Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/KxM_UNUKk12-ffXwVCkLNevCjXs.roa
File: KxM_UNUKk12-ffXwVCkLNevCjXs.roa (raw, json)
Hash identifier: UiCkAS5Dng08PWNBRXDfUGOaKaxS9JpPPtYIe/YCzyI=
Subject key identifier: 2B:13:3F:50:D5:0A:93:5D:BE:7D:F5:F0:54:29:0B:35:EB:C2:8D:7B
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 0184ECCFA042A5110C8A780D54D762736606
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/KxM_UNUKk12-ffXwVCkLNevCjXs.roa
Signing time: Wed 07 Dec 2022 13:39:00 +0000
ROA not before: Wed 07 Dec 2022 13:39:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212609
IP address blocks: 93.127.166.0/24 maxlen: 24
77.37.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:cf:a0:42:a5:11:0c:8a:78:0d:54:d7:62:73:66:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Dec 7 13:39:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b133f50d50a935dbe7df5f054290b35ebc28d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:1c:12:b0:dd:29:4e:7a:3f:12:09:94:b0:
89:e6:f7:8a:fa:b2:bd:c9:4f:d5:2e:49:bf:9b:76:
19:54:5e:6b:e3:d4:b2:dc:c1:e8:76:8e:41:9f:7e:
05:2f:11:28:6a:f9:bd:ef:a9:74:de:c8:1f:2a:75:
74:75:64:49:bb:50:6a:34:51:fc:a1:78:42:03:f7:
68:3b:67:73:02:dd:a2:13:03:ce:91:6c:de:7e:50:
b7:69:f1:6e:12:b1:c9:98:c3:e7:17:2e:92:1a:03:
cc:50:ab:9e:2a:a5:88:ed:38:72:9d:4a:71:63:20:
82:00:65:ad:23:86:7a:64:ed:fe:64:60:a3:68:ae:
fa:d6:09:d6:13:5d:86:d0:74:7b:17:b2:d2:8c:65:
7c:12:e2:80:1b:a0:db:3d:f6:0a:10:fd:67:be:5a:
63:1e:f4:5d:e6:5a:ef:11:e4:f1:e6:93:9a:dd:c0:
df:19:3f:76:a1:d8:ba:8f:16:a4:d6:54:69:80:07:
5e:3e:c2:64:94:e4:34:00:c6:f8:9c:95:bc:61:b3:
d0:53:2f:42:84:70:f7:c2:54:bc:09:34:8c:5d:ed:
3d:20:bf:f8:17:76:b3:2f:0d:e6:cd:50:94:5f:65:
f9:d7:cc:27:92:5f:c2:4c:0f:3e:50:30:d3:df:46:
64:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:13:3F:50:D5:0A:93:5D:BE:7D:F5:F0:54:29:0B:35:EB:C2:8D:7B
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/KxM_UNUKk12-ffXwVCkLNevCjXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.38.0/24
93.127.166.0/24
Signature Algorithm: sha256WithRSAEncryption
59:9b:c0:4a:af:34:ff:a6:19:49:3a:70:97:0b:df:12:ec:77:
51:3e:eb:b1:ab:f0:ff:c4:b0:19:b9:e3:91:26:c1:98:21:0e:
e1:6e:8b:eb:5c:95:e7:b4:5e:2a:13:05:0a:92:4f:bc:e0:76:
ea:a8:80:d4:aa:be:45:fa:a9:1d:27:7e:07:2a:be:b8:7f:da:
1e:1b:16:a8:9d:51:5d:b0:bf:53:e8:18:bb:c1:1a:38:fe:e0:
63:4b:f4:fb:96:a3:88:86:9a:53:7d:44:f8:7e:ce:03:c1:85:
5b:e9:85:e1:58:3d:0b:09:0c:49:cb:b3:77:e0:e1:ac:86:9b:
01:0e:a1:2b:91:3c:64:97:f4:82:d5:f9:10:20:6d:59:70:89:
a6:54:6b:8d:d4:83:28:ce:a5:20:16:2c:70:da:7a:cc:8e:3a:
fe:ed:56:0e:93:a5:35:1e:29:86:51:56:0e:05:f6:d8:a9:d3:
75:5f:b9:24:34:96:e6:60:16:76:60:2d:82:cf:6a:5d:ea:2c:
8c:52:75:c5:6c:38:7b:40:87:0d:bb:4a:71:c1:a6:eb:fa:35:
34:3b:84:7f:49:23:e5:b7:b3:07:3d:d3:87:21:dd:8c:70:f6:
e1:de:fa:98:5e:b7:a4:f0:db:37:d3:81:eb:d4:5d:35:bd:3c:
52:74:fd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net