Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/90c7ae-3681-4c30-9664-c27faa8e4b6f/1/XpJXBGXT0W50oqNIRzqIL-HONpE.roa
File: XpJXBGXT0W50oqNIRzqIL-HONpE.roa (raw, json)
Hash identifier: Ft9fEA8zZ+mOU29/4fwun/jUMCWOjThqrI/j4xyVixA=
Subject key identifier: 5E:92:57:04:65:D3:D1:6E:74:A2:A3:48:47:3A:88:2F:E1:CE:36:91
Certificate issuer: /CN=4a4ab91141d5181bdc0f713bd3c0fd073c1a9074
Certificate serial: 018326ED370A213513C8B1D626BA3FBDA495
Authority key identifier: 4A:4A:B9:11:41:D5:18:1B:DC:0F:71:3B:D3:C0:FD:07:3C:1A:90:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skq5EUHVGBvcD3E708D9BzwakHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/90c7ae-3681-4c30-9664-c27faa8e4b6f/1/XpJXBGXT0W50oqNIRzqIL-HONpE.roa
Signing time: Sat 10 Sep 2022 10:23:43 +0000
ROA not before: Sat 10 Sep 2022 10:23:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 195.64.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:26:ed:37:0a:21:35:13:c8:b1:d6:26:ba:3f:bd:a4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ab91141d5181bdc0f713bd3c0fd073c1a9074
Validity
Not Before: Sep 10 10:23:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e92570465d3d16e74a2a348473a882fe1ce3691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:a7:9b:12:1a:af:c4:d1:c7:0f:80:2f:52:
c4:cf:91:e7:b6:db:93:4d:0b:47:eb:e5:78:f1:63:
c3:e4:da:24:ac:ad:08:fe:37:4c:26:da:51:a8:b2:
82:49:ff:7b:89:0f:de:8b:08:93:b4:95:c6:60:b1:
8e:9b:cc:be:e2:7f:7e:a7:9e:66:12:0a:4b:f3:76:
c6:1f:4f:9c:6b:26:c4:df:b1:50:ef:b6:19:43:3e:
a7:4e:8a:da:98:d8:b3:50:e3:e6:97:2b:ef:ab:42:
2d:70:90:8f:79:aa:8b:20:7b:16:3d:1d:e1:ab:13:
84:08:2b:4e:c1:c9:59:e1:8d:3d:4a:b5:75:5e:eb:
3b:d1:47:c2:36:d8:49:5a:54:c3:e1:db:21:11:27:
d6:de:0b:bb:8a:dd:81:8f:7e:25:54:9e:d6:ae:28:
f1:0b:c3:c6:12:c7:02:79:2b:67:46:f0:9d:0d:6e:
29:1b:1c:7e:c7:c4:d2:9c:9a:01:5a:f8:a9:b7:bf:
71:04:ff:bc:3c:7f:8c:fb:4f:9b:74:5d:6b:10:e6:
05:b4:97:2e:f7:21:49:8f:6d:77:da:44:e5:f8:64:
f6:ac:5c:e1:5f:b6:86:df:31:5c:69:c8:0a:5c:53:
89:01:3e:54:18:fb:46:62:fd:5d:19:7c:fc:82:13:
1c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:92:57:04:65:D3:D1:6E:74:A2:A3:48:47:3A:88:2F:E1:CE:36:91
X509v3 Authority Key Identifier:
keyid:4A:4A:B9:11:41:D5:18:1B:DC:0F:71:3B:D3:C0:FD:07:3C:1A:90:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skq5EUHVGBvcD3E708D9BzwakHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/90c7ae-3681-4c30-9664-c27faa8e4b6f/1/XpJXBGXT0W50oqNIRzqIL-HONpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/90c7ae-3681-4c30-9664-c27faa8e4b6f/1/Skq5EUHVGBvcD3E708D9BzwakHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.107.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:59:f8:56:04:3f:a8:b7:db:b6:df:49:bc:99:19:de:bf:e9:
05:e4:31:99:0b:2e:3d:94:8c:69:bf:6c:1a:48:c6:84:ff:92:
9f:b9:68:93:60:7c:60:2f:b4:e0:98:f2:98:c0:dc:33:23:0b:
1f:a0:c0:09:a6:98:af:e5:17:06:81:f7:41:90:fe:13:38:c3:
b8:e8:e7:c2:d7:bd:78:61:96:40:ed:fb:6a:19:23:d9:a1:e7:
8d:4a:82:4c:d9:ea:f1:59:d5:ac:61:b8:f2:4b:46:fc:13:c0:
a9:36:0c:b8:62:0a:1f:fa:bd:58:13:08:3b:0b:c4:d6:44:8e:
e5:5f:4d:91:0e:6e:c8:47:44:02:81:27:b5:81:2a:ee:5f:e2:
10:25:ad:55:82:42:f9:71:49:b5:28:3e:c4:35:04:df:9a:ad:
5c:9f:3d:9f:81:05:e6:5a:95:bf:a1:ca:54:5e:44:20:17:b3:
dc:6c:09:f7:ec:51:e2:3c:fe:80:ed:d9:05:23:24:af:2c:4f:
69:97:93:49:0f:34:db:7f:83:f6:f3:95:73:2b:eb:50:ff:aa:
88:6d:7b:19:71:48:56:69:73:0f:1d:06:4a:f8:47:49:6f:ee:
60:73:92:c2:80:f7:85:b8:16:80:87:71:7a:36:c6:31:94:9b:
8e:15:98:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:26 2024 by rpki-client on console-ams.rpki-client.org