Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/xcF4L7lk6HGbelPZNQR6OFpiiX0.roa
File: xcF4L7lk6HGbelPZNQR6OFpiiX0.roa (raw, json)
Hash identifier: X55TGWbjrBI3nQ3ZvHHdX/XmeLPhKGnItCiHjPEj8Sk=
Subject key identifier: C5:C1:78:2F:B9:64:E8:71:9B:7A:53:D9:35:04:7A:38:5A:62:89:7D
Certificate issuer: /CN=e4b90db21816df01f70f296683fea2c0ac8161d9
Certificate serial: 904FF6
Authority key identifier: E4:B9:0D:B2:18:16:DF:01:F7:0F:29:66:83:FE:A2:C0:AC:81:61:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LkNshgW3wH3Dylmg_6iwKyBYdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/xcF4L7lk6HGbelPZNQR6OFpiiX0.roa
Signing time: Sat 01 Jan 2022 01:57:36 +0000
ROA not before: Sat 01 Jan 2022 01:57:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 262287
IP address blocks: 87.236.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9457654 (0x904ff6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b90db21816df01f70f296683fea2c0ac8161d9
Validity
Not Before: Jan 1 01:57:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5c1782fb964e8719b7a53d935047a385a62897d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7c:b7:8e:34:d2:d3:ea:b8:fb:c2:d3:9e:ad:
ba:b2:fc:af:e5:f7:83:5f:51:a1:90:0e:45:a2:87:
86:26:23:e9:6e:e0:78:8a:1b:97:de:00:63:de:82:
42:10:72:f7:60:25:31:32:7e:3e:45:10:ec:80:1e:
7b:26:f8:3d:0b:80:95:78:41:a5:b2:4d:5c:82:bb:
a6:17:32:bb:26:b3:2d:30:09:6b:c0:14:7a:f7:49:
0e:54:b6:1a:26:63:e1:93:d5:8f:f9:bc:b7:a4:f4:
dd:9c:80:80:93:e3:25:75:a9:f3:c1:a5:32:c4:b3:
c1:2f:4c:a9:d0:df:73:8d:9c:31:bb:24:27:7d:3a:
e3:ff:39:ea:ef:5a:80:5c:52:63:74:1a:bc:cf:4f:
2c:b9:b8:35:df:08:f2:98:45:55:1a:e4:84:93:28:
8e:17:9a:68:7e:2b:de:16:51:81:99:83:02:e0:43:
79:6f:f3:ab:b0:cc:02:28:41:84:31:38:f2:bc:99:
5d:69:0f:e0:cd:6d:0e:5d:42:80:e3:0b:6e:2b:10:
e1:d6:14:bd:ae:5d:67:51:c3:fa:12:55:95:be:c9:
d1:5a:5e:63:95:e1:9d:4e:8e:06:23:80:7b:ab:31:
d5:8d:df:a3:62:4b:5f:5d:39:4d:f2:1e:d5:3d:1d:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C1:78:2F:B9:64:E8:71:9B:7A:53:D9:35:04:7A:38:5A:62:89:7D
X509v3 Authority Key Identifier:
keyid:E4:B9:0D:B2:18:16:DF:01:F7:0F:29:66:83:FE:A2:C0:AC:81:61:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LkNshgW3wH3Dylmg_6iwKyBYdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/xcF4L7lk6HGbelPZNQR6OFpiiX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/5LkNshgW3wH3Dylmg_6iwKyBYdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.144.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a8:a3:68:e9:18:9f:7d:37:7d:2e:d2:98:a3:b0:2e:a5:54:
20:06:a0:5b:af:dc:19:42:23:4c:17:a6:4d:1f:a1:6e:32:fe:
bc:8e:05:d9:89:ad:05:7b:c0:e6:40:f4:ce:94:1c:aa:b0:f6:
85:9a:78:ef:6d:f0:70:ea:7e:51:57:43:ff:a6:51:0b:41:63:
21:29:f4:3b:35:bc:c8:36:65:b2:a4:7b:99:89:c5:54:33:56:
4a:c3:c0:64:e0:94:44:2c:56:26:f0:b0:b3:24:4b:34:e3:26:
dc:0f:aa:27:fb:fb:02:b8:22:21:c8:25:52:c4:99:64:b9:e7:
00:43:db:87:49:bd:4a:fe:5a:1e:74:d9:3d:c1:7d:6b:7f:3e:
89:2f:f0:b3:01:fd:e3:d7:59:1e:07:a8:ec:d2:c0:70:d9:59:
a0:94:61:80:42:10:39:b0:7b:3d:7c:15:11:4a:c5:09:69:67:
fd:e3:47:7f:c0:81:69:59:a7:2b:d2:30:f6:43:80:e2:18:a8:
16:46:be:98:17:8d:9a:26:99:87:8b:d7:91:94:69:fe:f2:d3:
2c:fc:9a:ea:17:c8:e7:8b:a4:e8:25:89:4a:6e:93:b8:bf:72:
1b:ce:2c:b0:e3:60:86:ce:b0:31:0c:56:cb:dc:05:ac:58:48:
10:ea:f1:74
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAJBP9jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NGI5MGRiMjE4MTZkZjAxZjcwZjI5NjY4M2ZlYTJjMGFjODE2MWQ5MB4XDTIyMDEw
MTAxNTczNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzVjMTc4MmZiOTY0
ZTg3MTliN2E1M2Q5MzUwNDdhMzg1YTYyODk3ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJR8t4400tPquPvC056turL8r+X3g19RoZAORaKHhiYj6W7g
eIobl94AY96CQhBy92AlMTJ+PkUQ7IAeeyb4PQuAlXhBpbJNXIK7phcyuyazLTAJ
a8AUevdJDlS2GiZj4ZPVj/m8t6T03ZyAgJPjJXWp88GlMsSzwS9MqdDfc42cMbsk
J3064/856u9agFxSY3QavM9PLLm4Nd8I8phFVRrkhJMojheaaH4r3hZRgZmDAuBD
eW/zq7DMAihBhDE48ryZXWkP4M1tDl1CgOMLbisQ4dYUva5dZ1HD+hJVlb7J0Vpe
Y5XhnU6OBiOAe6sx1Y3fo2JLX105TfIe1T0d/IECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTFwXgvuWTocZt6U9k1BHo4WmKJfTAfBgNVHSMEGDAWgBTkuQ2yGBbfAfcP
KWaD/qLArIFh2TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVMa05zaGdXM3dIM0R5bG1nXzZpd0t5Qllkay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWIvNzY0MmI5LWNhYTAtNDNkZi04MjA1LTJmMThhYTYzNmJjYS8x
L3hjRjRMN2xrNkhHYmVsUFpOUVI2T0ZwaWlYMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIv
NzY0MmI5LWNhYTAtNDNkZi04MjA1LTJmMThhYTYzNmJjYS8xLzVMa05zaGdXM3dI
M0R5bG1nXzZpd0t5Qllkay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFfskDANBgkqhkiG9w0BAQsFAAOC
AQEAJKijaOkYn303fS7SmKOwLqVUIAagW6/cGUIjTBemTR+hbjL+vI4F2YmtBXvA
5kD0zpQcqrD2hZp4723wcOp+UVdD/6ZRC0FjISn0OzW8yDZlsqR7mYnFVDNWSsPA
ZOCURCxWJvCwsyRLNOMm3A+qJ/v7ArgiIcglUsSZZLnnAEPbh0m9Sv5aHnTZPcF9
a38+iS/wswH949dZHgeo7NLAcNlZoJRhgEIQObB7PXwVEUrFCWln/eNHf8CBaVmn
K9Iw9kOA4hioFka+mBeNmiaZh4vXkZRp/vLTLPya6hfI54uk6CWJSm6TuL9yG84s
sONghs6wMQxWy9wFrFhIEOrxdA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:51 2024 by rpki-client on console-ams.rpki-client.org