Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/3b9739-743e-4d06-b9f8-8c08ae01958f/1/Xylz_GiWDfOXaYzLymsLC7f-m9M.roa
File: Xylz_GiWDfOXaYzLymsLC7f-m9M.roa (raw, json)
Hash identifier: XnR01dSeTaUdrgdD4EFfl6gWecVaNmRamK7s1jRBk7g=
Subject key identifier: 5F:29:73:FC:68:96:0D:F3:97:69:8C:CB:CA:6B:0B:0B:B7:FE:9B:D3
Certificate issuer: /CN=1f673bb3f20723633e6cf01c3fe98b0fa2d70796
Certificate serial: B7EE97
Authority key identifier: 1F:67:3B:B3:F2:07:23:63:3E:6C:F0:1C:3F:E9:8B:0F:A2:D7:07:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2c7s_IHI2M-bPAcP-mLD6LXB5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/3b9739-743e-4d06-b9f8-8c08ae01958f/1/Xylz_GiWDfOXaYzLymsLC7f-m9M.roa
Signing time: Sat 01 Jan 2022 06:57:20 +0000
ROA not before: Sat 01 Jan 2022 06:57:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 62.233.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12054167 (0xb7ee97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f673bb3f20723633e6cf01c3fe98b0fa2d70796
Validity
Not Before: Jan 1 06:57:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f2973fc68960df397698ccbca6b0b0bb7fe9bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:85:63:ee:35:ca:1d:f2:50:e3:da:10:96:
0f:97:52:8f:06:ff:1d:14:b8:9e:e9:92:3d:63:12:
b8:96:42:bf:c5:9a:a4:1b:e4:ef:32:49:ae:29:40:
1e:61:cf:f6:58:e9:47:22:72:96:a1:06:83:77:47:
6f:92:43:d6:b1:46:99:ab:77:ff:94:2e:95:23:b5:
8d:05:77:87:d3:fd:38:e2:c9:4a:cb:67:31:ab:be:
21:78:32:86:78:4c:4b:9d:59:94:0d:30:63:ff:23:
06:7d:f7:dc:61:88:6c:56:d7:a4:96:ce:cf:37:63:
9b:1f:a9:e3:2a:93:2b:bc:db:60:fc:e6:ca:1a:cf:
59:79:a8:bc:93:71:8d:4f:14:7e:9a:9c:14:d4:fb:
ea:6e:5c:52:4d:04:55:41:dc:eb:e8:21:f4:46:88:
2e:1d:41:9e:41:cb:d2:90:ec:26:ae:75:24:c1:59:
fd:49:94:96:b8:22:bc:76:ec:11:d4:83:73:f8:ed:
b1:15:0e:26:00:e5:e0:24:f3:bc:3c:16:67:96:88:
94:0c:77:de:fb:6b:bb:d2:89:81:f9:b2:3b:9e:e2:
9d:99:5b:79:34:a7:1b:e3:9e:31:fd:5c:ee:30:2d:
0c:8e:b9:9b:35:9f:ff:dd:a5:3a:32:d4:9b:6c:93:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:29:73:FC:68:96:0D:F3:97:69:8C:CB:CA:6B:0B:0B:B7:FE:9B:D3
X509v3 Authority Key Identifier:
keyid:1F:67:3B:B3:F2:07:23:63:3E:6C:F0:1C:3F:E9:8B:0F:A2:D7:07:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2c7s_IHI2M-bPAcP-mLD6LXB5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/3b9739-743e-4d06-b9f8-8c08ae01958f/1/Xylz_GiWDfOXaYzLymsLC7f-m9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/3b9739-743e-4d06-b9f8-8c08ae01958f/1/H2c7s_IHI2M-bPAcP-mLD6LXB5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f2:09:06:65:17:b9:35:60:34:0f:f7:94:89:40:bb:89:b3:
94:79:ef:e8:08:d6:84:09:7a:5b:73:61:44:d6:3b:b9:a3:63:
db:14:a1:76:f9:45:15:03:93:97:cb:38:e6:55:40:5a:b9:9f:
1f:f1:a1:9a:a5:31:70:95:56:23:88:68:6b:dd:c2:55:24:8e:
ef:fd:e9:c6:02:18:64:7a:84:32:d9:d9:5b:84:91:2b:ad:70:
97:97:67:3b:73:0c:c8:3d:85:aa:9b:da:4c:5a:ba:ab:12:a0:
be:ba:67:bd:0c:7c:1c:b9:bd:44:11:00:a7:f5:c0:5a:61:41:
7c:b2:e1:84:ad:e2:97:53:0b:53:ae:68:4d:42:37:b6:b7:eb:
ab:02:85:f0:62:ec:8d:72:23:dc:dd:ef:a3:f5:23:cc:49:23:
9f:3a:67:17:5c:39:ce:7c:f1:da:a7:6f:cc:e9:72:96:a0:61:
4b:16:d6:25:a8:e9:64:cc:2c:74:59:f1:88:0b:6a:0c:a4:70:
1e:3d:cb:2d:a4:3e:2e:27:74:1a:57:23:9e:2a:7b:14:15:fc:
5b:f7:ac:31:92:f6:10:81:6e:ed:b8:f9:a1:b1:bd:b3:ed:c3:
bf:2b:08:ee:2a:ff:95:1a:de:57:1f:52:6e:d7:8d:a7:9a:91:
0b:27:37:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:57 2024 by rpki-client on console-fra.rpki-client.org