Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/xmy_Lp1Dk7IAVOehWcWqqcXYcOg.roa
File: xmy_Lp1Dk7IAVOehWcWqqcXYcOg.roa (raw, json)
Hash identifier: M1r+3XKQIY//LDLYIb7DI6Ym9kK/EwHqQK+tvVlZAaQ=
Subject key identifier: C6:6C:BF:2E:9D:43:93:B2:00:54:E7:A1:59:C5:AA:A9:C5:D8:70:E8
Certificate issuer: /CN=537b37656cd14d488a70512921875717a0d910b6
Certificate serial: 018693824BEDD0D6C66E3BD4B65869DD3BE6
Authority key identifier: 53:7B:37:65:6C:D1:4D:48:8A:70:51:29:21:87:57:17:A0:D9:10:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3s3ZWzRTUiKcFEpIYdXF6DZELY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/xmy_Lp1Dk7IAVOehWcWqqcXYcOg.roa
Signing time: Mon 27 Feb 2023 15:33:55 +0000
ROA not before: Mon 27 Feb 2023 15:33:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12345
IP address blocks: 178.239.20.0/24 maxlen: 24
178.239.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:82:4b:ed:d0:d6:c6:6e:3b:d4:b6:58:69:dd:3b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537b37656cd14d488a70512921875717a0d910b6
Validity
Not Before: Feb 27 15:33:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c66cbf2e9d4393b20054e7a159c5aaa9c5d870e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ec:2f:65:9b:9b:a7:f2:65:82:67:26:c9:fc:
2b:37:cb:53:0f:f8:3a:df:5b:d7:c1:cf:ce:cd:5a:
84:27:0b:ed:62:2b:ed:18:1e:12:47:1d:34:e9:d0:
3f:46:b7:7b:3e:f5:89:c4:6c:1e:f5:88:84:13:cb:
0c:49:be:94:db:8c:bb:18:62:d5:e5:1b:e6:03:2c:
a9:fb:fe:f9:85:71:91:9a:b3:03:07:d3:1c:3e:ac:
2e:ee:a1:c0:0b:7f:9c:e6:61:c3:a8:3b:12:f2:33:
cf:24:f7:7d:d1:60:d8:1c:40:43:43:cd:f0:e4:23:
0d:39:17:e8:27:89:88:76:5a:15:ed:b2:a6:68:75:
c8:43:78:bf:00:74:fe:71:2d:55:1f:38:9d:0f:e2:
18:74:a9:d1:45:c9:6b:d3:71:c8:9b:e2:d4:ad:ed:
72:eb:7e:e5:fc:1f:80:2f:3d:d2:ac:04:be:db:47:
2d:88:e2:51:62:a0:02:df:4a:e5:d7:21:a4:8d:76:
f0:03:63:e1:29:de:07:53:d2:6b:31:2f:03:83:69:
5a:e0:00:7b:94:a5:0c:8d:e2:e5:ef:80:e2:70:ec:
d4:70:22:c1:ac:66:aa:12:7b:8b:c8:09:23:d0:f6:
31:f9:f5:ef:d1:5a:13:ed:85:66:1c:07:00:6a:85:
fd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6C:BF:2E:9D:43:93:B2:00:54:E7:A1:59:C5:AA:A9:C5:D8:70:E8
X509v3 Authority Key Identifier:
keyid:53:7B:37:65:6C:D1:4D:48:8A:70:51:29:21:87:57:17:A0:D9:10:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3s3ZWzRTUiKcFEpIYdXF6DZELY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/xmy_Lp1Dk7IAVOehWcWqqcXYcOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/U3s3ZWzRTUiKcFEpIYdXF6DZELY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.20.0/23
Signature Algorithm: sha256WithRSAEncryption
25:1f:a8:08:d7:b2:77:8f:ee:5a:51:62:24:41:9c:42:a9:6b:
58:60:08:7a:ba:56:17:31:7b:73:bf:d6:98:94:a2:55:c5:83:
07:17:87:87:df:b9:59:c0:8c:4d:c1:aa:02:0b:49:6d:0e:fd:
e2:20:c1:fc:0d:a8:ff:8d:de:f6:0b:0f:fb:9c:87:8e:67:1a:
30:de:74:04:0d:2b:f9:e5:28:fe:59:95:9d:3c:29:1b:a1:1e:
78:e5:9a:2f:9f:8a:65:68:1e:0f:12:8e:05:ae:33:d2:b8:c1:
cc:d2:8b:8c:83:4f:b2:f4:dc:d6:56:8a:39:65:af:ce:69:d5:
3f:bd:e4:f8:3e:c9:65:15:69:64:d5:7a:72:b8:c3:a5:db:b2:
cb:f6:0d:ab:06:ae:40:8d:a5:fd:92:7b:db:3d:02:16:c4:18:
1d:a1:e7:e5:19:fc:a1:ef:e0:ca:74:26:26:02:cd:69:60:2d:
4f:e5:51:7d:b3:d0:86:9a:1a:be:ac:ec:24:69:86:62:62:11:
38:b2:d3:a8:ec:cd:36:4b:6f:c7:62:97:74:41:f5:9b:79:c6:
85:d4:7f:65:84:8f:a2:fb:2d:6b:5c:b5:f5:14:44:5a:a7:e6:
f9:12:a3:26:54:cc:c5:57:55:76:52:06:dd:ae:b5:81:dd:b7:
85:07:05:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:44 2024 by rpki-client on console-fra.rpki-client.org