Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e1a857-ef60-4e1d-afe5-105130454fb0/1/XsYpEF8lLYCg_E3Xo6ZSnuYSi4s.roa
File: XsYpEF8lLYCg_E3Xo6ZSnuYSi4s.roa (raw, json)
Hash identifier: pHKJl/B+kjW68987Lka2ywHK2YWQOd05FQSd8MeDsGk=
Subject key identifier: 5E:C6:29:10:5F:25:2D:80:A0:FC:4D:D7:A3:A6:52:9E:E6:12:8B:8B
Certificate issuer: /CN=6655c1a30667a9d08231ca4870a33194ad53406f
Certificate serial: 0181F4650A5CA97CA91535DBCEBF7B236DDB
Authority key identifier: 66:55:C1:A3:06:67:A9:D0:82:31:CA:48:70:A3:31:94:AD:53:40:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlXBowZnqdCCMcpIcKMxlK1TQG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e1a857-ef60-4e1d-afe5-105130454fb0/1/XsYpEF8lLYCg_E3Xo6ZSnuYSi4s.roa
Signing time: Tue 12 Jul 2022 21:51:11 +0000
ROA not before: Tue 12 Jul 2022 21:51:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 195.96.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:65:0a:5c:a9:7c:a9:15:35:db:ce:bf:7b:23:6d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6655c1a30667a9d08231ca4870a33194ad53406f
Validity
Not Before: Jul 12 21:51:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ec629105f252d80a0fc4dd7a3a6529ee6128b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:6d:a8:7f:74:d0:40:0b:a6:06:c0:f7:35:
91:6c:06:a2:65:ee:6e:89:a1:1b:a4:92:bf:c8:c9:
17:e0:40:ff:71:eb:7a:33:90:08:d1:30:42:e3:a8:
7f:8b:14:94:55:89:bd:a2:7c:b9:3e:b4:29:a9:10:
4b:f6:67:0b:30:15:be:c8:62:c6:8b:ef:59:01:23:
fc:a5:82:db:46:63:46:bb:c6:d1:15:b6:8d:43:84:
de:54:f7:7c:dc:f6:dd:2e:9f:9a:8b:21:11:5c:02:
b0:fb:47:6d:9f:e0:c5:f6:b0:cb:1d:c3:c3:d9:a4:
94:d5:82:a3:6f:8a:36:8d:c7:c6:e3:59:cc:d0:22:
2a:d7:f7:d3:18:12:2d:b7:d2:ec:31:7f:ed:c5:ec:
fe:98:62:3c:78:82:58:97:cd:cd:96:b5:90:8d:d5:
e2:a3:39:af:76:69:07:89:62:5d:f2:4b:bc:14:42:
76:86:7a:7c:a4:b3:0e:7e:32:d4:d9:b7:ff:36:ba:
32:14:a5:69:b2:10:de:3b:fd:9a:ba:3d:3a:c8:d3:
3f:bd:86:47:b7:fa:92:fd:0a:79:91:f8:5d:1b:50:
9c:ce:d7:78:ab:2d:96:68:7e:a9:12:fd:e8:65:c9:
02:0b:60:7a:fa:2c:67:8b:c1:8e:9f:5d:2e:5b:9c:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C6:29:10:5F:25:2D:80:A0:FC:4D:D7:A3:A6:52:9E:E6:12:8B:8B
X509v3 Authority Key Identifier:
keyid:66:55:C1:A3:06:67:A9:D0:82:31:CA:48:70:A3:31:94:AD:53:40:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlXBowZnqdCCMcpIcKMxlK1TQG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e1a857-ef60-4e1d-afe5-105130454fb0/1/XsYpEF8lLYCg_E3Xo6ZSnuYSi4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e1a857-ef60-4e1d-afe5-105130454fb0/1/ZlXBowZnqdCCMcpIcKMxlK1TQG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.155.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:bb:b9:71:10:c3:4d:ce:7c:89:45:db:9b:7b:ef:e7:58:3d:
aa:72:8b:bc:20:24:f6:a0:9d:54:9b:91:eb:08:b8:c8:e7:09:
03:67:b6:2b:f8:c7:55:79:28:c8:16:ab:d6:b0:c6:70:ad:a6:
2b:c2:ea:92:e8:0c:eb:5a:f1:66:86:d7:31:46:a3:0e:1a:25:
6f:a9:a4:19:51:b9:2e:77:50:3b:8f:4e:77:30:b4:ba:2c:c0:
9e:c1:1a:80:7d:d9:44:64:37:9b:e1:a6:0d:9c:be:c9:bf:c8:
65:b4:ef:8b:03:a5:ad:80:74:e8:40:3b:9a:61:6f:40:28:d1:
33:b4:af:61:6b:00:7e:74:77:85:59:37:bb:62:fc:07:0a:29:
97:a4:a8:2e:cd:61:e9:81:ff:2a:f6:fd:75:f7:e7:13:8a:f9:
d7:aa:f5:13:ea:6a:ce:9e:69:6f:f9:fc:8f:e4:c7:4c:c0:11:
ce:b1:d5:ce:da:0e:89:b6:d2:1f:bc:14:17:c4:0a:1d:23:1f:
73:a6:fc:d0:f2:40:ea:ce:60:f3:9e:08:0a:4f:b6:41:ba:7f:
c8:5b:e8:8d:d1:4c:3b:c6:60:a2:e1:b0:7d:03:ef:c5:33:e9:
02:5e:e6:77:ce:da:1e:25:96:ac:0f:d8:af:70:76:19:15:d0:
ae:93:2b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:11 2024 by rpki-client on console-ams.rpki-client.org