Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/f6b06a-e57e-41d2-927a-fb7060d0849e/1/XNT2RNA1d4By9j_bqyH5CX9fx7M.roa
File: XNT2RNA1d4By9j_bqyH5CX9fx7M.roa (raw, json)
Hash identifier: QpwyMGPwXcMiRm8ZGdBSdLiMpZ8EuHonHUYx1gLIrS8=
Subject key identifier: 5C:D4:F6:44:D0:35:77:80:72:F6:3F:DB:AB:21:F9:09:7F:5F:C7:B3
Certificate issuer: /CN=36ff8d8e02e1d114a4b0a9f7a2296e22d06e1d69
Certificate serial: 08EECE9A
Authority key identifier: 36:FF:8D:8E:02:E1:D1:14:A4:B0:A9:F7:A2:29:6E:22:D0:6E:1D:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv-NjgLh0RSksKn3oiluItBuHWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/f6b06a-e57e-41d2-927a-fb7060d0849e/1/XNT2RNA1d4By9j_bqyH5CX9fx7M.roa
Signing time: Sat 01 Jan 2022 06:04:21 +0000
ROA not before: Sat 01 Jan 2022 06:04:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61205
IP address blocks: 185.245.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149868186 (0x8eece9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ff8d8e02e1d114a4b0a9f7a2296e22d06e1d69
Validity
Not Before: Jan 1 06:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5cd4f644d035778072f63fdbab21f9097f5fc7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3c:7a:db:e2:27:7e:90:b7:01:c4:9e:10:b7:
20:3b:6d:b3:24:29:b5:a9:b3:38:b9:9d:5c:95:fb:
1e:2b:32:54:5f:48:bf:bc:02:c0:57:1f:00:86:30:
40:d3:6b:6f:a2:4d:ac:94:17:96:25:60:d5:35:c1:
e2:96:fa:bc:58:64:f3:bc:92:35:24:1d:b4:c8:d4:
2b:fd:91:b2:2b:2a:69:8f:ab:77:16:b0:12:32:02:
87:6c:c8:b0:e3:ce:2b:67:a4:ba:d9:09:25:9a:c0:
77:ce:ca:a8:53:31:7f:1f:b7:ea:50:61:22:32:ce:
aa:e1:f3:f3:22:cd:58:8e:44:e4:99:33:85:ce:ed:
ee:10:3c:a8:cc:e8:e7:eb:32:e3:ea:a3:63:61:cc:
56:36:07:92:63:2e:f2:01:ec:a3:f0:d3:56:32:ab:
67:fa:07:10:77:30:2b:e0:ed:89:ec:d8:f6:96:1f:
d7:57:e1:38:b1:07:01:24:ff:9b:61:8f:88:55:10:
bf:55:8c:91:05:68:32:c5:5c:cf:c9:e3:08:3e:ba:
d8:18:4c:df:5b:b6:fa:5f:3c:1e:e8:45:d0:45:f0:
7c:35:40:35:6a:19:db:c9:50:af:27:fe:8e:25:88:
6d:c4:f4:34:42:0b:55:38:36:f3:c4:d7:b2:4c:d4:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D4:F6:44:D0:35:77:80:72:F6:3F:DB:AB:21:F9:09:7F:5F:C7:B3
X509v3 Authority Key Identifier:
keyid:36:FF:8D:8E:02:E1:D1:14:A4:B0:A9:F7:A2:29:6E:22:D0:6E:1D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv-NjgLh0RSksKn3oiluItBuHWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/f6b06a-e57e-41d2-927a-fb7060d0849e/1/XNT2RNA1d4By9j_bqyH5CX9fx7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/f6b06a-e57e-41d2-927a-fb7060d0849e/1/Nv-NjgLh0RSksKn3oiluItBuHWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.196.0/22
Signature Algorithm: sha256WithRSAEncryption
88:23:eb:bf:41:51:74:25:01:c1:11:2a:c7:22:dd:91:d3:e4:
cd:18:bb:ec:3b:22:72:25:13:67:3a:b7:88:c5:ac:7b:35:9f:
52:10:74:87:d6:b1:23:67:37:6f:97:13:9a:43:1c:65:33:ce:
04:36:65:30:fd:93:1b:b2:61:ff:6a:cb:64:23:18:40:4c:14:
fd:b9:01:cf:f0:e6:7b:0d:07:c9:13:8d:4c:5e:27:fd:d7:f6:
a0:f0:29:87:9b:c8:c9:0b:e0:7f:f8:56:e4:01:da:77:c4:57:
30:2c:ce:3e:bf:ba:46:d8:d4:16:8c:2f:f0:f5:68:29:f5:dd:
ed:ef:e3:b1:b0:01:d4:c6:98:ed:b3:ef:13:3c:c8:9f:a4:5f:
c7:28:67:15:b5:64:7c:eb:bd:85:65:69:95:49:89:2d:3c:cc:
69:02:08:d0:88:1a:e9:66:ae:47:89:16:06:c1:7c:56:b6:c8:
1c:96:17:3f:59:f8:cb:9d:d3:fd:eb:8b:68:6b:e9:6a:c8:49:
93:a3:4d:5c:59:11:3e:b9:1c:58:a9:0d:71:a6:ac:fe:73:b9:
a0:ea:85:04:1a:87:f4:21:d0:56:16:21:d5:20:6e:24:16:8a:
a6:12:39:db:68:78:87:b7:15:26:be:79:ab:b0:70:ac:fb:8a:
f4:c9:87:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:57 2024 by rpki-client on console-ams.rpki-client.org