Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/XmYds77Sg1AscRfMSGbI1eJim1s.roa
File: XmYds77Sg1AscRfMSGbI1eJim1s.roa (raw, json)
Hash identifier: 4Ly3E3mJ2Ba4okifoC4VxRti5zH7EF+m4V5Qp3G1ac0=
Subject key identifier: 5E:66:1D:B3:BE:D2:83:50:2C:71:17:CC:48:66:C8:D5:E2:62:9B:5B
Certificate issuer: /CN=55de7c1b5c5265bcb90c144c563076fdcfab6a1e
Certificate serial: 0185CB5ACD778E7D32A7DF37ACCC19960F17
Authority key identifier: 55:DE:7C:1B:5C:52:65:BC:B9:0C:14:4C:56:30:76:FD:CF:AB:6A:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vd58G1xSZby5DBRMVjB2_c-rah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/XmYds77Sg1AscRfMSGbI1eJim1s.roa
Signing time: Thu 19 Jan 2023 18:46:43 +0000
ROA not before: Thu 19 Jan 2023 18:46:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56884
IP address blocks: 2a05:f300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cb:5a:cd:77:8e:7d:32:a7:df:37:ac:cc:19:96:0f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55de7c1b5c5265bcb90c144c563076fdcfab6a1e
Validity
Not Before: Jan 19 18:46:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e661db3bed283502c7117cc4866c8d5e2629b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fb:6e:9a:6b:34:b5:48:67:8c:08:23:7c:cc:
45:c2:8d:0d:af:1f:68:29:f4:07:aa:43:82:b4:42:
20:6a:72:c8:7f:cc:65:92:36:12:91:60:3b:e2:a7:
a4:9a:49:0c:5c:5b:23:e0:59:63:d2:2b:a8:3d:8c:
fa:b9:16:ca:30:67:86:81:61:46:1f:15:50:3a:8f:
4a:fb:5c:1a:14:1c:76:62:ea:02:54:48:49:43:08:
13:55:76:96:8a:ae:38:98:5b:d7:1c:e8:e3:3d:1d:
bb:54:1f:49:b2:d8:0e:39:69:a2:ab:56:17:0d:52:
05:4a:4e:1c:51:b4:dc:a7:03:eb:93:75:8f:01:ac:
e0:a4:fc:73:d2:0b:43:f5:14:bd:c4:ab:02:d9:ac:
88:6f:54:e1:37:8d:95:ff:0d:65:e1:be:16:64:8a:
16:2b:86:dd:69:cc:f6:21:70:7c:a1:be:47:f1:b3:
06:ac:d8:54:dd:c5:eb:f1:35:5f:ad:9a:04:cb:4f:
e4:80:27:19:9b:3d:76:c8:cf:fb:09:e1:a9:40:33:
55:8b:b0:6f:19:a2:1b:4a:69:7a:cb:7d:12:0e:52:
89:60:1f:47:24:24:78:6b:2b:5b:32:d3:61:66:83:
d7:99:27:8f:a2:26:26:cf:48:24:72:a0:4a:09:69:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:66:1D:B3:BE:D2:83:50:2C:71:17:CC:48:66:C8:D5:E2:62:9B:5B
X509v3 Authority Key Identifier:
keyid:55:DE:7C:1B:5C:52:65:BC:B9:0C:14:4C:56:30:76:FD:CF:AB:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd58G1xSZby5DBRMVjB2_c-rah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/XmYds77Sg1AscRfMSGbI1eJim1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/Vd58G1xSZby5DBRMVjB2_c-rah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:f300::/29
Signature Algorithm: sha256WithRSAEncryption
12:6f:4b:c3:dc:6f:b6:6e:c3:e0:bf:4d:1e:9d:db:45:ce:f4:
53:67:82:82:0b:90:d2:5f:a0:de:00:46:7c:04:bf:c5:49:ad:
8f:d7:79:66:45:c1:85:bf:ff:a5:75:fc:4a:ba:b1:2f:8a:33:
02:0d:c1:bd:cd:d7:95:11:0e:a3:d2:7b:bc:9b:cb:a3:fb:92:
1e:4e:4c:8c:c2:eb:7a:c7:41:fd:78:b0:f5:ad:55:db:fb:24:
ff:a9:e8:8b:4b:7e:d8:3e:63:7c:1d:e7:d3:be:56:b1:9e:8d:
5d:3d:42:18:fa:43:92:66:d2:0d:8e:a8:27:2c:38:c5:7c:55:
28:1e:d8:8a:9d:c6:ca:e5:46:6e:bf:6c:66:8f:f0:17:08:4b:
58:a6:60:09:f1:e2:23:43:54:52:24:a1:68:90:b8:3c:7a:9f:
80:aa:12:45:57:d8:a8:b2:c6:f6:10:58:d0:18:73:ff:ff:92:
25:26:6f:3a:c7:36:91:b0:d6:45:d1:3a:77:3a:62:32:6c:62:
7e:57:73:e1:a9:9c:f6:12:ec:9f:a5:a7:a6:3d:14:69:01:c7:
0e:d8:5b:f2:78:ea:55:dc:a9:15:21:dd:fa:4d:8e:de:f2:e5:
37:9d:89:87:d8:77:10:d4:e9:93:eb:de:d3:ad:6f:7b:43:90:
e6:72:24:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:18 2024 by rpki-client on console-ams.rpki-client.org