Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/XOmMuhLzHwj4kkCLCDilGfHlpXk.roa
File: XOmMuhLzHwj4kkCLCDilGfHlpXk.roa (raw, json)
Hash identifier: VsQxxZ+ElZfAhFjAkLxMz77NGp6VxkL2p4j5c4ZIvcw=
Subject key identifier: 5C:E9:8C:BA:12:F3:1F:08:F8:92:40:8B:08:38:A5:19:F1:E5:A5:79
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 03E32EDF
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/XOmMuhLzHwj4kkCLCDilGfHlpXk.roa
Signing time: Tue 15 Mar 2022 14:23:59 +0000
ROA not before: Tue 15 Mar 2022 14:23:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208068
IP address blocks: 36.255.94.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65220319 (0x3e32edf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Mar 15 14:23:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ce98cba12f31f08f892408b0838a519f1e5a579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:79:f8:6a:e0:7b:5b:3f:b6:ca:49:b3:47:3d:
91:9b:10:90:68:c1:f9:6f:0d:9f:d5:ed:dc:c0:65:
60:94:88:59:11:f2:97:c3:94:b7:63:b1:f0:b2:c0:
9a:bd:f6:d2:7f:a1:3a:28:f5:a9:af:49:82:3c:46:
05:76:6f:25:89:4e:7c:d0:3d:08:cc:1b:09:b4:c6:
d6:89:90:90:b6:eb:99:81:bb:ed:d4:29:10:4a:9d:
64:84:81:7e:2e:f4:33:15:8d:05:2d:c3:ef:c9:79:
e4:cc:ab:51:a7:3b:74:ac:54:68:da:89:96:60:03:
04:5b:2f:f9:4c:cd:0e:31:46:67:0a:5f:00:1d:40:
3d:cd:a0:62:f3:ae:c0:49:9d:7e:f1:32:0a:c2:24:
aa:c0:91:c2:bc:21:f1:5d:51:57:ad:6b:af:c7:d4:
43:70:60:55:77:ac:f0:ec:e2:3a:78:a0:9b:d9:cb:
f1:e9:0a:01:b5:ca:ce:e1:4c:5e:4b:a6:da:32:7e:
33:af:8c:c3:38:3b:24:96:c7:55:5f:e8:8f:6f:a6:
3c:6f:3a:a3:7b:3a:aa:80:31:f7:84:f2:3f:80:8d:
a0:8b:72:a4:26:08:16:59:05:e4:38:66:83:56:3d:
8a:c1:5a:7f:d6:00:cd:02:e6:59:87:a8:78:f7:4a:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E9:8C:BA:12:F3:1F:08:F8:92:40:8B:08:38:A5:19:F1:E5:A5:79
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/XOmMuhLzHwj4kkCLCDilGfHlpXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.94.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:58:7e:41:97:8f:0b:82:8a:ca:11:c0:c7:3e:67:23:59:fe:
cf:f9:cc:73:18:4c:61:0d:b3:db:d6:b8:b9:ce:15:99:20:20:
c9:7c:a9:d3:2d:cd:31:fb:09:c0:c3:0f:06:a7:97:af:92:42:
ad:ec:08:73:96:dd:af:46:50:89:a3:b1:1e:bb:3e:6c:2a:2f:
5a:d3:22:1e:7d:29:2c:3d:3b:9d:bd:97:52:bd:8a:5c:60:66:
c4:da:8d:f8:1d:41:bf:15:f4:10:52:d5:dc:59:6d:c0:71:10:
3c:6c:db:7f:dd:60:dc:4d:63:f2:ec:50:7c:9f:8e:68:37:c7:
11:33:40:33:25:12:17:47:43:dc:18:96:3b:0f:b6:91:fe:8c:
e5:18:53:31:2b:3f:cb:ba:35:4e:38:8d:ed:bb:f9:0e:94:b0:
46:17:71:03:00:59:28:c1:e6:6e:f7:5e:2b:de:45:ea:b0:8d:
43:39:d5:36:37:e6:ef:a6:31:4f:4b:32:ed:1f:58:96:43:c6:
38:49:98:e7:97:1c:6b:98:e3:f5:58:34:d4:3a:b9:28:1c:bb:
12:49:97:83:c8:66:48:69:69:81:eb:3c:b2:d9:86:7b:63:c7:
29:dd:69:7f:2c:0c:45:e4:c6:bb:f3:8e:c2:f9:07:30:ac:2f:
36:2d:06:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:50 2025 by rpki-client