Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/0X4WLxCbOxTr0vi2JXA5GSIkPO4.roa
File: 0X4WLxCbOxTr0vi2JXA5GSIkPO4.roa (raw, json)
Hash identifier: C9ReVM1mVyXB+qajfVvkmmdQmd5VZKPx7qx4vBDVw2s=
Subject key identifier: D1:7E:16:2F:10:9B:3B:14:EB:D2:F8:B6:25:70:39:19:22:24:3C:EE
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 054CC938
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/0X4WLxCbOxTr0vi2JXA5GSIkPO4.roa
Signing time: Wed 06 Apr 2022 11:33:52 +0000
ROA not before: Wed 06 Apr 2022 11:33:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 185.93.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88918328 (0x54cc938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Apr 6 11:33:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d17e162f109b3b14ebd2f8b62570391922243cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:c6:a2:2e:b1:e5:9e:54:16:de:5b:2e:88:
37:f0:9f:00:43:57:86:3a:83:e5:0c:9d:01:ee:3c:
3b:a7:fc:79:69:e9:3a:39:bf:ff:01:86:2f:5b:34:
b2:c7:e2:c9:16:55:b6:1a:cf:8f:96:12:61:5c:97:
62:4c:e3:d1:62:8f:c9:c3:7c:9b:c2:4a:0f:02:60:
5b:80:87:df:3f:e1:be:77:6e:46:53:c2:ac:37:23:
b1:98:6a:2c:0d:b4:f5:70:c2:9a:ae:61:25:b2:b7:
1c:23:42:93:3a:1d:2a:8c:90:f2:ba:05:4f:dc:33:
2b:33:cf:ac:f4:9e:bb:19:41:2f:44:d8:86:b6:c1:
8b:54:62:2c:61:81:4b:4f:7c:5b:6b:cf:9c:31:5c:
c7:6e:dc:e5:91:27:c4:39:60:0b:ee:55:db:35:bd:
dc:30:0c:b6:87:dc:c3:8c:f3:13:b2:56:3e:5a:7e:
11:06:12:81:53:0a:1f:60:b7:74:d2:f2:31:ab:4d:
5a:25:b9:d8:d8:a8:85:3f:f5:4c:ae:9c:5f:74:b5:
fc:40:51:0b:cb:9a:d6:db:44:94:74:0c:62:db:b9:
23:70:b8:fe:86:cb:c1:2f:84:87:4c:40:b9:fe:51:
2b:9e:6e:7a:a8:0a:c9:18:d2:e4:3a:ac:d4:d2:34:
ad:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7E:16:2F:10:9B:3B:14:EB:D2:F8:B6:25:70:39:19:22:24:3C:EE
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/0X4WLxCbOxTr0vi2JXA5GSIkPO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.35.0/24
Signature Algorithm: sha256WithRSAEncryption
79:41:17:78:aa:82:cd:6a:30:66:c5:65:c6:9e:17:e2:5d:78:
ea:ba:34:13:b8:90:e1:46:c9:54:37:82:b2:e1:49:93:2a:0a:
5e:e8:d2:d2:ec:ba:f2:56:c2:74:23:d6:f5:1e:5c:78:84:0b:
fe:b5:d6:cd:d3:0d:31:b4:73:9b:8e:6e:01:64:d6:62:14:80:
ab:96:10:b5:c6:b4:d5:69:d9:a5:17:15:56:c5:5a:e4:50:da:
1f:96:59:d8:4f:92:d1:44:d8:04:e5:d4:4d:33:0a:66:8d:8f:
d6:a3:0a:3d:be:3a:ee:8c:0d:8a:ec:4e:76:eb:2c:0b:f8:2b:
da:38:96:dc:ad:df:e5:a0:a2:33:d9:79:6b:13:ec:f6:eb:d2:
1b:f8:a4:4d:1d:05:a6:e3:6a:6f:3d:70:f1:ef:76:2f:01:e1:
07:54:48:0c:bb:de:a8:46:2b:a4:3e:6c:aa:bc:4b:26:b1:93:
00:61:ce:e8:4c:e7:3b:21:12:56:f1:3d:b5:1f:67:49:f5:6c:
61:99:49:8d:1d:14:63:d6:96:9c:51:4b:85:fb:02:3d:bc:d3:
fb:c6:fc:c7:ff:b7:f6:dc:99:5a:a4:81:c0:8f:df:cd:83:16:
a7:f6:44:ef:f4:3d:92:8a:5a:99:45:1a:cc:48:c0:82:e1:45:
bc:b1:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org