Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/45974d-fbde-47ca-acdc-e10c87ffed22/1/XYOnHOWtzBewziMa3J3Rc68Tdj8.roa
File: XYOnHOWtzBewziMa3J3Rc68Tdj8.roa (raw, json)
Hash identifier: s4cXlbo2i4Viggdhc5EE7IosN4ADMZR2foDyImiYs18=
Subject key identifier: 5D:83:A7:1C:E5:AD:CC:17:B0:CE:23:1A:DC:9D:D1:73:AF:13:76:3F
Certificate issuer: /CN=b07325f2e9aa9d8a2fefc411d7c7f34f86d84bd6
Certificate serial: 01438A3B
Authority key identifier: B0:73:25:F2:E9:AA:9D:8A:2F:EF:C4:11:D7:C7:F3:4F:86:D8:4B:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHMl8umqnYov78QR18fzT4bYS9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/45974d-fbde-47ca-acdc-e10c87ffed22/1/XYOnHOWtzBewziMa3J3Rc68Tdj8.roa
Signing time: Sat 01 Jan 2022 10:58:42 +0000
ROA not before: Sat 01 Jan 2022 10:58:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198380
IP address blocks: 185.211.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21203515 (0x1438a3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07325f2e9aa9d8a2fefc411d7c7f34f86d84bd6
Validity
Not Before: Jan 1 10:58:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d83a71ce5adcc17b0ce231adc9dd173af13763f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:03:39:05:28:52:df:b5:a9:b2:d2:28:d2:
0c:71:a7:d4:60:84:b1:0e:9e:d1:41:b3:2f:c0:8c:
84:ba:89:3e:61:b5:6f:0f:b4:25:80:2c:10:82:6f:
df:d6:45:b4:53:90:1d:f9:2b:ab:3e:32:b8:be:78:
40:b3:14:a3:cd:20:dd:b0:02:07:ec:4f:00:67:6d:
b3:6c:fc:51:a3:80:87:93:23:8c:7c:48:c1:16:f9:
79:cb:2a:f7:fa:05:8a:95:3a:c1:6f:fe:b2:d5:a3:
09:6d:f0:10:2a:6a:ab:25:8f:18:1a:75:f9:30:62:
b4:18:a5:94:9e:05:ad:30:6a:f5:93:1f:80:2d:7a:
77:24:05:f6:7b:37:02:c6:fc:a2:48:eb:a4:0e:0a:
46:85:47:85:4c:66:2f:51:f5:83:44:ff:df:52:9f:
2e:d7:2e:43:d5:79:9a:62:e7:1f:a0:5a:ce:25:e5:
d9:a4:75:ad:6a:67:6e:bc:da:14:dd:a4:e8:b6:76:
be:3a:f7:d8:b3:af:ab:21:39:19:76:18:14:4a:69:
78:3f:88:00:21:6c:f3:0d:61:4b:40:c6:ec:0e:17:
41:10:13:d3:9b:e0:2d:e5:f0:bd:38:e3:65:bb:14:
70:c9:f6:80:bd:8c:f5:4f:6a:8d:9f:9a:56:45:51:
9d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:83:A7:1C:E5:AD:CC:17:B0:CE:23:1A:DC:9D:D1:73:AF:13:76:3F
X509v3 Authority Key Identifier:
keyid:B0:73:25:F2:E9:AA:9D:8A:2F:EF:C4:11:D7:C7:F3:4F:86:D8:4B:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHMl8umqnYov78QR18fzT4bYS9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/45974d-fbde-47ca-acdc-e10c87ffed22/1/XYOnHOWtzBewziMa3J3Rc68Tdj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/45974d-fbde-47ca-acdc-e10c87ffed22/1/sHMl8umqnYov78QR18fzT4bYS9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.80.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:86:86:39:a8:e9:e3:ff:f6:eb:b6:f8:8f:3d:96:cd:3a:e0:
56:1f:87:b5:80:79:fe:76:07:47:d8:8d:4c:63:95:c1:15:0e:
0e:17:b4:e2:5c:9f:22:93:50:3a:93:dc:02:a3:22:f1:a7:8a:
09:9c:1d:4d:c6:e0:de:82:0f:6d:45:ad:c5:a4:81:e9:20:4e:
10:f6:be:8f:77:da:60:78:e2:37:e6:76:23:64:9e:3b:9c:43:
e8:63:a8:2a:2c:ea:9d:65:3b:36:60:a4:5b:70:09:fd:56:a1:
12:a1:b1:4c:27:cb:88:2f:89:4c:e6:7c:bb:93:17:bc:13:e3:
34:07:53:30:f6:1e:1e:e8:db:26:e1:fc:de:5a:b6:8a:d0:96:
e8:a8:0a:ef:e7:d0:c4:19:08:e1:85:f6:ec:05:02:1b:34:42:
ce:8e:08:1c:90:4c:22:92:e6:08:8b:a1:55:53:fb:d1:f8:63:
4f:52:65:4c:b5:9f:d7:53:d5:25:fd:19:7b:53:17:6e:30:de:
8a:5d:7e:41:31:79:45:7f:b6:cc:0f:3f:74:ff:34:2d:31:ec:
13:47:1e:ea:5f:63:60:0b:73:0a:90:39:c9:7d:86:ad:4a:c2:
9b:46:03:b3:b5:3c:3f:36:c9:9d:44:17:e2:23:6b:d7:66:e8:
12:e7:49:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:03 2024 by rpki-client on console-ams.rpki-client.org