Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e38fb5-cdb8-495e-9f00-c9e1631ecfc7/1/X_ZbGxe6dP_RxJAxdjA1VJr3hL0.roa
File: X_ZbGxe6dP_RxJAxdjA1VJr3hL0.roa (raw, json)
Hash identifier: UD2OTNzPSl4Qb47A0vFOsIB6Llf7vdzcP+WeZplXCss=
Subject key identifier: 5F:F6:5B:1B:17:BA:74:FF:D1:C4:90:31:76:30:35:54:9A:F7:84:BD
Certificate issuer: /CN=7d96def52b77773bf7219079b250b906617191f1
Certificate serial: 08054BAC
Authority key identifier: 7D:96:DE:F5:2B:77:77:3B:F7:21:90:79:B2:50:B9:06:61:71:91:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZbe9St3dzv3IZB5slC5BmFxkfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e38fb5-cdb8-495e-9f00-c9e1631ecfc7/1/X_ZbGxe6dP_RxJAxdjA1VJr3hL0.roa
Signing time: Sat 01 Jan 2022 10:59:45 +0000
ROA not before: Sat 01 Jan 2022 10:59:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200428
IP address blocks: 185.163.4.0/22 maxlen: 22
2a0a:5800::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134564780 (0x8054bac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d96def52b77773bf7219079b250b906617191f1
Validity
Not Before: Jan 1 10:59:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ff65b1b17ba74ffd1c49031763035549af784bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:3f:e0:36:4c:30:1b:75:67:70:0e:86:bd:
7e:3d:6a:1a:69:26:3d:1d:f2:c4:d8:9b:af:6b:aa:
7b:2c:3c:38:30:67:97:bb:08:e9:aa:4d:b7:53:b0:
fa:a1:b6:0e:5f:32:f4:c5:1a:17:99:42:33:5a:8e:
00:fd:80:a8:97:66:a0:b6:f7:62:e7:8d:18:8e:9b:
fc:ad:69:e9:e8:5f:e9:37:b6:f5:41:65:68:c2:42:
c9:81:72:31:8f:3b:85:70:46:dd:03:07:a0:f3:29:
db:c7:00:28:92:3d:00:e6:7f:b3:6e:18:9d:dc:40:
ab:7c:37:8f:43:36:c4:6a:47:52:9d:63:fe:24:60:
b0:8c:f1:d7:43:00:b6:88:1d:99:d4:07:2d:6a:a3:
35:6a:89:37:12:22:89:dc:92:a5:d7:4e:6d:ab:4a:
fd:5d:3a:9e:43:f1:1b:a4:a8:5f:49:c7:2a:5f:52:
5f:06:02:54:69:87:b2:11:83:61:73:a7:a5:ba:ad:
eb:8f:46:ac:21:34:d2:a3:e5:57:e6:dc:37:bb:67:
93:14:c5:a2:e0:61:5e:35:fe:44:1b:11:86:cb:78:
6d:43:ac:d8:2e:c7:cb:e2:4e:64:95:7c:ed:92:0a:
8f:dc:22:2c:ce:0f:42:5e:b6:30:ae:4a:f4:cd:9d:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F6:5B:1B:17:BA:74:FF:D1:C4:90:31:76:30:35:54:9A:F7:84:BD
X509v3 Authority Key Identifier:
keyid:7D:96:DE:F5:2B:77:77:3B:F7:21:90:79:B2:50:B9:06:61:71:91:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZbe9St3dzv3IZB5slC5BmFxkfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e38fb5-cdb8-495e-9f00-c9e1631ecfc7/1/X_ZbGxe6dP_RxJAxdjA1VJr3hL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e38fb5-cdb8-495e-9f00-c9e1631ecfc7/1/fZbe9St3dzv3IZB5slC5BmFxkfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.4.0/22
IPv6:
2a0a:5800::/29
Signature Algorithm: sha256WithRSAEncryption
4b:28:f7:64:9b:a7:24:ad:82:bd:50:d9:71:ce:8b:6f:c7:2b:
9c:d9:e3:46:26:58:e6:c0:0d:7b:db:ce:49:86:63:1a:70:99:
d3:b7:71:b6:ea:b7:5a:85:8e:06:a4:9b:e0:2d:e7:12:37:67:
6e:d2:84:12:76:56:4c:17:41:6a:11:7b:ff:fa:67:25:13:67:
90:3f:4a:6d:d4:21:eb:c5:c2:27:e9:58:ef:05:6c:7e:c9:cb:
c5:da:b6:b5:d8:7c:62:b4:67:be:aa:fc:ff:33:66:be:9d:1a:
b3:51:e1:3f:61:d0:f3:77:43:14:e7:f1:db:f7:fa:04:50:5d:
19:fc:c6:fc:bc:76:f3:ff:1a:d7:7a:d4:87:7a:14:85:47:55:
c3:bf:7d:57:0d:3a:ef:94:96:34:69:04:38:8d:6d:ad:83:3a:
61:c3:12:dc:32:df:3e:70:57:89:05:30:d5:78:1f:d1:77:9b:
c7:c4:db:03:58:44:b5:b9:cb:f8:b0:09:25:fd:d8:2d:15:5c:
ee:27:59:19:37:26:5d:0e:05:55:21:19:07:56:56:5c:ec:55:
d1:59:c2:3a:cc:6d:e5:74:49:aa:1d:c1:27:b4:c0:f7:46:5c:
69:0d:a6:62:1d:5a:4c:3a:06:eb:a4:4b:2e:a6:a6:f1:c3:a5:
b2:19:ee:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:29 2024 by rpki-client on console-ams.rpki-client.org