Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/7da8e2-9d40-4204-b221-c083e32d9c07/1/xW_mQw5A0fsJ3mNOae5m26cqUZU.roa
File: xW_mQw5A0fsJ3mNOae5m26cqUZU.roa (raw, json)
Hash identifier: 2tjonVaAILis7xjviAdmZIcW56nUPHXzCEDY5zUk/dM=
Subject key identifier: C5:6F:E6:43:0E:40:D1:FB:09:DE:63:4E:69:EE:66:DB:A7:2A:51:95
Certificate issuer: /CN=c555e80533443d4eff1edf9899bb3f9c5b8a1bc3
Certificate serial: 01856FE70F96192206A3666256EB4FE1D492
Authority key identifier: C5:55:E8:05:33:44:3D:4E:FF:1E:DF:98:99:BB:3F:9C:5B:8A:1B:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVXoBTNEPU7_Ht-Ymbs_nFuKG8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/7da8e2-9d40-4204-b221-c083e32d9c07/1/xW_mQw5A0fsJ3mNOae5m26cqUZU.roa
Signing time: Mon 02 Jan 2023 00:34:51 +0000
ROA not before: Mon 02 Jan 2023 00:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210306
IP address blocks: 185.3.156.0/22 maxlen: 24
193.35.92.0/22 maxlen: 22
2a02:53c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:0f:96:19:22:06:a3:66:62:56:eb:4f:e1:d4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c555e80533443d4eff1edf9899bb3f9c5b8a1bc3
Validity
Not Before: Jan 2 00:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c56fe6430e40d1fb09de634e69ee66dba72a5195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:40:3c:21:28:f6:6e:92:84:c7:ce:64:c5:ac:
c4:dc:d7:69:ca:25:b9:ea:5d:ce:28:4b:14:9a:7a:
83:2b:de:56:2a:69:19:bd:77:0d:f5:ad:b5:aa:e3:
34:e2:6f:6d:30:ac:4c:15:c1:d3:84:25:a9:92:6b:
0b:57:cd:d7:d0:0f:8b:53:79:af:c0:06:2a:49:df:
f7:02:5c:26:ed:d0:a1:38:1d:95:c0:9b:53:f8:91:
2a:e3:de:8a:4b:07:3e:2a:17:47:d7:69:b8:5a:d4:
ef:ec:ef:30:71:01:8d:53:d2:ac:e2:3d:4d:4b:11:
2d:85:f9:83:6c:28:53:10:8e:b2:db:73:8c:96:49:
7a:19:d8:5d:91:f5:3e:25:01:70:a0:70:83:36:06:
17:76:ab:fb:24:cb:3d:d1:32:5b:3b:c1:c8:31:e9:
cf:13:93:1c:86:ac:3c:ad:52:cb:1d:58:87:06:88:
07:21:29:c0:ca:fd:37:ef:e9:81:f6:59:20:39:89:
ce:4c:7c:ec:77:f0:39:7d:93:f8:72:89:95:3d:99:
12:c9:8e:87:df:8f:4e:83:58:00:78:52:f9:f0:6d:
3e:c8:84:04:cb:83:4a:c7:42:d4:a4:37:34:33:ae:
7f:ed:03:47:75:54:2b:c7:53:f6:1c:9e:b2:87:4e:
8f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6F:E6:43:0E:40:D1:FB:09:DE:63:4E:69:EE:66:DB:A7:2A:51:95
X509v3 Authority Key Identifier:
keyid:C5:55:E8:05:33:44:3D:4E:FF:1E:DF:98:99:BB:3F:9C:5B:8A:1B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVXoBTNEPU7_Ht-Ymbs_nFuKG8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/7da8e2-9d40-4204-b221-c083e32d9c07/1/xW_mQw5A0fsJ3mNOae5m26cqUZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/7da8e2-9d40-4204-b221-c083e32d9c07/1/xVXoBTNEPU7_Ht-Ymbs_nFuKG8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.156.0/22
193.35.92.0/22
IPv6:
2a02:53c0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:53:cf:e4:7e:1d:2f:9f:df:e1:a9:a7:63:ef:f9:30:44:be:
f3:04:c7:72:52:20:59:5d:f9:b5:f3:6c:e0:9a:70:a9:92:a2:
40:4b:b0:24:60:ed:03:3e:14:d4:67:83:b8:e3:78:29:38:6b:
82:3a:5c:8e:78:d2:9b:cc:a8:da:1c:02:25:c8:d7:81:1b:17:
89:5c:9c:ce:d1:57:29:50:cc:c0:c8:5a:ef:0f:e2:35:ba:8f:
36:7c:db:4a:d0:36:89:01:b2:21:4b:fe:28:81:c5:db:32:f6:
8a:58:24:0e:d3:09:9c:8a:07:b6:c6:e7:ab:04:8b:a3:57:61:
e9:2b:dd:7c:bd:d4:a4:da:41:0a:16:30:66:23:fb:bb:09:b6:
f4:05:7c:aa:70:7e:04:16:8c:84:fc:e8:11:a4:0c:6e:c7:17:
89:0f:8b:7e:21:5c:ea:73:17:d7:12:5e:11:8b:48:db:00:a0:
58:18:48:9c:95:b1:d8:fa:92:ef:59:9a:8c:a2:05:42:fc:d6:
3f:85:53:f1:98:b0:39:76:ea:71:ba:42:8e:f0:85:c1:9c:d0:
d1:80:5c:03:77:e8:ad:e8:e4:7e:7d:32:d4:00:5d:0d:bd:71:
46:b6:b9:49:69:4c:31:b7:23:a2:f5:3e:a2:03:fa:46:24:dc:
1f:7b:e2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:45 2024 by rpki-client on console-fra.rpki-client.org