Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/62e43b-228a-4e85-834c-44c166014612/1/XBZpC8x6m0hAOBDJg6lANclU584.roa
File: XBZpC8x6m0hAOBDJg6lANclU584.roa (raw, json)
Hash identifier: xbk4fRvlUKfoI/SxhYKVBKBzE1zdyg0HOQawyev1SUw=
Subject key identifier: 5C:16:69:0B:CC:7A:9B:48:40:38:10:C9:83:A9:40:35:C9:54:E7:CE
Certificate issuer: /CN=9a04cdcdc1159c31eedb24cc7ac8b262b756227c
Certificate serial: 02F1E51F
Authority key identifier: 9A:04:CD:CD:C1:15:9C:31:EE:DB:24:CC:7A:C8:B2:62:B7:56:22:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgTNzcEVnDHu2yTMesiyYrdWInw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/62e43b-228a-4e85-834c-44c166014612/1/XBZpC8x6m0hAOBDJg6lANclU584.roa
Signing time: Sat 01 Jan 2022 00:53:42 +0000
ROA not before: Sat 01 Jan 2022 00:53:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44066
IP address blocks: 185.210.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49407263 (0x2f1e51f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a04cdcdc1159c31eedb24cc7ac8b262b756227c
Validity
Not Before: Jan 1 00:53:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c16690bcc7a9b48403810c983a94035c954e7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:dc:29:ad:ae:a2:dd:bb:7b:10:cb:7e:f9:
bb:fd:7e:1d:59:b0:6c:9c:3f:4c:3c:6a:5b:bd:aa:
ec:aa:86:d9:7c:60:7d:d6:d9:32:03:65:ac:67:b7:
eb:4f:e6:06:0e:c7:10:03:f8:db:ec:25:68:06:43:
35:f0:f7:ff:17:21:52:25:3a:1b:c4:b6:3f:70:8d:
16:81:bd:55:c1:be:52:9f:87:30:41:ad:ac:9c:b2:
46:17:95:26:2c:09:2b:2e:6b:6e:19:fc:79:1f:73:
12:fd:c8:29:8b:b5:68:23:e7:83:a6:35:1d:d4:b5:
c1:56:06:ad:53:9c:e1:43:a7:9b:dd:a0:ba:f2:20:
f4:92:b0:f6:26:33:5a:ea:61:cc:df:d9:46:86:1e:
03:de:35:0f:d1:6a:0c:dd:b8:65:e7:b7:7c:fd:b2:
18:56:8a:57:53:ed:c7:fe:68:af:08:e6:62:c0:93:
ae:f5:cb:f4:f4:f8:58:36:b2:8c:db:1f:51:da:6f:
5e:a1:a1:e0:12:16:0e:5d:b3:6a:87:07:d9:88:2d:
71:da:30:01:ae:f6:0b:f9:a4:09:9e:64:f7:62:28:
cf:d9:f6:30:b9:ab:52:6a:c2:62:c5:d3:cb:85:25:
77:17:4b:bd:6d:73:38:d7:60:a0:0c:96:7a:d4:b7:
84:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:16:69:0B:CC:7A:9B:48:40:38:10:C9:83:A9:40:35:C9:54:E7:CE
X509v3 Authority Key Identifier:
keyid:9A:04:CD:CD:C1:15:9C:31:EE:DB:24:CC:7A:C8:B2:62:B7:56:22:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgTNzcEVnDHu2yTMesiyYrdWInw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/62e43b-228a-4e85-834c-44c166014612/1/XBZpC8x6m0hAOBDJg6lANclU584.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/62e43b-228a-4e85-834c-44c166014612/1/mgTNzcEVnDHu2yTMesiyYrdWInw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.137.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:9b:8c:28:f9:0a:aa:13:a8:f1:87:e2:4e:91:54:84:26:bd:
b1:8c:da:62:fb:be:b9:ca:e1:a9:9b:b5:9a:3e:51:6d:9d:7a:
19:be:17:9d:f3:53:68:3d:cc:6e:44:4f:4d:cc:ff:75:74:6f:
6e:3e:30:bc:cf:fa:91:af:6d:cd:71:29:48:34:8e:6c:55:b0:
09:51:65:01:24:1c:71:4a:64:37:51:5a:26:7e:56:ae:84:98:
3a:90:68:bd:7a:df:e8:44:d0:32:c3:aa:53:b8:7f:c8:aa:86:
47:ca:04:0d:6e:5a:b7:d1:63:1c:43:14:2f:55:18:4f:cc:81:
df:97:b7:e3:59:c4:f2:77:aa:93:03:98:fc:5d:49:f9:a1:b5:
79:71:71:85:e8:13:a5:e1:b8:a3:a0:cc:33:f7:4a:36:da:2f:
7e:13:8d:5b:4a:50:48:fa:48:13:6f:80:f5:de:0b:9c:47:ea:
84:2f:ae:a8:e4:b7:f2:21:8b:aa:91:8f:f2:49:b7:3e:db:7c:
cf:bf:e4:2c:01:68:ae:a6:e4:66:a8:c2:f0:b5:f3:0b:fe:29:
a1:2c:93:20:22:76:50:a7:35:3c:25:2f:7c:77:31:61:0e:e2:
29:4e:82:d6:d4:ba:2d:ee:75:04:ac:d7:76:23:5a:c0:e1:0f:
8e:92:56:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:50 2024 by rpki-client on console-fra.rpki-client.org