Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9eaed-0033-4f6e-859e-f96df302068e/1/xe2UiKLGz3a2W_apE_FGVqoeXBY.roa
File: xe2UiKLGz3a2W_apE_FGVqoeXBY.roa (raw, json)
Hash identifier: 43gon4GXKGp6lMQV18ZyaxLgHoWkll7a6HSDH0MJCs4=
Subject key identifier: C5:ED:94:88:A2:C6:CF:76:B6:5B:F6:A9:13:F1:46:56:AA:1E:5C:16
Certificate issuer: /CN=78bfd78c4595f65c47161df2578aff8f71b74243
Certificate serial: 09571112
Authority key identifier: 78:BF:D7:8C:45:95:F6:5C:47:16:1D:F2:57:8A:FF:8F:71:B7:42:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eL_XjEWV9lxHFh3yV4r_j3G3QkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9eaed-0033-4f6e-859e-f96df302068e/1/xe2UiKLGz3a2W_apE_FGVqoeXBY.roa
Signing time: Sat 01 Jan 2022 15:06:42 +0000
ROA not before: Sat 01 Jan 2022 15:06:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28954
IP address blocks: 194.127.130.0/23 maxlen: 23
80.86.64.0/20 maxlen: 20
194.127.152.0/23 maxlen: 23
2a0a:5a00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156700946 (0x9571112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78bfd78c4595f65c47161df2578aff8f71b74243
Validity
Not Before: Jan 1 15:06:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5ed9488a2c6cf76b65bf6a913f14656aa1e5c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0f:56:02:0c:d5:40:f7:ba:9c:d1:dd:96:39:
23:33:25:ca:68:8c:fb:fd:44:81:32:49:40:28:4d:
c2:8f:32:6b:57:79:ff:aa:a2:e7:c7:20:b0:f8:13:
12:52:9d:44:3d:91:76:18:5d:49:d0:01:08:ee:0a:
0e:7d:e5:91:b3:f9:92:bf:a9:20:2a:48:e7:9e:6f:
fc:6b:76:de:36:9d:47:9b:1c:db:1b:30:ee:a1:ed:
1a:28:f6:92:cf:97:6e:06:1e:7f:84:14:7e:69:ce:
2e:74:39:f7:84:4c:42:b6:e7:95:ae:31:7a:80:63:
1f:7b:bf:83:cd:93:07:ae:39:d8:b3:55:c3:58:98:
1a:a3:7e:f3:3d:5b:0c:14:c9:e0:b1:96:8a:68:2e:
ec:16:92:2d:77:0e:26:8e:06:1a:2f:bb:83:d6:9b:
0f:b5:3d:f8:af:c3:fa:14:38:34:f7:0f:da:33:18:
17:c2:a8:d9:66:0f:39:55:62:fb:e5:81:53:73:5e:
08:49:9f:dc:73:03:fc:9f:93:23:4e:f8:2c:0f:d7:
ca:92:66:9c:e9:27:51:a8:ed:b0:2b:d2:c1:a2:03:
8c:6b:16:86:96:1b:7a:e8:00:3f:eb:60:c6:7d:6f:
28:72:9d:41:86:bb:83:a4:3c:48:42:25:47:13:7e:
9a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:ED:94:88:A2:C6:CF:76:B6:5B:F6:A9:13:F1:46:56:AA:1E:5C:16
X509v3 Authority Key Identifier:
keyid:78:BF:D7:8C:45:95:F6:5C:47:16:1D:F2:57:8A:FF:8F:71:B7:42:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eL_XjEWV9lxHFh3yV4r_j3G3QkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9eaed-0033-4f6e-859e-f96df302068e/1/xe2UiKLGz3a2W_apE_FGVqoeXBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9eaed-0033-4f6e-859e-f96df302068e/1/eL_XjEWV9lxHFh3yV4r_j3G3QkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.64.0/20
194.127.130.0/23
194.127.152.0/23
IPv6:
2a0a:5a00::/29
Signature Algorithm: sha256WithRSAEncryption
91:1f:b9:38:b7:db:dc:40:2b:6f:a9:f3:53:1a:90:ef:5f:fc:
29:ee:7d:a2:bd:fc:24:7f:42:30:ec:16:e3:ab:4c:0f:50:09:
87:d4:57:37:6b:61:5b:f9:9f:d7:89:ec:9a:69:ad:8c:93:c9:
7f:18:30:d3:25:d8:e1:a2:ef:88:54:cd:94:29:73:1c:63:b9:
b3:66:a2:93:b9:61:7e:ca:a1:e0:d3:3f:8c:38:c4:a6:61:bb:
c3:e0:82:ab:58:ba:97:74:45:0e:65:b5:ed:cd:5b:da:35:d5:
c7:f9:a6:5b:45:75:12:58:8e:6f:34:4e:0b:03:06:d7:e1:72:
e9:73:44:8a:57:4a:77:01:d8:ad:5e:67:4f:b1:a3:78:ca:85:
4e:88:9a:78:fe:d0:48:b8:5a:21:f5:70:d3:e7:de:1e:b9:da:
70:60:a9:3a:26:3c:00:4f:f8:1f:e4:49:c4:7c:d4:fb:b0:8d:
98:d9:4a:a3:aa:75:95:08:43:de:60:58:4d:c3:dd:6e:a0:f3:
e2:98:55:14:1f:b8:61:6d:20:10:cd:f6:51:e4:58:5a:8b:03:
78:46:aa:c0:87:37:d8:6f:80:81:a3:81:6f:7a:93:63:4c:b9:
57:92:25:e3:66:43:91:e5:c3:dc:e7:80:2d:93:9f:9f:1b:12:
fc:4c:bd:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:58 2024 by rpki-client on console-fra.rpki-client.org