Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/xb5TYE60RGecYX3WDQQfOG7Spho.roa
File: xb5TYE60RGecYX3WDQQfOG7Spho.roa (raw, json)
Hash identifier: NPbhVAzvM1TMMaaoZehntSOoXLbsSqoAHI756jksQDA=
Subject key identifier: C5:BE:53:60:4E:B4:44:67:9C:61:7D:D6:0D:04:1F:38:6E:D2:A6:1A
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 01889AC48AF766806574C12458F6CD418F7F
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/xb5TYE60RGecYX3WDQQfOG7Spho.roa
Signing time: Thu 08 Jun 2023 11:29:11 +0000
ROA not before: Thu 08 Jun 2023 11:29:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201909
IP address blocks: 91.219.16.0/24 maxlen: 24
91.236.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:c4:8a:f7:66:80:65:74:c1:24:58:f6:cd:41:8f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Jun 8 11:29:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5be53604eb444679c617dd60d041f386ed2a61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:19:04:8a:36:ce:e3:c7:8b:6f:6d:fa:93:3b:
d0:cf:c3:02:ad:9c:23:33:1b:4b:f4:db:93:31:f2:
1c:26:d3:63:98:6d:58:0f:40:e1:01:0a:22:e0:69:
9c:0f:a0:de:8e:9a:f4:d7:33:bf:d5:09:74:34:2c:
06:a8:74:f4:e0:f3:df:f0:78:da:34:6c:9c:90:72:
fb:13:36:56:cd:b7:fd:67:05:f7:31:f9:8e:c5:81:
5b:70:d6:8e:5c:55:17:7f:dc:8f:e6:b4:23:8e:47:
5d:47:06:81:0b:0a:1c:57:68:b5:b7:00:8c:9a:38:
14:9e:a4:b4:af:2e:1d:18:a4:2c:cf:97:de:cf:d2:
46:e1:a9:ff:1c:ab:eb:32:70:ba:fe:82:cd:49:5e:
2c:1a:29:aa:22:45:62:1e:a7:3a:0c:3c:66:57:64:
bd:e8:91:d1:dc:55:55:cf:10:b9:8a:c7:8a:00:bb:
bf:09:ca:49:71:8d:55:00:23:df:88:90:0d:ba:da:
c1:5f:02:dc:8a:8f:7d:3e:89:85:29:bc:96:76:40:
a5:46:57:f5:b2:5b:37:cb:92:61:d6:54:e2:3a:ae:
f0:c0:cc:ac:ad:36:74:58:d3:5b:3e:81:af:4d:a5:
80:57:8c:0e:a1:65:de:89:ea:64:ef:90:dd:8e:8a:
ca:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BE:53:60:4E:B4:44:67:9C:61:7D:D6:0D:04:1F:38:6E:D2:A6:1A
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/xb5TYE60RGecYX3WDQQfOG7Spho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.16.0/24
91.236.88.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:66:da:db:28:63:25:43:af:60:ef:b9:8c:99:0f:5e:ed:61:
c7:f2:9c:b1:39:9f:07:61:62:bd:a1:cd:c4:37:2e:9a:02:9a:
39:d4:76:ac:f0:5e:3a:17:f8:0a:59:ab:e6:b5:49:25:2b:43:
aa:43:ed:5f:b3:97:01:07:90:26:ca:46:ba:5a:f0:65:09:0d:
5b:ef:67:a3:8a:20:4d:4e:3d:ca:06:82:c0:8d:4e:a8:22:19:
5a:cf:e7:fe:a2:dc:e1:ec:c1:ce:35:d5:b5:0c:c7:4e:13:4d:
5e:23:4f:a0:74:78:df:cd:b4:ac:bd:eb:71:0e:a9:8f:b5:09:
fc:48:39:06:03:be:88:1b:b0:fc:62:de:25:2f:d9:9f:64:f0:
c8:b7:03:44:1a:36:22:38:e5:df:81:f4:78:52:1d:57:95:23:
4e:a3:ef:ec:68:53:04:cf:7d:9f:3d:39:8b:fb:5e:ee:9b:ce:
59:38:5c:53:90:75:5e:37:ba:44:a3:10:6a:2a:ae:ec:61:af:
30:c5:cc:0d:84:32:35:37:c7:e5:e0:73:66:eb:67:3b:d6:53:
57:c5:3c:1d:7d:78:53:6e:20:4c:6e:75:2b:ae:8d:23:c6:48:
94:12:8a:87:8f:8a:87:ab:86:59:e2:c4:94:db:4f:16:ea:94:
73:41:fc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 09:52:51 2023 by rpki-client on console-fra.rpki-client.org