Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f7a017-7fdb-4fc9-88cc-782dd0987ffa/1/XJQuMN67SzD_X85k_7J_N9WmYGs.roa
File: XJQuMN67SzD_X85k_7J_N9WmYGs.roa (raw, json)
Hash identifier: 9lGLgQPDkehqrpuF+Sz267E5rbGZa4mikVRdyYzQmvs=
Subject key identifier: 5C:94:2E:30:DE:BB:4B:30:FF:5F:CE:64:FF:B2:7F:37:D5:A6:60:6B
Certificate issuer: /CN=33c28202b6141670a3ff348cadd60fff7bae6417
Certificate serial: 012970E6
Authority key identifier: 33:C2:82:02:B6:14:16:70:A3:FF:34:8C:AD:D6:0F:FF:7B:AE:64:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8KCArYUFnCj_zSMrdYP_3uuZBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f7a017-7fdb-4fc9-88cc-782dd0987ffa/1/XJQuMN67SzD_X85k_7J_N9WmYGs.roa
Signing time: Sat 01 Jan 2022 02:56:52 +0000
ROA not before: Sat 01 Jan 2022 02:56:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15626
IP address blocks: 130.255.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19493094 (0x12970e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c28202b6141670a3ff348cadd60fff7bae6417
Validity
Not Before: Jan 1 02:56:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c942e30debb4b30ff5fce64ffb27f37d5a6606b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:ca:c3:90:99:36:79:a7:3f:14:b5:7e:97:
5e:cd:5c:0e:c0:12:ca:e2:01:2d:4b:34:ce:7a:f9:
f0:37:3e:69:03:c6:94:2f:17:c7:5e:c3:11:e9:bb:
b3:d5:47:bc:5c:ff:37:1a:9e:89:ea:56:45:a0:13:
98:fe:d5:c5:5b:c6:d0:28:1b:79:bb:cd:cd:71:f9:
d1:9a:7a:0b:cb:f5:11:64:5e:66:20:05:86:8a:f0:
a4:e8:1a:f3:80:7f:da:32:3c:eb:60:8b:67:bb:8c:
72:9d:20:5a:b5:b5:d0:22:b1:d4:02:e3:3b:a2:c1:
39:44:4c:94:83:30:fd:e8:42:fd:d7:7f:5b:2a:00:
40:7a:93:0c:df:d3:58:b4:ec:3e:6a:ca:4a:4a:bf:
5d:78:c1:76:0c:d5:e4:d7:f5:73:76:af:73:24:26:
ed:59:a7:a2:22:ef:37:3a:2b:8a:70:d1:4f:8d:8c:
ea:df:07:61:ef:7b:7f:cb:f1:4b:d0:2a:5d:5e:f4:
ce:51:bb:c8:be:0c:45:3b:92:7d:77:d0:80:6c:71:
a9:24:db:1d:8b:28:44:43:53:31:64:46:9c:e5:e6:
c0:0c:f4:d5:8f:c3:7d:55:d2:1d:d4:c6:cf:5c:28:
d7:9f:22:79:29:b9:23:5c:53:e5:8a:dc:e1:27:31:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:94:2E:30:DE:BB:4B:30:FF:5F:CE:64:FF:B2:7F:37:D5:A6:60:6B
X509v3 Authority Key Identifier:
keyid:33:C2:82:02:B6:14:16:70:A3:FF:34:8C:AD:D6:0F:FF:7B:AE:64:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8KCArYUFnCj_zSMrdYP_3uuZBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f7a017-7fdb-4fc9-88cc-782dd0987ffa/1/XJQuMN67SzD_X85k_7J_N9WmYGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f7a017-7fdb-4fc9-88cc-782dd0987ffa/1/M8KCArYUFnCj_zSMrdYP_3uuZBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.169.0/24
Signature Algorithm: sha256WithRSAEncryption
db:eb:8c:a6:53:06:f5:b0:26:10:bf:d2:b0:a8:23:c2:18:af:
ac:2d:0e:3f:82:a3:61:8a:05:0a:db:1c:60:25:40:85:6d:e3:
ac:3b:79:ee:48:d4:0d:4f:d0:6d:bc:83:03:a1:6e:92:97:9b:
4d:74:e4:ec:2a:42:af:cb:49:01:d1:45:6b:a8:89:f6:0c:8b:
ac:fc:27:40:14:a7:46:18:08:02:9e:4b:f2:76:7f:ff:ae:d0:
d4:3d:4c:36:4a:17:30:f1:e4:ae:f1:3e:2d:d0:0b:20:03:0c:
42:27:21:54:01:1b:bd:98:c6:9b:7d:73:3e:bb:6b:e5:00:d0:
3b:31:8a:4b:e7:62:d6:56:f7:29:4b:ff:82:37:30:38:79:e5:
67:80:04:3e:87:65:11:37:97:c7:10:16:8d:56:63:2b:71:59:
f1:04:8a:c5:c5:16:b0:e3:54:1a:68:3f:3f:ae:f9:fc:d3:46:
fe:2c:4d:c7:1f:d6:85:a2:f7:b8:6f:e7:98:0a:e2:90:e3:04:
05:10:be:8b:8a:58:80:80:1d:36:9d:57:c3:90:a4:0c:d2:41:
c1:2c:4d:d0:1f:5f:66:3d:57:7c:f6:41:e0:2d:2f:9a:d1:cf:
00:79:12:54:28:53:17:3f:f1:6f:8d:d0:51:0b:2b:97:36:14:
fb:d6:68:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:11 2024 by rpki-client on console-ams.rpki-client.org