Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/xczLjQtS_0t_HdRE128gX8_b-aY.roa
File: xczLjQtS_0t_HdRE128gX8_b-aY.roa (raw, json)
Hash identifier: WNE5aJlfQ+yLTcc0Kzdktoah5RCPYZBcsyD0PUk5EjM=
Subject key identifier: C5:CC:CB:8D:0B:52:FF:4B:7F:1D:D4:44:D7:6F:20:5F:CF:DB:F9:A6
Certificate issuer: /CN=4398cb58062ed4a9a30ff438e44eef31d7ef6a65
Certificate serial: 08ED794F
Authority key identifier: 43:98:CB:58:06:2E:D4:A9:A3:0F:F4:38:E4:4E:EF:31:D7:EF:6A:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5jLWAYu1KmjD_Q45E7vMdfvamU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/xczLjQtS_0t_HdRE128gX8_b-aY.roa
Signing time: Sat 01 Jan 2022 00:57:06 +0000
ROA not before: Sat 01 Jan 2022 00:57:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13246
IP address blocks: 185.181.192.0/22 maxlen: 24
95.130.16.0/21 maxlen: 24
95.130.16.0/24 maxlen: 24
95.130.17.0/24 maxlen: 24
95.130.22.0/24 maxlen: 24
95.130.18.0/24 maxlen: 24
2a02:2940::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149780815 (0x8ed794f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398cb58062ed4a9a30ff438e44eef31d7ef6a65
Validity
Not Before: Jan 1 00:57:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5cccb8d0b52ff4b7f1dd444d76f205fcfdbf9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:4f:a0:49:97:88:e7:1f:a1:af:1b:54:a8:
e8:9b:0a:19:be:54:72:7f:25:1d:eb:9b:2a:6d:f3:
f6:4e:aa:62:9d:5d:bf:8c:e4:f1:3e:94:59:2b:5d:
9b:54:4b:e6:ed:c2:1a:4b:dd:c2:5c:72:82:52:30:
48:c2:0d:38:9c:83:67:58:f5:cf:37:a0:dc:1a:c8:
11:24:9f:0c:3b:8e:fe:b9:77:f7:86:b3:78:0b:a6:
8b:36:a9:27:a4:50:1d:ee:f1:a6:7b:f7:72:ac:c3:
7d:b7:24:0e:5c:bd:83:e0:75:8f:4e:1e:73:21:95:
c1:69:6c:aa:27:d0:f2:48:4f:37:f3:63:64:db:b0:
3d:2b:94:6f:a1:dc:b8:d4:36:3c:6d:19:a8:9f:81:
35:df:05:4c:b8:c7:5c:ca:20:5b:b3:83:1e:c8:02:
d5:88:b5:00:14:9a:9a:3c:a0:d3:d6:eb:a9:a7:c4:
4b:7e:63:e0:b5:7a:ee:a9:9f:0e:d3:af:87:6b:70:
5d:76:d5:59:5e:46:65:c6:cd:b9:7c:ac:b7:b1:b6:
10:c1:cb:de:0b:93:54:bc:35:18:d4:47:87:24:30:
b2:c2:b6:a8:66:98:94:bd:93:66:90:f3:4b:49:d6:
d5:17:92:d4:61:b4:7b:40:41:c9:48:51:6c:3c:da:
1b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CC:CB:8D:0B:52:FF:4B:7F:1D:D4:44:D7:6F:20:5F:CF:DB:F9:A6
X509v3 Authority Key Identifier:
keyid:43:98:CB:58:06:2E:D4:A9:A3:0F:F4:38:E4:4E:EF:31:D7:EF:6A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5jLWAYu1KmjD_Q45E7vMdfvamU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/xczLjQtS_0t_HdRE128gX8_b-aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/Q5jLWAYu1KmjD_Q45E7vMdfvamU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.16.0/21
185.181.192.0/22
IPv6:
2a02:2940::/32
Signature Algorithm: sha256WithRSAEncryption
97:1e:92:e1:b0:e7:72:f5:81:a0:ea:86:de:d6:af:bd:c2:ca:
80:64:2f:27:4a:4b:21:20:3a:12:6c:2f:16:7d:5e:d1:a9:ec:
7a:c1:9b:1b:00:4f:2b:95:49:16:02:70:b5:02:b3:17:8f:44:
3a:55:88:1d:20:e4:0a:80:5e:d8:3e:ad:7c:77:5f:7a:92:a4:
45:f3:78:37:d9:22:f9:22:0f:2f:c8:bf:31:ef:75:73:29:3e:
3f:4c:d9:d2:84:9e:ae:30:e0:a4:d0:07:0c:e6:f9:f2:fc:da:
ad:76:6c:ab:a3:7f:e6:6b:4a:95:fe:94:c3:b1:7f:ff:18:f5:
fc:9b:52:0c:41:7f:dc:06:ae:e4:eb:6c:99:a4:56:6b:e5:79:
67:44:86:df:21:e3:2b:58:2c:dd:2f:4f:66:3a:fd:ed:2c:4f:
dc:26:d3:b8:5f:ea:19:02:57:e4:c0:22:ca:a3:c8:40:c4:40:
ae:12:ba:ee:2e:67:b4:b7:b9:7c:ce:35:ae:66:b6:30:48:36:
52:bd:c1:d6:ef:d6:ca:1e:02:a8:00:46:e6:36:7f:c2:f2:f6:
8a:11:1a:fd:8f:bf:f5:85:d1:b7:25:fd:a7:27:0e:7e:b4:bf:
5b:57:06:3a:2f:77:4b:51:89:3c:ca:84:ca:6a:3d:42:11:9f:
d8:36:dc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:02 2024 by rpki-client on console-fra.rpki-client.org