Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/XQnMtN_XsWbJ03vB7MW-Un2UmLw.roa
File: XQnMtN_XsWbJ03vB7MW-Un2UmLw.roa (raw, json)
Hash identifier: aFQqa5GEWJK0VKPNavo7CRtXJsTh/RtNfg3e4sdy33U=
Subject key identifier: 5D:09:CC:B4:DF:D7:B1:66:C9:D3:7B:C1:EC:C5:BE:52:7D:94:98:BC
Certificate issuer: /CN=afecb37a7b3acb0e54ede063bf57d72cc59d94df
Certificate serial: 01841EF3E5C372FC1E5101954B5249814FB8
Authority key identifier: AF:EC:B3:7A:7B:3A:CB:0E:54:ED:E0:63:BF:57:D7:2C:C5:9D:94:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-yzens6yw5U7eBjv1fXLMWdlN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/XQnMtN_XsWbJ03vB7MW-Un2UmLw.roa
Signing time: Fri 28 Oct 2022 14:16:51 +0000
ROA not before: Fri 28 Oct 2022 14:16:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 156.118.4.0/24 maxlen: 24
156.118.0.0/24 maxlen: 24
156.118.8.0/24 maxlen: 24
156.118.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:f3:e5:c3:72:fc:1e:51:01:95:4b:52:49:81:4f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afecb37a7b3acb0e54ede063bf57d72cc59d94df
Validity
Not Before: Oct 28 14:16:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d09ccb4dfd7b166c9d37bc1ecc5be527d9498bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:8e:ce:7c:94:da:1e:89:7b:50:4f:9b:c9:
de:9b:f6:97:e8:a9:70:82:c3:6d:09:41:42:4b:7c:
34:ec:8c:7a:be:b5:6f:93:c0:4f:6d:e5:f1:0f:07:
f0:25:1e:31:96:b0:d8:49:20:55:78:5f:ff:fc:a5:
e7:7f:03:48:8e:b5:ee:f9:fc:95:41:96:33:38:9b:
92:e7:8d:8b:a3:98:d8:3b:49:66:29:05:22:e8:6a:
33:7d:a5:fc:80:17:1c:91:48:a3:4c:e7:8f:56:d7:
76:e7:e4:4d:fe:d4:38:fa:b4:5c:62:0b:4f:d8:37:
3f:f7:29:fc:a3:33:d8:fe:49:5c:e1:a0:6a:14:a1:
1f:3f:db:f5:07:35:25:8d:6f:c4:51:97:95:c1:5e:
01:8f:19:a1:27:0a:cc:cb:9b:e5:7a:89:dc:41:b3:
65:e7:9d:0a:8b:16:02:dc:4a:58:02:fa:f6:6e:50:
0f:cf:9d:c2:f4:53:94:74:da:8b:d4:75:f3:4d:54:
55:7b:4c:ec:06:83:ab:d1:fd:a7:52:76:b0:36:5c:
b9:28:33:d0:74:ef:39:7c:25:0c:a7:f4:99:e5:79:
08:0b:75:91:53:d3:ca:15:ad:e0:f5:a0:d1:87:eb:
f7:36:9c:5f:22:b0:92:c4:6a:12:88:13:3a:ca:1d:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:09:CC:B4:DF:D7:B1:66:C9:D3:7B:C1:EC:C5:BE:52:7D:94:98:BC
X509v3 Authority Key Identifier:
keyid:AF:EC:B3:7A:7B:3A:CB:0E:54:ED:E0:63:BF:57:D7:2C:C5:9D:94:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-yzens6yw5U7eBjv1fXLMWdlN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/XQnMtN_XsWbJ03vB7MW-Un2UmLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/r-yzens6yw5U7eBjv1fXLMWdlN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.118.0.0/24
156.118.4.0/24
156.118.6.0/24
156.118.8.0/24
Signature Algorithm: sha256WithRSAEncryption
33:93:bd:4e:df:b4:0b:a7:0c:c4:2b:35:3b:87:22:c9:b4:68:
fc:26:2b:7a:bb:3d:6d:1b:0b:c7:3e:c3:34:1c:eb:59:36:8d:
2e:49:1c:fb:39:5f:2e:d4:86:8f:ef:e6:ec:7a:a4:9c:cf:de:
ec:5f:fc:73:86:62:f0:cb:48:1c:4e:8f:3a:20:97:f8:56:00:
5c:5b:89:4e:3d:24:df:89:cc:a1:60:e5:6b:a2:8d:46:c7:e7:
21:f7:66:30:3e:46:35:3b:8a:21:70:0f:86:6d:bc:46:f9:a0:
91:d7:b1:8a:37:84:3b:76:9d:da:e5:4c:f6:41:83:60:bc:76:
f0:30:2b:a1:8b:a2:60:f5:04:a6:8e:71:5f:56:28:34:41:63:
30:6b:a7:cc:c8:43:71:fe:ec:57:8f:67:f6:1b:6c:7f:0c:fa:
78:0b:a0:c0:8a:6f:00:1c:29:f6:2c:c3:65:f5:09:a4:40:38:
a8:6d:a0:cd:0b:3f:2e:0b:d0:5c:15:ca:ea:25:80:e4:6c:7c:
20:d7:6e:f9:f0:06:b1:05:d6:97:dd:4a:93:fb:7c:09:14:1c:
78:a0:51:09:4c:4e:ef:ec:32:12:79:31:ce:60:d0:12:1e:7a:
7d:d5:b7:a8:39:9d:1a:c7:90:0e:ac:ea:ee:f4:ff:ed:61:9c:
cb:da:1e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:34 2024 by rpki-client on console-fra.rpki-client.org