Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xu0XCG910FCqKI_muvl45jCOKwM.roa
File: xu0XCG910FCqKI_muvl45jCOKwM.roa (raw, json)
Hash identifier: nZS9nmFEQ+mT/LEcroLOvcNmR8aFFFU36YBjQcy7+ZA=
Subject key identifier: C6:ED:17:08:6F:75:D0:50:AA:28:8F:E6:BA:F9:78:E6:30:8E:2B:03
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B22A71F
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xu0XCG910FCqKI_muvl45jCOKwM.roa
Signing time: Tue 31 May 2022 13:22:13 +0000
ROA not before: Tue 31 May 2022 13:22:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13194
IP address blocks: 185.149.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186820383 (0xb22a71f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 31 13:22:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6ed17086f75d050aa288fe6baf978e6308e2b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:d5:f6:54:3b:aa:a8:f8:72:e8:1a:e0:ff:
5c:5e:23:60:fd:6d:06:53:26:b6:1a:8e:51:98:a4:
19:60:71:04:75:55:f6:c5:b1:4b:3d:c2:cd:24:5b:
45:ff:44:7c:26:0b:70:71:bd:ea:05:ab:9f:9a:c3:
8c:bc:32:72:4c:cd:e8:24:5a:13:6b:fe:3f:a7:8b:
8b:a4:ee:a2:40:30:95:cf:55:4b:50:3c:51:97:0b:
65:23:f1:a7:1c:9f:55:66:57:76:93:4a:5f:96:5e:
b7:a6:56:d8:7d:cb:df:65:7a:7f:d7:1f:46:db:69:
73:d6:8a:57:f6:45:75:9a:1c:0e:4e:01:3e:8b:82:
5b:a3:f3:4f:5c:8e:49:d7:40:ca:44:ae:e3:d4:7f:
08:30:09:f3:d7:27:ec:ae:b6:33:d4:4c:72:55:d9:
56:82:99:4e:07:1f:37:55:75:fe:ee:8e:93:fd:2f:
29:be:3a:cb:50:66:56:c2:28:d0:33:3e:34:40:63:
d5:30:82:d7:53:ca:c1:d1:84:91:a9:b6:23:a9:47:
a1:60:f1:85:f7:df:8b:4b:58:e1:4f:39:01:bf:47:
da:07:a6:1a:2e:12:b6:fd:7c:0d:e5:9d:e3:5c:75:
58:96:13:aa:0b:69:3d:50:95:97:11:da:8c:3e:f4:
fc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:ED:17:08:6F:75:D0:50:AA:28:8F:E6:BA:F9:78:E6:30:8E:2B:03
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xu0XCG910FCqKI_muvl45jCOKwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.153.0/24
Signature Algorithm: sha256WithRSAEncryption
94:6d:f8:fc:c3:87:25:22:ee:24:20:e0:ad:21:43:be:67:4c:
d4:c4:3b:00:9e:cf:cc:93:9c:f8:7b:d1:97:9d:51:fc:c4:57:
1d:3b:65:01:da:56:6c:8c:0c:9b:aa:25:f7:6b:42:79:3c:98:
d3:75:5c:c7:1b:f3:45:87:f0:26:9c:4b:8b:87:e2:10:ac:6c:
2d:a0:5b:22:ea:e6:d7:f7:32:9c:45:e2:f3:f3:13:61:32:7e:
8a:ea:54:74:8c:9f:1c:e9:7c:a1:b9:1f:1d:51:8e:04:27:9f:
34:55:5c:42:a4:66:9a:8a:c3:e2:03:94:5f:01:fb:2c:e5:11:
f6:0a:72:90:e1:b2:ce:84:ad:fd:8e:e0:ae:aa:f4:de:a1:86:
ce:a1:d4:e7:de:2c:45:b0:2e:2c:c8:9f:3e:79:d7:3f:cc:01:
13:4e:63:ed:bf:2c:9a:33:12:2e:6c:f9:47:05:67:e5:42:a6:
8a:46:49:c2:2d:60:b9:9c:6d:78:06:d8:ea:89:db:8c:2d:60:
2e:82:7d:97:ee:8f:6f:d3:20:5e:70:d5:12:7c:5b:cc:db:7f:
98:d2:c0:aa:0e:a7:2f:58:1c:44:ad:ab:d7:29:9e:29:fd:3c:
e6:a7:82:07:14:e7:4e:21:bc:95:4d:e3:e4:f0:dd:90:65:22:
0b:f8:db:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org