Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/XIeSIA33cKkiTFT16uXdrWnCN7I.roa
File: XIeSIA33cKkiTFT16uXdrWnCN7I.roa (raw, json)
Hash identifier: 9JQTxUsuY7jJoyraY1d7JZ8rAtgLqQALC93k5sbe/hU=
Subject key identifier: 5C:87:92:20:0D:F7:70:A9:22:4C:54:F5:EA:E5:DD:AD:69:C2:37:B2
Certificate issuer: /CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
Certificate serial: 01855D1F7812A56C34BF04281DB1F4B82A5B
Authority key identifier: 56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/XIeSIA33cKkiTFT16uXdrWnCN7I.roa
Signing time: Thu 29 Dec 2022 09:03:41 +0000
ROA not before: Thu 29 Dec 2022 09:03:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28907
IP address blocks: 195.234.112.0/22 maxlen: 24
77.87.192.0/21 maxlen: 24
195.39.197.0/24 maxlen: 24
195.39.196.0/24 maxlen: 24
195.39.196.0/23 maxlen: 23
89.184.64.0/22 maxlen: 24
89.184.64.0/19 maxlen: 24
89.184.68.0/22 maxlen: 24
89.184.80.0/21 maxlen: 24
89.184.88.0/21 maxlen: 24
78.27.192.0/19 maxlen: 24
78.27.192.0/22 maxlen: 22
78.27.192.0/18 maxlen: 24
78.27.199.0/24 maxlen: 24
5.149.120.0/21 maxlen: 24
195.177.118.0/23 maxlen: 23
195.177.116.0/22 maxlen: 24
195.177.116.0/23 maxlen: 23
2a02:2278:215::/48 maxlen: 48
2a02:2278::/32 maxlen: 48
2a02:2278:210::/48 maxlen: 48
2a02:2278:100::/48 maxlen: 48
2a02:2278:209::/48 maxlen: 48
2a02:2278:208::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:1f:78:12:a5:6c:34:bf:04:28:1d:b1:f4:b8:2a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
Validity
Not Before: Dec 29 09:03:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c8792200df770a9224c54f5eae5ddad69c237b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a1:6a:9c:ab:28:5b:5d:73:65:1a:3b:22:ae:
65:2b:f2:9d:5f:bd:e0:45:ff:a6:66:68:32:88:3d:
8c:96:ce:3d:14:c7:f4:52:40:3a:b8:a3:f4:d0:b9:
5f:66:0e:d4:f6:52:73:f2:22:06:bf:40:7e:e7:85:
50:8f:39:c9:21:04:98:b7:58:af:b2:27:49:bf:51:
b2:c5:ca:9e:a7:da:07:5d:5d:9c:35:34:0d:28:73:
dc:94:2f:f4:85:ba:c4:94:35:06:67:f1:e0:94:28:
1a:6a:b4:d5:2a:18:88:b6:78:b5:c5:fb:18:20:71:
f5:11:3c:d3:8b:4f:a5:7c:ff:3b:2e:a3:44:b7:24:
6f:43:54:d6:78:c3:65:e3:eb:68:37:60:df:bd:2d:
1c:2b:de:6a:40:1d:c6:2c:f4:ca:8a:aa:16:b6:f4:
4c:71:ed:4a:1f:c4:9d:22:25:bb:1a:f0:b5:6f:72:
6d:83:5f:63:df:5e:00:9d:ca:36:4b:ff:3b:75:32:
08:2c:9d:43:8d:45:a6:8f:7a:a3:d0:04:4c:f7:df:
14:0b:93:55:07:3b:6f:24:0f:97:1a:0d:4b:2a:72:
6b:51:49:e7:98:6f:bb:80:d2:b6:a5:af:01:29:d1:
bd:7f:98:f8:9c:dd:e1:2a:06:22:90:13:c6:83:ee:
6f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:87:92:20:0D:F7:70:A9:22:4C:54:F5:EA:E5:DD:AD:69:C2:37:B2
X509v3 Authority Key Identifier:
keyid:56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/XIeSIA33cKkiTFT16uXdrWnCN7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/VtserxeSos1Sidx_xSQuo1JFE04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.120.0/21
77.87.192.0/21
78.27.192.0/18
89.184.64.0/19
195.39.196.0/23
195.177.116.0/22
195.234.112.0/22
IPv6:
2a02:2278::/32
Signature Algorithm: sha256WithRSAEncryption
16:b0:8a:70:b2:59:4b:e7:86:a5:44:ef:43:9f:8d:97:fa:2e:
10:78:ad:4c:8c:05:76:fe:53:e8:1d:26:c7:c2:7f:27:27:cc:
cf:cd:bc:14:0b:f4:d5:92:93:36:ec:74:11:9f:36:85:a8:c6:
00:96:f1:c9:96:85:93:5f:11:48:f4:38:25:c7:3e:bd:14:a3:
53:a6:e1:59:b4:18:dd:78:13:ab:cd:08:c6:0d:3f:a5:76:4f:
56:a4:ae:83:44:12:6f:1b:3e:7d:df:02:e9:43:f9:42:77:2a:
b4:56:0d:f9:c6:8c:a3:5d:ff:74:a1:ee:7c:a9:e2:0b:fd:d3:
2b:78:22:3f:af:c9:28:78:4b:ab:99:a8:e0:cd:bc:83:34:a6:
b6:90:dd:fc:74:d2:cc:22:c1:de:88:13:5c:2e:85:f9:50:67:
7a:02:4b:00:e1:25:0e:69:15:a8:d4:41:24:59:35:3d:9d:20:
00:7f:63:87:fa:6c:e2:2c:7c:f6:6e:71:4b:98:f9:e9:30:05:
be:30:58:e6:a7:bb:9a:ac:68:e6:89:ca:67:63:29:a8:e1:ed:
e6:9d:99:75:0c:1e:c1:72:ef:69:14:2b:68:e7:c6:36:0e:96:
49:d2:9d:21:cf:40:e8:f9:48:ca:60:d6:cd:bf:da:1a:24:52:
53:f9:c9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:38 2024 by rpki-client on console-fra.rpki-client.org