Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/413592-1645-4781-ade7-634a383c4512/1/XcZLxxmzNq77cS4F2zb53g1s4L4.roa
File: XcZLxxmzNq77cS4F2zb53g1s4L4.roa (raw, json)
Hash identifier: 4ToXWuojMWMmGzjH9igoIiwXHm5AURJhheY1l+iavA8=
Subject key identifier: 5D:C6:4B:C7:19:B3:36:AE:FB:71:2E:05:DB:36:F9:DE:0D:6C:E0:BE
Certificate issuer: /CN=53427e07c67c66b195e1da470b475b1e3d8f9901
Certificate serial: 01644BAA
Authority key identifier: 53:42:7E:07:C6:7C:66:B1:95:E1:DA:47:0B:47:5B:1E:3D:8F:99:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0J-B8Z8ZrGV4dpHC0dbHj2PmQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/413592-1645-4781-ade7-634a383c4512/1/XcZLxxmzNq77cS4F2zb53g1s4L4.roa
Signing time: Sat 01 Jan 2022 14:07:51 +0000
ROA not before: Sat 01 Jan 2022 14:07:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 195.69.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23350186 (0x1644baa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53427e07c67c66b195e1da470b475b1e3d8f9901
Validity
Not Before: Jan 1 14:07:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dc64bc719b336aefb712e05db36f9de0d6ce0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:92:cc:77:b1:01:70:ed:33:10:2d:65:f8:e9:
76:1f:b3:7c:dd:22:c8:66:50:92:a7:4c:c7:e9:03:
c4:96:0a:98:de:e7:a9:28:65:45:08:b2:6a:f6:0c:
a7:da:59:74:2c:35:0f:58:54:ba:41:3c:90:2a:b9:
a8:51:45:24:12:f4:7d:aa:9b:35:97:c4:d2:ad:59:
ed:de:73:0c:96:85:81:53:91:72:64:45:45:17:8a:
0f:4f:84:65:59:30:51:cf:2e:21:fb:78:5c:94:4c:
6f:2c:72:b1:3d:25:7f:a2:22:7a:88:03:56:04:ff:
a9:5a:28:78:75:b9:8e:75:07:90:f8:e8:2c:a5:f1:
f6:f3:bd:0b:cd:4c:23:04:6d:63:c3:11:a8:48:29:
a9:62:58:d0:4a:99:21:0d:39:8e:cc:93:0c:ed:4e:
02:4c:75:a7:e8:8a:f0:6d:a8:8e:d2:25:00:f0:8a:
d2:35:17:46:57:db:16:d4:48:69:2d:e9:99:b0:ec:
8f:1f:38:34:b0:41:0c:f3:54:d8:b0:2e:bf:68:28:
b1:bb:e5:69:34:c1:95:1d:d7:74:ee:93:85:e0:95:
51:94:b2:14:80:d6:17:2c:cc:a5:6c:a6:91:06:38:
db:43:ce:ee:e2:f7:1d:42:17:f6:3d:47:71:5e:f1:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C6:4B:C7:19:B3:36:AE:FB:71:2E:05:DB:36:F9:DE:0D:6C:E0:BE
X509v3 Authority Key Identifier:
keyid:53:42:7E:07:C6:7C:66:B1:95:E1:DA:47:0B:47:5B:1E:3D:8F:99:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0J-B8Z8ZrGV4dpHC0dbHj2PmQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/413592-1645-4781-ade7-634a383c4512/1/XcZLxxmzNq77cS4F2zb53g1s4L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/413592-1645-4781-ade7-634a383c4512/1/U0J-B8Z8ZrGV4dpHC0dbHj2PmQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.150.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e0:de:2d:d6:67:1a:ba:d5:ca:87:1b:38:1b:cf:fc:6d:ef:
50:55:9a:a2:54:59:19:e4:00:75:f4:d6:f5:de:a9:ec:b7:29:
34:0a:1d:65:29:48:bc:27:cc:54:96:8f:4d:a2:7a:e7:bf:af:
bb:e2:37:74:e0:ca:d9:ce:83:23:33:77:d1:df:1a:af:f3:35:
a1:a5:83:ba:a1:d6:6c:5b:df:5f:ad:69:0c:33:d1:27:77:04:
1c:f9:e0:ee:87:77:2f:51:68:55:cc:6a:25:41:1e:38:67:2f:
83:7e:8f:98:c2:e8:ae:48:35:95:9e:ab:57:a1:da:77:b5:fb:
54:82:d1:31:9b:b6:31:f9:f3:f1:38:d9:43:1a:08:a2:c9:03:
81:18:38:7b:79:a8:1e:cc:57:b9:7b:78:71:ad:f6:39:6d:4b:
7a:53:9e:df:9e:b5:dd:ae:f4:ff:1b:39:27:ba:59:0e:c2:e7:
85:19:9a:d9:24:2b:24:44:53:0b:ec:89:56:a0:c7:df:15:81:
85:65:64:c3:24:f6:88:c1:3f:a5:ba:b6:5f:f0:52:ee:81:1c:
74:34:22:5b:ac:b9:a1:b4:c9:2e:f6:a3:2d:2e:64:32:06:c3:
1f:21:fd:be:cc:a9:1a:ba:aa:bc:96:b1:7b:fe:8f:a2:dd:f0:
ac:7c:3d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:15 2024 by rpki-client on console-fra.rpki-client.org