Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/kPp8ELLfTbiBDd32U3dA4eYrRdk.roa
File: kPp8ELLfTbiBDd32U3dA4eYrRdk.roa (raw, json)
Hash identifier: Fg61gX5TDDxQAegxMyVNJHb0YIxcWpzpyiie6Yvz8Ug=
Subject key identifier: 90:FA:7C:10:B2:DF:4D:B8:81:0D:DD:F6:53:77:40:E1:E6:2B:45:D9
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 01926B3B1BE197637384EADAC4C6EB2EE59F
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/kPp8ELLfTbiBDd32U3dA4eYrRdk.roa
Signing time: Tue 08 Oct 2024 08:24:48 +0000
ROA not before: Tue 08 Oct 2024 08:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58074
IP address blocks: 193.138.99.0/24 maxlen: 24
193.169.142.0/24 maxlen: 24
194.6.201.0/24 maxlen: 24
195.88.38.0/23 maxlen: 24
195.245.82.0/23 maxlen: 24
195.245.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:3b:1b:e1:97:63:73:84:ea:da:c4:c6:eb:2e:e5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Oct 8 08:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90fa7c10b2df4db8810dddf6537740e1e62b45d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:49:f4:11:9e:4f:cf:c1:6e:f2:18:be:c1:
a7:75:73:b5:24:34:a8:06:48:5e:42:5e:b5:fb:b4:
74:2c:d5:3c:4e:73:32:bf:ac:d5:6b:a3:4f:c0:95:
58:17:ce:f0:82:cb:c9:96:f2:e2:8e:c6:6f:67:72:
92:7b:4a:13:4e:c6:ca:cb:29:fc:4d:4f:e5:89:14:
68:cd:a6:66:43:a5:04:b6:37:2c:5c:58:b8:6b:e7:
1c:2b:4d:81:9f:b5:94:95:1f:57:1d:49:20:e0:83:
f3:68:b0:46:02:45:94:85:85:fe:6f:87:9d:38:75:
9f:c0:dd:55:92:43:85:18:9b:d8:9f:8b:59:99:5d:
41:39:b2:1a:18:06:2d:99:59:30:a2:f1:73:ec:21:
9d:d8:26:70:04:46:37:94:f9:7d:a1:6f:25:4f:29:
8c:2b:67:77:9d:f5:de:3f:83:5b:30:fc:91:43:54:
6d:11:d0:84:9a:48:8c:b1:aa:d9:86:95:9b:45:33:
96:03:95:34:fa:bc:4d:b1:c0:06:c7:fc:63:c6:80:
f0:3b:ad:30:a0:9d:21:41:88:05:56:8d:58:96:42:
77:3d:48:2c:70:8b:6f:49:9d:7c:8f:91:a0:50:e2:
cf:a9:cb:7f:81:69:ad:17:95:a2:43:92:e2:81:c9:
7a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FA:7C:10:B2:DF:4D:B8:81:0D:DD:F6:53:77:40:E1:E6:2B:45:D9
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/kPp8ELLfTbiBDd32U3dA4eYrRdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.99.0/24
193.169.142.0/24
194.6.201.0/24
195.88.38.0/23
195.245.82.0/23
Signature Algorithm: sha256WithRSAEncryption
05:2e:04:fe:fb:29:7c:13:03:39:43:1b:ce:6e:f1:be:83:b5:
54:1f:81:6b:a0:3f:0b:16:fd:2b:37:75:a5:0c:a2:34:9d:d1:
42:37:87:60:fc:91:52:d3:70:29:4b:d7:4b:69:97:e7:41:46:
44:5d:d3:0c:44:65:9d:43:0a:bb:21:57:de:74:d6:ee:b0:01:
b8:f0:3e:5d:f6:40:df:06:ef:ec:48:cf:12:f8:00:a1:99:e7:
63:12:29:50:ea:99:af:eb:83:34:e5:b4:49:f2:09:02:88:27:
00:82:41:87:d3:4c:64:e7:c3:a4:0a:9c:aa:45:e4:48:0c:40:
68:31:12:7d:44:40:a2:9d:3f:27:1f:7c:80:a8:c2:c1:ef:50:
c3:78:24:c0:05:6d:51:c7:98:21:a8:89:83:8e:a1:47:57:bc:
41:5e:78:5d:8e:41:c5:dc:70:8b:71:16:e6:49:f9:e5:6d:0a:
8c:18:ed:ae:39:13:a7:09:a5:25:bf:c3:72:84:1c:d4:5c:92:
9c:b8:e3:6e:d9:7c:c8:04:fa:e5:5a:d5:29:a1:5a:41:78:1d:
a6:44:07:5c:02:fa:8b:65:e0:31:d5:29:c5:ec:03:3e:e1:7f:
b0:9d:99:c9:5e:d0:59:23:05:2d:55:b9:b4:69:0d:f9:79:6d:
4d:ea:74:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:21:24 2024 by rpki-client on console.sobornost.net