Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ab38bf-14b8-4170-830b-16958dd66802/1/xjs-MRyVqu5GrAr5ntzO5m4F49M.roa
File: xjs-MRyVqu5GrAr5ntzO5m4F49M.roa (raw, json)
Hash identifier: MOTECpJdAAjLwyMusx437TW8l8wJlZpx3TLXXyW8iYQ=
Subject key identifier: C6:3B:3E:31:1C:95:AA:EE:46:AC:0A:F9:9E:DC:CE:E6:6E:05:E3:D3
Certificate issuer: /CN=98de16b5d2a3ed24e3215d026700181a184d9dbb
Certificate serial: 2CACA3
Authority key identifier: 98:DE:16:B5:D2:A3:ED:24:E3:21:5D:02:67:00:18:1A:18:4D:9D:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mN4WtdKj7STjIV0CZwAYGhhNnbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ab38bf-14b8-4170-830b-16958dd66802/1/xjs-MRyVqu5GrAr5ntzO5m4F49M.roa
Signing time: Sat 01 Jan 2022 01:00:37 +0000
ROA not before: Sat 01 Jan 2022 01:00:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211808
IP address blocks: 185.237.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2927779 (0x2caca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98de16b5d2a3ed24e3215d026700181a184d9dbb
Validity
Not Before: Jan 1 01:00:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c63b3e311c95aaee46ac0af99edccee66e05e3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:a0:4a:5b:f8:1a:1e:f3:2f:3d:04:ef:10:
30:12:4b:07:52:10:4d:f4:0f:c3:bb:b8:bd:5e:ae:
ba:ab:a8:51:e5:e0:4b:7c:dc:a5:c1:fc:d0:d2:d8:
94:0c:64:f1:c6:f1:f3:1f:a6:fc:9c:d8:e1:8f:ae:
fb:69:60:c5:a9:20:f4:f1:73:8a:73:6f:a1:b8:dc:
98:2a:21:32:ef:af:17:e8:20:ea:25:53:65:c6:9d:
f2:dc:41:33:03:49:85:7d:27:07:ff:b1:79:0a:7e:
b2:b0:12:e3:67:a4:6f:d4:1b:d2:ff:a1:7c:c9:18:
ac:81:54:b3:3d:7c:e9:d2:89:60:c5:d4:aa:81:73:
2d:0c:48:79:e3:15:71:21:ef:1b:41:ea:65:48:7b:
f8:e5:ce:a9:9a:6c:62:cb:ad:63:b4:6a:99:4c:27:
52:4e:23:ff:04:e8:65:df:b1:cf:45:ab:42:71:94:
15:91:fe:57:fd:ab:2e:c1:35:2f:97:9c:6e:99:2e:
e3:2c:a0:e9:f7:f5:ce:54:07:91:ae:df:91:ec:e0:
7b:58:1e:3f:5b:eb:2b:75:0e:b7:ef:16:80:5f:2d:
4c:07:03:6a:06:f3:19:c6:7e:2d:22:41:61:d3:c5:
02:d3:92:35:fa:30:a6:ae:04:2a:2f:f6:79:0f:4b:
f1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3B:3E:31:1C:95:AA:EE:46:AC:0A:F9:9E:DC:CE:E6:6E:05:E3:D3
X509v3 Authority Key Identifier:
keyid:98:DE:16:B5:D2:A3:ED:24:E3:21:5D:02:67:00:18:1A:18:4D:9D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mN4WtdKj7STjIV0CZwAYGhhNnbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ab38bf-14b8-4170-830b-16958dd66802/1/xjs-MRyVqu5GrAr5ntzO5m4F49M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ab38bf-14b8-4170-830b-16958dd66802/1/mN4WtdKj7STjIV0CZwAYGhhNnbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.187.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:46:54:e3:9e:62:29:d9:b6:5a:9e:8e:34:98:ff:94:66:ea:
57:af:41:ff:44:b2:19:1d:81:81:a6:11:b4:9c:1d:44:0c:26:
79:7c:6d:43:41:6d:1f:77:15:a7:25:07:b1:a4:9d:6c:f3:ff:
a1:36:96:2c:0f:5a:24:40:31:02:fd:ac:8f:d5:1e:6a:b2:b0:
00:00:33:65:b5:af:b6:85:c5:85:27:22:a9:2c:25:d5:8a:43:
c4:d4:ad:e1:44:ae:84:d5:e3:9a:86:88:15:ec:9a:4a:6b:da:
f5:83:9d:da:50:06:63:58:03:cc:14:e3:12:3f:f2:80:5c:d5:
a0:dd:02:a1:8a:2a:43:88:1f:aa:6e:0c:ab:04:24:64:a4:3e:
92:9a:a2:06:c8:4b:a4:ab:99:33:3d:5a:89:9c:a0:a3:17:30:
c7:14:e5:17:c4:9f:4c:cb:b2:ad:20:7f:2f:17:7a:93:28:aa:
22:70:e7:d1:bd:26:ce:4d:d8:5a:a6:2a:34:09:02:a1:3e:65:
35:0b:20:02:24:1b:04:90:71:1f:71:b5:88:08:ac:1d:e7:a5:
56:d4:98:67:cf:54:91:1f:9e:37:dc:28:62:ee:aa:1e:4c:8f:
fe:f5:26:ed:45:05:37:ca:01:e0:d8:57:5b:ca:6b:0d:d3:e2:
c0:a5:30:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:03 2025 by rpki-client