Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/XAjF_S9cLVTG_Xwo4wxLOb_Fyes.roa
File: XAjF_S9cLVTG_Xwo4wxLOb_Fyes.roa (raw, json)
Hash identifier: sFK/r//zxVNTqKiT5UBYtJWizCgAWfjwNk0XqQpsyFk=
Subject key identifier: 5C:08:C5:FD:2F:5C:2D:54:C6:FD:7C:28:E3:0C:4B:39:BF:C5:C9:EB
Certificate issuer: /CN=03452c9dbfc9e4193c7e55e0d2016568d9465285
Certificate serial: 0187606BFAF8AF633D06BD07BED91F81E1A4
Authority key identifier: 03:45:2C:9D:BF:C9:E4:19:3C:7E:55:E0:D2:01:65:68:D9:46:52:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0Usnb_J5Bk8flXg0gFlaNlGUoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/XAjF_S9cLVTG_Xwo4wxLOb_Fyes.roa
Signing time: Sat 08 Apr 2023 10:31:41 +0000
ROA not before: Sat 08 Apr 2023 10:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 213.232.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:60:6b:fa:f8:af:63:3d:06:bd:07:be:d9:1f:81:e1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03452c9dbfc9e4193c7e55e0d2016568d9465285
Validity
Not Before: Apr 8 10:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c08c5fd2f5c2d54c6fd7c28e30c4b39bfc5c9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:27:a1:e8:fb:9e:ea:b2:7b:d0:ee:1e:09:f0:
10:0b:34:12:b3:ab:15:4c:8c:e3:24:ec:96:f5:23:
50:d2:5f:a0:91:f1:91:97:d1:54:33:a8:8b:e6:02:
80:95:88:91:c0:68:21:e3:d4:96:53:9a:b7:84:79:
97:f4:de:20:15:8a:12:99:e4:57:d1:0b:3b:26:30:
e0:33:02:0a:85:3a:31:a3:30:03:f3:86:e4:89:b5:
54:9a:43:42:82:aa:f5:e1:6d:5b:60:b0:b2:34:39:
db:a1:ef:36:ba:dc:ff:d5:fe:00:73:fb:9b:f3:2f:
ec:e7:33:ae:de:57:ec:61:de:07:13:c8:25:94:da:
a8:7f:8c:de:14:03:8e:d8:42:12:85:1f:b0:b9:8f:
f9:10:68:11:5f:81:39:81:60:fe:75:c2:12:cf:c7:
78:89:3d:7b:32:bb:af:c3:ce:70:c5:da:9f:71:4c:
1b:da:10:9d:b1:8e:7d:72:35:b1:0b:58:77:c6:f4:
8e:74:1b:ab:25:6e:e9:4c:a8:9a:9e:27:c5:7b:11:
20:40:db:60:c1:e9:69:3f:4e:11:75:9c:e7:95:68:
51:c0:c3:36:5e:21:91:78:87:11:f5:85:ad:3a:c1:
c6:76:b5:9b:0f:94:8c:ac:af:47:64:19:00:af:2a:
9d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:08:C5:FD:2F:5C:2D:54:C6:FD:7C:28:E3:0C:4B:39:BF:C5:C9:EB
X509v3 Authority Key Identifier:
keyid:03:45:2C:9D:BF:C9:E4:19:3C:7E:55:E0:D2:01:65:68:D9:46:52:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0Usnb_J5Bk8flXg0gFlaNlGUoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/XAjF_S9cLVTG_Xwo4wxLOb_Fyes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/A0Usnb_J5Bk8flXg0gFlaNlGUoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.252.0/24
Signature Algorithm: sha256WithRSAEncryption
49:0b:88:55:4d:84:7d:6c:7e:59:61:03:e1:69:fc:a8:b8:db:
5a:96:52:c7:91:5f:b3:f3:f9:f5:d9:b0:c5:5b:8d:fe:98:26:
d0:61:ad:5e:ab:e5:88:4f:04:d4:6d:6f:a1:f3:08:1e:2e:26:
1f:90:47:0e:cd:ef:30:cc:46:23:12:25:02:c1:c3:50:c5:9b:
b0:b0:87:10:36:3b:cb:29:b7:f4:8b:16:4c:cc:11:cf:e2:d2:
50:4c:65:51:a3:54:41:71:4c:1e:44:ea:c5:1b:05:20:d4:47:
a3:bb:23:44:a4:9f:98:0d:cf:85:fe:8d:de:0f:6e:50:a7:8e:
24:06:ec:a5:27:c9:43:8c:cf:1a:2c:77:63:06:8a:be:a2:61:
0b:5e:cd:7f:19:10:4d:ee:67:f6:66:a1:62:c8:95:80:b8:18:
78:3e:af:21:a4:a5:a1:de:15:9e:5a:48:1b:9b:df:18:ec:55:
c0:e3:d1:94:67:c5:c6:b8:80:8d:c5:d1:1b:53:19:92:3c:77:
e4:07:7e:60:7d:88:2c:41:8f:25:e5:8f:76:d2:50:6c:d0:db:
2c:92:19:3f:91:06:d8:f1:3b:42:9a:b4:9e:70:b8:2d:03:d4:
dc:2b:6c:19:65:b2:49:5c:c1:53:28:a4:53:0f:74:79:61:9f:
b3:51:ef:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:30 2025 by rpki-client