4:A1:84:8F:13:88:18:D0:49:4D:38
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0AA08CC7
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kp-8zE0mx0zA5KGEjxOIGNBJTTg.roa
Signing time: Mon 04 Jul 2022 19:59:18 +0000
ROA not before: Mon 04 Jul 2022 19:59:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 194.124.41.0/24 maxlen: 24
91.245.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178293959 (0xaa08cc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Jul 4 19:59:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=929fbccc4d26c74cc0e4a1848f138818d0494d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3d:1f:ab:ba:ef:55:44:a4:22:69:54:d0:df:
51:14:59:be:e2:94:52:fe:a5:93:84:28:5e:33:36:
5c:cc:90:bd:eb:c0:c0:2b:03:3a:a1:66:8d:83:0c:
d9:a8:a4:38:6a:f6:2a:97:40:91:51:76:b1:9b:e9:
2b:e0:27:8a:04:03:08:d6:45:ba:0f:21:98:6c:7c:
8b:25:c7:ca:34:70:af:2e:2e:b4:03:d9:ed:71:b1:
c4:40:c0:a7:44:0d:51:2f:44:1c:6b:46:f2:ab:b0:
56:c6:3a:b2:c8:e6:d3:bf:12:0c:79:38:f7:91:5b:
a1:22:da:f4:e8:ce:b1:54:b8:a5:d4:b7:12:e8:ee:
9a:50:ec:b9:e7:5d:50:1e:ea:77:15:cc:93:5d:c4:
e1:53:63:94:15:c8:6d:06:92:1c:8f:de:35:5f:53:
80:50:21:84:f7:dd:a0:e4:68:6e:83:c5:3d:eb:58:
6f:ae:c2:e1:32:fb:3e:08:07:82:c3:52:67:d0:33:
a7:53:44:b1:6e:2f:af:5a:46:51:61:6a:23:f7:19:
40:97:3c:f5:0d:d8:33:7d:f8:bf:1b:c7:b1:f9:d4:
b9:53:6d:fc:08:0f:ff:ac:fb:6b:ee:40:55:19:3b:
f3:30:55:9e:12:54:f7:c2:e4:6d:e2:96:bf:b8:fd:
3e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9F:BC:CC:4D:26:C7:4C:C0:E4:A1:84:8F:13:88:18:D0:49:4D:38
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kp-8zE0mx0zA5KGEjxOIGNBJTTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.239.0/24
194.124.41.0/24
Signature Algorithm: sha256WithRSAEncryption
33:5e:45:b6:a3:da:ac:7e:62:fd:b7:12:1c:46:75:b5:4c:d9:
fe:e0:51:a0:fe:98:a1:f2:58:95:61:5d:bf:37:ab:d1:bb:b4:
85:d5:e6:01:f6:7a:52:3f:b1:7a:f9:93:50:50:09:39:a4:ad:
ca:42:df:db:ca:5a:37:13:9a:5e:9e:b1:4d:43:c9:f3:95:be:
1f:5e:e1:b9:d1:3a:bb:33:11:8c:9a:92:57:7e:10:00:ea:2c:
7d:4f:c5:a5:4e:24:da:a2:e6:e0:78:ef:49:92:96:24:d3:25:
09:d0:1b:18:08:bf:f0:5d:a2:9e:b4:7d:71:1b:d8:3e:05:0f:
70:b1:4c:ff:95:8b:8b:e7:d9:3d:70:95:d5:aa:c3:5e:90:d6:
25:48:b0:e8:1f:7b:b2:3f:66:18:e8:b8:f8:ec:de:6d:cd:2e:
50:54:4c:2d:5f:7e:e0:41:81:76:11:35:e9:59:95:c2:4a:89:
a1:d4:8c:da:fb:8f:f8:3f:bf:4a:97:42:9a:57:c2:ee:2c:13:
b7:ca:00:a5:1b:a8:29:a7:fe:8b:4b:b7:f2:51:ad:3f:6b:c4:
6c:81:a8:c2:4c:b3:30:5a:21:13:1c:c2:44:ba:bc:1b:ca:2a:
06:41:61:7e:81:19:5a:46:b2:1f:48:41:5e:40:b0:c9:cf:1f:
2b:d2:20:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:31 2023 by rpki-client on console-ams.rpki-client.org