Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/X6o3g6Bw111mHMCqHdrld1iXyYc.roa
File: X6o3g6Bw111mHMCqHdrld1iXyYc.roa (raw, json)
Hash identifier: PN2ml1/LPu69Beckb4uMrcK4S9HjGjGuiXWWdV/r2bU=
Subject key identifier: 5F:AA:37:83:A0:70:D7:5D:66:1C:C0:AA:1D:DA:E5:77:58:97:C9:87
Certificate issuer: /CN=37dee1ca0a165513b57c8050621b8c79b8e3a56f
Certificate serial: D0B3E1
Authority key identifier: 37:DE:E1:CA:0A:16:55:13:B5:7C:80:50:62:1B:8C:79:B8:E3:A5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N97hygoWVRO1fIBQYhuMebjjpW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/X6o3g6Bw111mHMCqHdrld1iXyYc.roa
Signing time: Sat 01 Jan 2022 05:58:14 +0000
ROA not before: Sat 01 Jan 2022 05:58:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 213.109.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13677537 (0xd0b3e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37dee1ca0a165513b57c8050621b8c79b8e3a56f
Validity
Not Before: Jan 1 05:58:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5faa3783a070d75d661cc0aa1ddae5775897c987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:39:02:c7:1f:92:fc:1a:88:a8:d2:fd:2b:
75:56:d1:fd:90:f0:82:dc:98:70:03:03:11:d5:6c:
24:29:96:fd:de:eb:de:50:66:cc:32:e9:5c:e6:4d:
a1:f2:ff:68:26:2c:bf:72:bd:66:0a:f7:ff:6d:aa:
59:08:01:95:24:6e:0d:a8:0a:82:8a:f9:d6:36:d4:
04:5c:5a:a7:5f:a5:fe:0e:ca:10:53:b3:4b:0d:57:
27:e3:a4:14:87:d7:44:95:29:25:1e:1c:0c:13:8c:
2d:cc:0b:c4:bc:d3:f7:cb:30:3d:d5:a4:4c:cb:65:
c9:46:8e:11:95:6b:4a:e4:75:4d:36:6f:a1:44:8c:
f0:4f:49:a6:99:2b:62:7c:1d:a6:74:82:5f:ba:22:
fd:db:48:44:75:2d:a6:df:af:bf:19:b2:2c:0d:51:
8d:22:2d:9c:d4:f5:51:75:fb:e6:03:94:f8:90:7b:
28:20:54:63:16:12:56:8f:54:59:c1:7d:41:c4:a0:
01:01:e4:d1:18:06:ff:fa:6b:9e:bd:42:b2:8c:20:
a2:8c:63:76:5e:22:cc:28:74:69:ed:38:f1:6d:1c:
11:31:2a:d8:40:84:0c:0b:86:d9:a1:e6:db:06:72:
53:ac:68:b8:9e:89:6f:d8:ee:db:1a:a6:fc:65:80:
ee:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AA:37:83:A0:70:D7:5D:66:1C:C0:AA:1D:DA:E5:77:58:97:C9:87
X509v3 Authority Key Identifier:
keyid:37:DE:E1:CA:0A:16:55:13:B5:7C:80:50:62:1B:8C:79:B8:E3:A5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97hygoWVRO1fIBQYhuMebjjpW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/X6o3g6Bw111mHMCqHdrld1iXyYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/N97hygoWVRO1fIBQYhuMebjjpW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.155.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:21:20:13:95:0c:eb:0a:34:3f:cc:ae:dd:c7:ef:80:80:87:
34:44:b1:53:04:c6:c7:48:1d:37:70:9a:60:81:7e:e5:62:fc:
7b:d6:ba:7b:3e:84:41:29:de:89:f1:29:b9:76:ef:93:89:d1:
6b:4f:39:93:3f:4a:a6:aa:68:c1:40:00:be:3e:af:59:34:3e:
6d:93:11:35:e9:10:0e:1d:9c:3b:99:62:20:e3:96:13:8e:d6:
3f:8e:61:c2:b9:11:36:73:e6:5c:93:26:f5:4f:ba:1b:94:93:
10:08:ea:64:fa:57:3d:e6:f5:58:48:0d:47:90:71:f7:f6:5d:
f4:8c:75:1d:05:4b:27:1b:ca:8e:3f:81:00:46:18:93:19:87:
c5:03:e3:a1:6b:bd:97:66:38:35:75:9f:79:f0:98:5f:51:20:
b2:83:f7:93:35:ec:17:57:8d:72:d0:4d:51:61:93:35:bd:24:
3e:93:d6:1a:54:78:28:1e:a9:d2:cb:03:c1:9b:13:45:cf:92:
93:8c:88:1d:df:88:da:bb:2e:75:99:3d:5e:a0:33:10:a8:9c:
3a:3f:6c:88:f5:f3:70:f4:81:d2:cc:34:de:86:71:ac:5c:65:
8b:f2:23:3f:54:85:97:b2:28:7f:6c:23:ad:5c:cf:0e:4a:2a:
16:4b:b3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:56 2024 by rpki-client on console-ams.rpki-client.org