Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/Xmaw_gCy-g2uGVFJesGARIfEbfY.roa
File: Xmaw_gCy-g2uGVFJesGARIfEbfY.roa (raw, json)
Hash identifier: 3qIEFGvQj5Z1E6h1If3lC9ZMS+ZuZrqcPhSE4SoylQI=
Subject key identifier: 5E:66:B0:FE:00:B2:FA:0D:AE:19:51:49:7A:C1:80:44:87:C4:6D:F6
Certificate issuer: /CN=f76409e8bc85d7f259326537a9f10c3b1757387f
Certificate serial: 02B62EA5
Authority key identifier: F7:64:09:E8:BC:85:D7:F2:59:32:65:37:A9:F1:0C:3B:17:57:38:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92QJ6LyF1_JZMmU3qfEMOxdXOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/Xmaw_gCy-g2uGVFJesGARIfEbfY.roa
Signing time: Sat 01 Jan 2022 04:58:13 +0000
ROA not before: Sat 01 Jan 2022 04:58:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42487
IP address blocks: 185.55.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45493925 (0x2b62ea5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76409e8bc85d7f259326537a9f10c3b1757387f
Validity
Not Before: Jan 1 04:58:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e66b0fe00b2fa0dae1951497ac1804487c46df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9c:67:f2:15:ea:9a:a6:64:fa:c7:7b:84:c9:
1d:03:d1:44:c2:0e:eb:2c:38:bd:03:c4:26:13:89:
68:70:27:c5:05:73:52:67:11:45:29:02:6f:af:83:
18:e4:9e:f4:cc:3d:44:3e:a2:1e:6a:98:08:57:6a:
43:f1:6f:d3:b9:e0:a6:da:9d:ef:86:e1:b4:86:f9:
88:e0:6d:ac:57:68:49:7b:da:06:f8:4f:cf:c1:24:
46:68:50:bc:01:b0:69:ef:52:ec:20:21:af:40:70:
5f:bb:88:c1:5b:20:07:2e:83:05:88:dc:d3:0d:4e:
5d:b6:9b:dc:03:ae:e7:ab:fe:48:cf:ee:52:ab:10:
a3:82:01:63:59:16:aa:51:8c:d2:c3:cd:4a:30:e2:
e7:4b:cb:e0:8f:84:eb:34:34:0b:e4:e6:b1:7a:0d:
7e:0a:08:f1:5a:69:0d:6a:a0:5c:ab:9c:17:2f:0b:
b7:91:81:ed:15:2f:44:1c:ad:bf:8d:23:2b:aa:48:
57:51:f4:ed:05:aa:d1:a9:28:e4:0a:e4:73:a3:9a:
97:de:50:63:ea:ca:a6:1b:f1:d4:82:f6:43:70:df:
a3:3b:15:67:ef:1c:4c:18:68:f1:7e:2c:d5:b5:43:
ce:e3:71:cf:2d:d6:b1:95:03:13:af:36:5e:e2:16:
ce:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:66:B0:FE:00:B2:FA:0D:AE:19:51:49:7A:C1:80:44:87:C4:6D:F6
X509v3 Authority Key Identifier:
keyid:F7:64:09:E8:BC:85:D7:F2:59:32:65:37:A9:F1:0C:3B:17:57:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92QJ6LyF1_JZMmU3qfEMOxdXOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/Xmaw_gCy-g2uGVFJesGARIfEbfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/92QJ6LyF1_JZMmU3qfEMOxdXOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.244.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:68:0d:b1:4f:06:86:e0:6b:67:c7:60:ba:ce:c2:3e:59:31:
ea:27:e7:0c:3b:23:43:d3:be:67:e1:95:51:b8:e6:fe:f0:f4:
8f:8f:83:db:12:13:1f:92:97:ec:5b:87:32:10:41:20:2e:b7:
bc:e2:55:3d:2e:ad:22:64:14:c0:9d:f1:37:bc:c7:2f:b5:d0:
a8:93:2b:80:28:e0:1b:9e:95:f3:94:c6:0c:c6:a9:d2:08:8f:
7d:e4:5b:6f:95:95:1c:87:36:1e:30:f8:2b:63:4c:ad:f3:d4:
fe:ff:02:dc:7a:76:74:f2:29:b7:fb:0e:09:cb:d0:4b:4f:13:
bb:4d:5a:b3:e9:1c:29:1e:7e:e0:9f:4c:71:d3:b4:55:1d:0b:
e8:e5:d9:a5:5f:4b:31:02:75:65:ba:a6:b4:4c:9b:77:5e:77:
99:1c:e4:09:19:96:e5:65:53:8d:12:98:95:f2:cc:2a:f8:60:
50:b5:32:12:c8:53:fe:ec:9d:01:9a:93:f0:f9:03:21:7f:e7:
1b:55:12:8d:1b:77:79:2f:12:34:73:73:f4:e4:a2:60:f4:c7:
41:9a:73:3e:64:59:b3:3b:c9:e2:3d:ef:d9:f8:dc:48:23:b6:
37:f7:7e:95:70:12:d9:06:d2:f2:ec:80:9e:32:32:e7:aa:5e:
51:20:f9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:14 2024 by rpki-client on console-ams.rpki-client.org