Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/XBco_tXGwtdDmKHLxZoJmS8b-Tg.roa
File: XBco_tXGwtdDmKHLxZoJmS8b-Tg.roa (raw, json)
Hash identifier: hJmDADek7eDFvQdNR7VTtxzfOn+Nd8C8unGqLmirgcE=
Subject key identifier: 5C:17:28:FE:D5:C6:C2:D7:43:98:A1:CB:C5:9A:09:99:2F:1B:F9:38
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0D28E632
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/XBco_tXGwtdDmKHLxZoJmS8b-Tg.roa
Signing time: Wed 04 May 2022 14:13:17 +0000
ROA not before: Wed 04 May 2022 14:13:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35478
IP address blocks: 195.252.180.0/22 maxlen: 24
195.252.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220784178 (0xd28e632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: May 4 14:13:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c1728fed5c6c2d74398a1cbc59a09992f1bf938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:94:c9:c5:f2:a5:11:b2:da:9f:c1:5e:81:
03:22:a0:01:16:bd:9a:c8:8f:c8:f7:80:aa:57:99:
dc:9d:83:09:ee:d4:b5:10:71:81:bc:a9:08:6b:23:
bd:91:86:89:ed:28:33:52:45:d6:ad:3c:e4:b8:ef:
b7:40:fe:d6:6a:b3:26:ab:3d:76:bb:9c:bf:8f:e8:
54:bd:68:62:7a:7c:38:fb:38:fc:b7:34:b5:a0:9e:
53:79:7a:28:05:c4:37:5d:c3:cd:71:c0:c0:0e:d3:
d1:42:cc:3c:cf:77:18:e6:07:ca:0c:68:31:ed:85:
70:44:70:d6:8b:b9:13:62:86:d8:3d:36:4e:b8:41:
ce:be:ce:ff:ba:f3:40:88:0d:e7:70:ce:e0:06:8b:
07:6b:ea:d8:5b:44:fb:68:3a:fb:63:ac:da:fc:46:
db:fa:db:59:40:96:27:64:bf:65:d4:cc:6d:e4:bf:
30:13:09:1f:44:6c:ec:23:12:70:51:79:2d:0f:dc:
65:05:ac:73:2b:17:1f:e2:94:1a:ee:e6:06:5c:2e:
e0:d3:68:01:cc:14:06:56:1d:17:d4:42:c5:d5:b2:
e9:6d:b0:cc:09:01:60:0f:62:0c:81:29:aa:82:09:
fc:f9:ac:19:81:e3:a3:eb:0e:e9:e6:aa:68:0f:3c:
5f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:17:28:FE:D5:C6:C2:D7:43:98:A1:CB:C5:9A:09:99:2F:1B:F9:38
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/XBco_tXGwtdDmKHLxZoJmS8b-Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.252.180.0-195.252.191.255
Signature Algorithm: sha256WithRSAEncryption
2a:00:df:46:8b:5f:b3:ab:66:eb:a7:2c:07:69:68:9c:46:8a:
54:31:a1:61:ef:21:cc:66:3d:27:73:53:6e:10:8a:86:7a:fa:
ba:e0:7e:72:6f:4c:c3:b8:7a:72:10:7f:6d:3e:c9:38:2a:64:
1d:da:70:0a:1f:50:d3:31:22:14:49:b4:f7:1a:b8:87:9b:1a:
2d:f3:f0:a4:16:c8:ef:93:93:41:21:81:df:a0:6a:d6:e7:f8:
8c:c3:69:6f:0f:d0:1a:03:c5:69:c5:e3:0f:53:fe:15:fa:b1:
4a:f8:20:0c:5b:66:51:fe:f7:0e:b5:47:82:86:25:9b:e3:65:
a4:8b:f4:65:8d:96:cb:ae:4b:8e:e9:dd:49:49:fe:83:61:b0:
a6:91:89:b5:4a:e0:37:75:53:d7:c5:a7:a1:3d:0c:18:9a:cd:
8b:ed:30:bb:49:47:d6:46:f7:8a:6d:da:ab:07:03:37:3e:77:
52:90:94:c0:f9:45:78:00:86:64:e7:4b:65:c0:8a:f7:80:35:
d7:4a:19:c2:12:bc:30:df:b6:ef:20:8e:59:9d:6b:6c:5d:39:
32:d5:a9:a9:1d:d9:67:4e:2d:d5:3a:3c:4d:4d:5a:b4:a4:74:
14:d9:1f:fb:7a:51:e1:c8:20:35:7d:5e:0d:8b:03:8d:e1:9a:
fd:65:70:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:44 2025 by rpki-client