Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/54ef68-c373-4322-aea8-eee9e65ebdff/1/xs-WmTHpbl39LriL_LowvGkLPW0.roa
File: xs-WmTHpbl39LriL_LowvGkLPW0.roa (raw, json)
Hash identifier: HLW6PZRLzGp4xHUdvWykZDngrK8ye7kCVgWK71MMHI8=
Subject key identifier: C6:CF:96:99:31:E9:6E:5D:FD:2E:B8:8B:FC:BA:30:BC:69:0B:3D:6D
Certificate issuer: /CN=b5ad5165d440bf08f2aa9069d036ad7f9489cfce
Certificate serial: 01635B4D
Authority key identifier: B5:AD:51:65:D4:40:BF:08:F2:AA:90:69:D0:36:AD:7F:94:89:CF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta1RZdRAvwjyqpBp0Datf5SJz84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/54ef68-c373-4322-aea8-eee9e65ebdff/1/xs-WmTHpbl39LriL_LowvGkLPW0.roa
Signing time: Sat 01 Jan 2022 09:01:24 +0000
ROA not before: Sat 01 Jan 2022 09:01:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201601
IP address blocks: 213.232.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23288653 (0x1635b4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ad5165d440bf08f2aa9069d036ad7f9489cfce
Validity
Not Before: Jan 1 09:01:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6cf969931e96e5dfd2eb88bfcba30bc690b3d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e8:60:df:ae:ac:e0:7e:52:6e:3d:31:fd:3e:
5a:b6:1a:76:ed:8c:b4:59:18:d7:2c:ab:a8:32:d2:
c9:05:66:6b:44:6e:7d:fa:21:2c:7e:2e:45:da:26:
25:d8:ce:9a:f6:90:9f:c7:50:af:19:55:85:72:7f:
23:7a:b4:ab:b2:b6:05:6b:ef:2d:1d:1f:07:f1:f9:
6a:ed:61:f3:47:7b:f6:8f:2e:a1:ef:38:e4:28:34:
6a:47:fe:54:11:59:1c:68:6e:17:62:50:20:9d:d4:
99:a3:f2:28:50:fc:ad:1c:25:74:0b:61:3e:9c:7c:
3a:d5:ba:c8:4e:cc:ee:0d:b0:eb:0e:35:3c:b6:e4:
eb:26:4a:46:56:e4:b4:e9:4c:76:3f:cc:9a:1f:66:
77:28:71:c3:81:81:ca:dd:54:29:d0:78:7e:4c:38:
54:0b:6e:40:07:59:9b:e0:3e:05:ba:33:60:71:a6:
ae:eb:78:c1:6a:40:71:10:d0:54:7f:2c:f2:dc:e8:
cd:1e:39:15:57:04:fe:ad:09:e0:1c:6d:0a:59:9b:
97:f6:e3:23:db:dd:13:4b:d3:bf:c5:5e:7f:7e:dd:
dc:9b:80:a5:81:b4:1c:d8:cd:51:dc:e7:03:48:4d:
45:82:63:d2:cb:d4:46:4d:c8:ab:16:8c:0c:5b:83:
de:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CF:96:99:31:E9:6E:5D:FD:2E:B8:8B:FC:BA:30:BC:69:0B:3D:6D
X509v3 Authority Key Identifier:
keyid:B5:AD:51:65:D4:40:BF:08:F2:AA:90:69:D0:36:AD:7F:94:89:CF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta1RZdRAvwjyqpBp0Datf5SJz84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/54ef68-c373-4322-aea8-eee9e65ebdff/1/xs-WmTHpbl39LriL_LowvGkLPW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/54ef68-c373-4322-aea8-eee9e65ebdff/1/ta1RZdRAvwjyqpBp0Datf5SJz84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.254.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6f:ca:12:e9:f8:cb:9d:6d:62:79:97:7b:37:10:a2:a6:69:
f8:49:0e:85:84:4b:7c:8e:ad:f9:6c:d7:06:9d:b3:d2:2c:76:
9a:5b:11:fa:e6:2d:85:65:63:18:00:5f:06:b6:77:70:b6:88:
0f:3c:4f:9f:da:d9:9f:34:44:8f:f1:b9:c9:fd:f8:23:36:38:
04:1c:2b:07:81:e1:fc:6a:1d:92:fd:01:3b:31:79:ec:1b:97:
27:08:8d:b4:e8:e2:1b:83:15:2b:6e:fa:2f:c6:96:04:bd:b4:
f2:cd:00:77:63:54:91:51:c3:27:77:71:75:4a:cb:02:29:db:
d2:80:9a:53:85:11:7b:ba:35:26:e3:07:39:c3:f3:be:b3:49:
87:01:a7:6b:cb:27:90:97:c9:97:c2:4e:88:b3:3f:d7:a9:72:
00:8e:b8:49:92:29:4d:b1:39:9e:c3:96:17:3c:fe:33:de:40:
1f:a1:b5:5f:a1:cb:0d:21:c3:0c:0d:77:1c:11:6e:b4:3d:f4:
46:28:04:04:5d:1d:40:65:74:68:4e:34:8f:3c:83:79:51:eb:
b7:55:ea:6a:18:de:db:36:44:63:29:cb:95:be:d4:04:b8:82:
f1:f9:65:c6:4d:23:e7:94:f2:be:6c:55:6c:8f:ee:73:6a:bc:
b2:10:d1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:04 2024 by rpki-client on console-ams.rpki-client.org