Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d41002-4346-4cef-9f40-fce2f83c3df9/1/xYxWPVrcs_o2vxvsRdLTa3WXuc4.roa
File: xYxWPVrcs_o2vxvsRdLTa3WXuc4.roa (raw, json)
Hash identifier: FDdm6mIUCJa23yGF5OLQG9nxIqApUSvVNMZ9ryhCD54=
Subject key identifier: C5:8C:56:3D:5A:DC:B3:FA:36:BF:1B:EC:45:D2:D3:6B:75:97:B9:CE
Certificate issuer: /CN=bf1ce08452d4a51a9eb4d423d8a03a916235b572
Certificate serial: 01059835
Authority key identifier: BF:1C:E0:84:52:D4:A5:1A:9E:B4:D4:23:D8:A0:3A:91:62:35:B5:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxzghFLUpRqetNQj2KA6kWI1tXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d41002-4346-4cef-9f40-fce2f83c3df9/1/xYxWPVrcs_o2vxvsRdLTa3WXuc4.roa
Signing time: Wed 11 May 2022 21:57:02 +0000
ROA not before: Wed 11 May 2022 21:57:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 152.89.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17143861 (0x1059835)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1ce08452d4a51a9eb4d423d8a03a916235b572
Validity
Not Before: May 11 21:57:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c58c563d5adcb3fa36bf1bec45d2d36b7597b9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:99:23:e9:60:8c:9b:5d:78:83:9b:5f:fe:f2:
08:e8:05:4c:e6:8a:05:e2:05:ef:db:6a:f1:ad:35:
77:48:2e:8a:10:fc:f1:82:e6:5f:88:08:3e:20:71:
cd:41:51:2f:ea:01:ba:24:fb:c9:16:8e:91:3f:31:
af:05:13:03:1f:c3:db:d2:b8:47:4b:d5:ff:10:7f:
b0:20:c2:95:56:f4:73:1c:c1:9b:5a:23:55:19:44:
ea:d4:e5:b8:5c:c7:5d:a6:7c:72:6a:aa:7c:b6:48:
69:e8:4e:e3:30:a3:d2:d1:fa:0d:e7:40:de:2c:10:
3b:90:40:89:5c:e2:b9:14:22:35:71:f6:69:65:9d:
03:98:77:21:58:a5:f5:09:8a:02:63:4c:b2:47:fe:
37:f6:d4:76:10:63:9f:1b:68:4d:f6:ec:f1:e3:c5:
fb:c0:78:f9:83:3e:b3:0f:20:b7:8d:2c:5f:a5:43:
81:25:5b:b9:3f:e1:08:b8:e5:3f:bc:fd:03:8f:a6:
c6:e9:66:2a:0b:69:e8:64:db:11:11:e1:86:d9:7e:
a1:60:e5:db:21:b7:55:50:74:4a:4d:de:88:c1:f1:
99:bd:70:17:e7:00:a7:7f:31:df:6e:25:cf:cf:d0:
74:71:97:eb:44:77:73:e8:74:3d:78:ff:83:bd:9f:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8C:56:3D:5A:DC:B3:FA:36:BF:1B:EC:45:D2:D3:6B:75:97:B9:CE
X509v3 Authority Key Identifier:
keyid:BF:1C:E0:84:52:D4:A5:1A:9E:B4:D4:23:D8:A0:3A:91:62:35:B5:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxzghFLUpRqetNQj2KA6kWI1tXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d41002-4346-4cef-9f40-fce2f83c3df9/1/xYxWPVrcs_o2vxvsRdLTa3WXuc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d41002-4346-4cef-9f40-fce2f83c3df9/1/vxzghFLUpRqetNQj2KA6kWI1tXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.199.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:05:b0:47:66:e8:ac:f5:99:b6:cf:b1:74:88:83:87:2d:35:
8e:8e:95:f7:40:a1:ac:d2:26:9f:28:ca:3f:05:d4:d8:39:0e:
8b:b0:9e:dc:41:f7:f2:23:51:c4:d9:d0:62:0e:5d:43:0f:b4:
74:6a:f3:b3:19:71:75:7a:f1:9d:20:a9:d1:f2:cd:22:d2:c7:
93:ff:41:b7:84:1e:e1:6f:ce:fe:ec:f7:93:be:db:a4:f5:4e:
21:25:39:8a:b8:47:7a:d2:60:f8:f5:dd:f8:54:d1:22:b1:1b:
36:82:b4:bd:ea:92:78:78:ce:e5:d1:b3:d8:c6:e2:16:1d:ec:
87:3b:5f:0e:a7:3b:cd:c6:d4:a4:97:11:22:ed:02:24:99:28:
ca:fa:61:e0:8b:da:b3:d9:35:29:02:56:c9:02:ca:bb:f5:39:
dc:bc:b9:fe:99:8f:4f:4d:1d:6d:e5:9d:3a:ac:7b:a6:10:6e:
e3:4b:c7:f9:0f:d6:b2:ea:82:fc:3d:92:a0:9d:bf:4f:8b:61:
6e:9e:f9:9a:97:87:b1:88:9b:47:94:55:45:bf:4f:5e:c4:85:
08:5b:d8:09:88:72:e7:bb:e2:a9:90:d2:cb:44:44:36:c6:f8:
7b:24:63:a1:39:9e:33:75:2e:ae:7c:2e:8b:51:7b:a5:59:cd:
57:1c:8e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:48 2024 by rpki-client on console-fra.rpki-client.org