Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/xhM_lHc5brqsL0nOqTpkvwaWl3Y.roa
File: xhM_lHc5brqsL0nOqTpkvwaWl3Y.roa (raw, json)
Hash identifier: FPajYBmTLoA6H0CmZB5xNsKzzoTXyAWxp/HnmIixv0w=
Subject key identifier: C6:13:3F:94:77:39:6E:BA:AC:2F:49:CE:A9:3A:64:BF:06:96:97:76
Certificate issuer: /CN=ed536c19a691c2f544220a9521474a8765e59cf1
Certificate serial: 0181F2D10AD00548D42751E98D299149CCC6
Authority key identifier: ED:53:6C:19:A6:91:C2:F5:44:22:0A:95:21:47:4A:87:65:E5:9C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VNsGaaRwvVEIgqVIUdKh2XlnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/xhM_lHc5brqsL0nOqTpkvwaWl3Y.roa
Signing time: Tue 12 Jul 2022 14:29:54 +0000
ROA not before: Tue 12 Jul 2022 14:29:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13335
IP address blocks: 185.206.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f2:d1:0a:d0:05:48:d4:27:51:e9:8d:29:91:49:cc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed536c19a691c2f544220a9521474a8765e59cf1
Validity
Not Before: Jul 12 14:29:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6133f9477396ebaac2f49cea93a64bf06969776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cf:d2:b8:fe:0b:56:5a:7a:3f:f3:c8:5b:78:
bf:b9:7a:9e:99:03:67:74:05:2e:1f:30:84:b1:0b:
95:66:1b:04:41:ef:9b:fa:f7:6e:47:8f:25:09:4b:
89:18:0c:82:bb:a9:85:c7:5a:9f:eb:42:de:4a:8a:
5a:ee:b5:c7:3c:28:98:94:b6:0f:f5:f6:76:55:5d:
e9:46:10:a9:91:13:27:38:13:c0:1e:2e:e5:88:6f:
e7:4f:f8:26:ae:8b:73:c7:31:47:79:b6:bd:11:32:
3b:72:95:f0:c1:99:8a:37:bf:71:ca:b2:a5:37:7a:
92:79:2b:f3:19:90:7a:0f:6b:76:4d:4d:fb:ff:07:
39:a7:32:a8:ab:fa:5c:c2:2e:c2:1a:4b:41:bf:f6:
1c:65:92:84:25:d0:ed:50:e5:a2:44:3c:62:f7:13:
71:31:57:f6:f8:83:19:f4:25:24:24:2d:26:99:dd:
88:94:8c:ba:63:73:67:9e:49:a7:8b:8c:f5:26:90:
34:3f:b6:b4:b4:53:ba:41:36:be:d6:54:85:99:e9:
4f:06:a1:33:c4:cd:6e:06:b2:8a:aa:6b:ae:d1:ec:
ce:f8:c6:4c:9a:c0:4f:b8:66:cf:82:30:41:82:7b:
8b:5e:cf:c9:89:fe:40:ba:c9:47:a3:57:69:6e:26:
e4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:13:3F:94:77:39:6E:BA:AC:2F:49:CE:A9:3A:64:BF:06:96:97:76
X509v3 Authority Key Identifier:
keyid:ED:53:6C:19:A6:91:C2:F5:44:22:0A:95:21:47:4A:87:65:E5:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VNsGaaRwvVEIgqVIUdKh2XlnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/xhM_lHc5brqsL0nOqTpkvwaWl3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/7VNsGaaRwvVEIgqVIUdKh2XlnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.82.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f8:5c:a6:19:b2:77:ac:1f:e7:25:bc:f6:cd:07:df:46:e8:
54:13:a4:55:de:65:f5:6b:fc:d1:2e:c4:bd:17:61:05:69:06:
2c:f7:b0:df:1b:63:99:f9:ec:29:48:03:e0:ee:f4:25:86:81:
3f:02:3c:41:21:17:cb:ff:72:63:bd:15:24:f4:89:f2:6e:ac:
f1:0b:41:aa:ba:ac:49:01:fa:18:66:ff:c5:b9:4e:62:47:a7:
6f:fa:a8:9e:e9:64:24:85:62:9e:5a:fa:e7:bf:7a:c4:df:91:
4f:5f:46:4a:30:08:7c:a9:ea:04:69:84:fc:f8:bd:6f:c7:dd:
f9:b4:d7:30:ad:3b:ca:74:2e:24:69:f1:3b:e9:9f:f5:be:f7:
ee:58:51:83:3a:5d:9b:c3:8b:1a:9a:38:14:b7:26:8f:36:8b:
56:fc:aa:4a:cc:5d:95:48:8f:bc:26:a2:90:4c:21:3f:90:92:
78:dd:12:c0:7e:03:be:28:69:75:2e:59:7f:7f:84:e4:25:8b:
eb:79:e9:d6:23:95:f1:13:a3:b7:ae:74:4a:60:47:54:ad:9a:
88:6f:75:44:a6:26:a0:94:c7:21:18:99:74:64:98:0b:ff:0c:
93:58:a1:df:08:de:d5:4c:1e:b9:97:42:47:85:77:a6:76:47:
5d:88:cc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:42 2025 by rpki-client