Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/XInVJ_2DsYSp-cDEwiVdhRPh9mg.roa
File: XInVJ_2DsYSp-cDEwiVdhRPh9mg.roa (raw, json)
Hash identifier: bQwW1HkOj7cJB/H02duNv6DdtXuX70Ocq+ux20+WovU=
Subject key identifier: 5C:89:D5:27:FD:83:B1:84:A9:F9:C0:C4:C2:25:5D:85:13:E1:F6:68
Certificate issuer: /CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Certificate serial: 01856FC29C644EC07C1DDCC00AA746E21B1B
Authority key identifier: 8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/XInVJ_2DsYSp-cDEwiVdhRPh9mg.roa
Signing time: Sun 01 Jan 2023 23:55:02 +0000
ROA not before: Sun 01 Jan 2023 23:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50061
IP address blocks: 212.90.104.0/22 maxlen: 24
91.151.24.0/21 maxlen: 24
195.234.12.0/23 maxlen: 24
2a01:6bc0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:9c:64:4e:c0:7c:1d:dc:c0:0a:a7:46:e2:1b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Validity
Not Before: Jan 1 23:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c89d527fd83b184a9f9c0c4c2255d8513e1f668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3d:16:7e:91:ac:8e:de:8f:ce:39:94:5b:a8:
c7:0a:40:8e:be:e3:94:a2:51:5f:d8:b2:cf:d8:a5:
63:38:c7:83:6f:d1:57:e2:fc:d2:0e:e8:6f:69:22:
e4:61:29:d5:c3:32:9c:d3:fe:e3:72:81:53:4f:2e:
18:9c:18:81:7a:ed:ba:c2:05:07:06:3d:d0:a0:ab:
c5:ce:03:9c:8a:0b:03:44:21:85:c4:a6:7b:38:95:
a7:a8:0a:8d:d0:68:2f:43:37:fd:e8:49:ee:9c:42:
03:27:90:27:72:0a:1b:c6:b3:aa:8a:79:00:2a:14:
34:1a:9a:14:07:85:8c:38:4f:54:b3:5f:98:99:9d:
b5:b2:bf:8e:7c:39:cd:18:63:a5:36:d9:f4:39:b3:
eb:f9:89:a1:a6:63:c8:6a:6f:90:09:c5:ca:71:99:
96:73:32:2e:46:ad:1c:fd:29:a2:ad:2a:0b:e4:a9:
92:a3:a8:d7:32:7d:e6:fb:7b:70:eb:db:22:a1:34:
b6:6c:5b:66:bf:d0:e5:8c:80:fe:f3:3b:7c:6e:36:
1b:10:13:38:44:0d:e8:96:69:31:c8:dc:68:86:a1:
cc:45:53:b6:a7:f0:40:33:63:db:49:67:fb:fa:55:
17:57:cf:dd:27:fc:c6:ef:a1:89:24:ea:47:07:92:
00:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:89:D5:27:FD:83:B1:84:A9:F9:C0:C4:C2:25:5D:85:13:E1:F6:68
X509v3 Authority Key Identifier:
keyid:8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/XInVJ_2DsYSp-cDEwiVdhRPh9mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.24.0/21
195.234.12.0/23
212.90.104.0/22
IPv6:
2a01:6bc0::/32
Signature Algorithm: sha256WithRSAEncryption
81:72:0a:05:82:d7:27:6b:08:18:61:54:7f:68:d2:25:10:25:
47:83:6e:6d:7c:e9:bf:82:05:3c:65:de:97:6a:f1:6e:16:91:
bf:73:73:1f:8c:8e:58:57:d7:63:d4:b9:0e:b2:69:ea:43:ed:
67:fa:33:13:6c:ea:b2:09:ab:80:2a:cf:43:d9:27:5a:4e:f0:
bb:00:19:3f:e7:8f:a2:52:ef:cf:e7:63:7d:4a:78:87:58:df:
83:86:4f:e5:2e:40:d5:87:28:1d:81:67:2e:4e:02:38:34:ba:
10:f4:e1:14:c1:0d:de:34:40:97:56:88:5d:29:5a:b1:56:8f:
97:a5:25:38:3c:9c:42:88:ff:12:f4:a2:5d:a1:2f:33:96:9d:
68:1d:12:37:29:76:e4:70:a1:01:9d:0b:77:7a:01:b0:fb:71:
45:04:b4:86:8c:b6:ed:d6:79:01:10:be:d5:b2:fb:65:e4:17:
a6:3e:0c:2d:cf:a8:31:ee:24:a2:cb:3a:86:42:af:01:f3:0c:
a2:2b:e9:dc:ef:3d:19:cb:6c:da:b7:70:47:43:92:0f:fc:3c:
72:95:07:0c:6a:42:3c:2f:31:d5:d6:83:45:38:b1:53:8c:a0:
9b:f1:4e:61:e8:0d:44:1d:94:49:3d:b2:ef:91:16:28:f9:06:
fc:62:99:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:17 2025 by rpki-client