Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/krh3-kw-_LM_hhuhd0pXrXLDf0k.roa
File: krh3-kw-_LM_hhuhd0pXrXLDf0k.roa (raw, json)
Hash identifier: 7lE3hhSGplddLtSkpgw6EhmM1J7NSUM/jBLq8d8SS88=
Subject key identifier: 92:B8:77:FA:4C:3E:FC:B3:3F:86:1B:A1:77:4A:57:AD:72:C3:7F:49
Certificate issuer: /CN=3c1b83888696fc44478c693d6e7803e9516250e6
Certificate serial: 0193696B744559D4C6B55F7E03AD7305D5DD
Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/krh3-kw-_LM_hhuhd0pXrXLDf0k.roa
Signing time: Tue 26 Nov 2024 17:01:09 +0000
ROA not before: Tue 26 Nov 2024 17:01:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5413
IP address blocks: 46.31.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:6b:74:45:59:d4:c6:b5:5f:7e:03:ad:73:05:d5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6
Validity
Not Before: Nov 26 17:01:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92b877fa4c3efcb33f861ba1774a57ad72c37f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:74:14:91:9a:14:10:ec:d1:41:ce:d9:9d:
8c:99:61:88:55:2f:23:94:cf:fb:c4:71:0c:8d:1f:
a1:2b:af:83:1a:7a:85:b2:05:30:67:45:07:c2:51:
2e:66:f0:a1:33:71:4a:04:8b:55:da:81:c1:e2:99:
2e:a2:4d:c7:52:13:c8:2c:9b:17:b9:30:2b:c7:7f:
59:fa:5b:28:f4:d4:e4:63:55:78:2e:98:b7:16:7b:
6b:2f:39:5f:6b:37:c4:e4:a5:f8:24:8b:0e:df:90:
7c:93:5d:0b:c4:b0:33:46:0b:5d:5d:81:ed:96:23:
64:00:7f:4b:43:ae:23:fb:ca:32:ed:38:47:d1:f5:
30:06:8b:c4:c7:8b:b1:cb:d4:cd:b1:5c:e5:97:ec:
8b:83:51:63:76:d0:fd:db:b7:09:48:fe:fe:fb:1b:
12:5b:e7:8a:6a:8e:e6:a8:8d:8e:78:52:5a:c9:bb:
ff:ff:4e:f3:8d:a2:5f:0f:41:ab:6d:b6:5e:2a:aa:
74:3e:d6:75:9f:6f:c6:5b:7d:2c:18:e7:dd:0e:ef:
cf:a9:34:29:61:5d:8b:b7:ce:06:31:5d:10:b9:e8:
16:90:7f:26:f9:20:61:24:5d:81:57:da:c1:ef:b9:
20:fb:b8:d6:bf:f5:a2:46:13:30:f5:bc:d0:30:95:
57:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B8:77:FA:4C:3E:FC:B3:3F:86:1B:A1:77:4A:57:AD:72:C3:7F:49
X509v3 Authority Key Identifier:
keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/krh3-kw-_LM_hhuhd0pXrXLDf0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.71.0/24
Signature Algorithm: sha256WithRSAEncryption
53:84:99:c0:31:7b:5a:03:f9:60:6e:5a:a9:4b:c9:8b:ad:23:
41:8c:a8:58:9e:02:1f:12:ca:d7:33:d5:df:97:b3:b2:95:12:
99:bc:30:56:a6:74:c7:c6:79:22:a9:4a:66:46:e5:73:7d:8c:
f3:c9:36:ba:63:91:04:9e:a3:64:dd:28:63:66:25:d7:38:57:
cd:6f:c5:2b:df:45:bb:7a:21:7b:34:ca:eb:05:15:45:38:b0:
90:b8:d9:e8:ff:67:82:61:0d:6e:70:6b:7a:a3:d2:b7:7e:5f:
65:d6:8e:7d:94:54:89:82:a5:e6:fb:58:5d:9f:56:5f:25:5b:
f1:48:26:79:2f:67:0e:c9:ee:a4:3d:85:8b:02:8b:7a:a0:c0:
3b:3b:e5:a8:e1:92:f7:df:de:af:f3:8e:42:42:c8:b9:8f:3e:
0d:64:b1:44:19:7e:95:56:b9:80:af:88:9c:e1:fc:82:a2:bd:
f4:de:c8:bf:09:81:7c:bd:b1:58:c3:1a:63:87:ab:ff:89:d5:
66:95:7a:01:b2:9c:11:2a:d6:b6:43:be:d9:61:1e:f7:0d:20:
d6:94:aa:4f:25:be:a0:94:ff:99:2c:52:9f:2d:30:0c:65:ae:
16:0c:b9:74:a2:ac:0f:eb:ff:8c:44:51:3a:54:98:a7:4f:39:
82:8d:99:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:30 2024 by rpki-client on console.sobornost.net