Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/xcSjNTIfvED_d8Ham7Cv-hL5_SQ.roa
File: xcSjNTIfvED_d8Ham7Cv-hL5_SQ.roa (raw, json)
Hash identifier: dw0LuCBEWk9fuVK0N7fJloEFHyKgLIFZgNxnoBSdM60=
Subject key identifier: C5:C4:A3:35:32:1F:BC:40:FF:77:C1:DA:9B:B0:AF:FA:12:F9:FD:24
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 03DA5AC4
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/xcSjNTIfvED_d8Ham7Cv-hL5_SQ.roa
Signing time: Wed 20 Apr 2022 09:10:01 +0000
ROA not before: Wed 20 Apr 2022 09:10:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6282
IP address blocks: 91.236.90.0/23 maxlen: 23
176.113.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64641732 (0x3da5ac4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Apr 20 09:10:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5c4a335321fbc40ff77c1da9bb0affa12f9fd24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d6:eb:70:30:13:96:14:0c:22:bc:c5:29:b7:
2e:f0:89:ba:d1:77:63:61:c2:31:b4:c9:4e:b1:c6:
40:eb:79:b2:51:47:5c:86:ee:9a:c1:de:af:06:6c:
a3:16:95:b5:88:35:47:ac:3b:38:24:4d:67:16:02:
30:d2:6f:45:ec:2e:0a:4c:f0:05:43:fb:09:2e:23:
eb:11:fc:af:e8:23:f6:8e:d9:6d:7a:89:da:0e:78:
74:b2:2b:e3:0f:70:f8:b8:ff:2c:98:15:45:b4:cb:
84:97:27:3b:6a:23:b0:37:70:15:4a:94:7f:69:21:
35:78:e6:a7:b5:c9:07:f6:28:79:fa:56:7b:33:06:
c0:01:52:d5:3d:55:b8:92:98:75:ff:9d:49:c9:97:
e9:96:ea:b7:fe:07:23:76:fc:78:dd:f4:50:14:bb:
bc:5f:0d:11:fe:80:c1:30:de:9a:86:b7:c3:df:41:
87:10:5a:56:bb:2f:bc:7b:8c:89:47:63:79:2d:63:
11:1e:00:43:15:f8:5b:52:3d:3a:15:4d:b9:5c:f9:
d6:c2:b0:e3:2f:0c:34:62:b9:e6:79:73:fa:e6:76:
b8:84:d6:f2:ae:07:24:ef:cf:c2:e6:34:38:7b:2e:
d5:1e:92:ca:32:3c:4f:70:ea:1c:68:3e:79:3b:1f:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C4:A3:35:32:1F:BC:40:FF:77:C1:DA:9B:B0:AF:FA:12:F9:FD:24
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/xcSjNTIfvED_d8Ham7Cv-hL5_SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.90.0/23
176.113.100.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:30:54:2b:53:7f:5a:15:9c:b9:e9:29:84:6c:c7:82:0e:4d:
44:47:f2:0e:eb:27:33:99:a2:6c:2b:be:ae:3f:36:ca:77:41:
04:a4:37:e2:ab:93:37:1c:cd:67:ad:e2:f7:ec:02:af:9d:1c:
bb:0b:f4:e4:71:fd:f5:9e:1e:fa:61:1b:9b:db:19:e6:0a:34:
3b:a2:e9:6a:bf:f7:ab:86:08:49:24:0a:3e:5b:4e:2e:ac:18:
29:41:a8:d3:ab:b2:f5:e9:de:e8:d7:6b:1e:bb:99:6b:4e:bc:
99:43:75:60:6d:81:f9:50:bb:31:7b:f4:d3:85:af:32:82:1e:
b4:84:cc:8b:0e:24:33:77:9b:8b:7f:c3:f2:39:2e:c2:ef:b4:
ba:0e:77:e0:67:93:66:16:97:a4:c7:d7:a3:84:e4:63:d8:f2:
54:8c:86:e0:59:ec:a1:4d:af:b2:2b:ba:13:5a:58:dc:37:35:
c3:9c:f3:a0:f1:19:fe:5c:95:d3:92:6f:ac:f7:b2:9d:1e:9b:
c7:c1:0d:a1:3f:42:ee:3d:6f:cb:97:0c:69:35:e3:bd:96:7a:
74:c9:e2:f8:3e:30:31:8a:3f:8d:86:ad:70:46:2b:c2:1a:48:
28:bb:54:0f:35:a0:66:9b:51:1b:e0:89:60:a1:26:33:7b:42:
db:00:ad:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:46 2024 by rpki-client on console-ams.rpki-client.org