Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/80c901-cc75-4817-bcd2-b9229ec7c490/1/XZxgKnSRKeJlnIzaRpEeNcoNX38.roa
File: XZxgKnSRKeJlnIzaRpEeNcoNX38.roa (raw, json)
Hash identifier: uy7iYv3VHdZ+26RZJlkFl1/JK/Sj+UAz+yg3di28qPM=
Subject key identifier: 5D:9C:60:2A:74:91:29:E2:65:9C:8C:DA:46:91:1E:35:CA:0D:5F:7F
Certificate issuer: /CN=5a33b9aebb6cf6ff70963bbe71760c7b4f9571e2
Certificate serial: 01867A537D24EC10D99D20B5EB6496A3AFAF
Authority key identifier: 5A:33:B9:AE:BB:6C:F6:FF:70:96:3B:BE:71:76:0C:7B:4F:95:71:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjO5rrts9v9wlju-cXYMe0-VceI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/80c901-cc75-4817-bcd2-b9229ec7c490/1/XZxgKnSRKeJlnIzaRpEeNcoNX38.roa
Signing time: Wed 22 Feb 2023 18:12:17 +0000
ROA not before: Wed 22 Feb 2023 18:12:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 176.110.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:53:7d:24:ec:10:d9:9d:20:b5:eb:64:96:a3:af:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a33b9aebb6cf6ff70963bbe71760c7b4f9571e2
Validity
Not Before: Feb 22 18:12:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d9c602a749129e2659c8cda46911e35ca0d5f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3b:aa:7a:42:32:02:50:12:45:5d:99:f7:7f:
9e:09:17:12:69:8a:c8:c0:82:8f:45:68:5f:9e:92:
d8:d1:16:35:1f:9d:39:e9:b9:c4:79:70:21:45:de:
40:45:40:da:59:2d:a9:b1:52:69:76:c5:89:d8:12:
92:35:87:ae:e8:bf:d0:53:6c:f4:be:67:69:11:07:
2e:0d:1c:27:5b:15:6d:22:32:99:f6:77:3a:fc:a5:
a6:03:5c:3d:23:fc:18:07:0d:85:12:c2:1b:a7:1e:
d4:91:fe:09:52:e6:bb:ca:16:53:fa:72:64:b0:d2:
9b:67:ee:e6:60:29:1a:b0:86:e9:2c:4b:74:b3:2a:
25:06:1d:3d:0a:da:8d:2f:99:ff:e4:6e:16:d0:19:
49:fb:51:cd:01:0e:b8:a6:13:b1:af:b3:77:b0:b4:
c0:3c:6c:92:82:00:db:7c:84:88:0f:9a:66:aa:d1:
cc:8b:6e:cb:e9:2f:0a:3f:6f:a7:ee:6c:a9:f7:83:
94:ad:62:20:c5:92:d1:f4:2a:d8:67:46:4c:8e:e2:
e1:94:88:dc:93:9a:9d:bf:b1:ab:32:21:c0:05:c5:
25:a0:0a:a0:ea:3e:9e:ed:46:98:b6:79:0f:f3:6f:
a4:e4:bf:7c:4f:b2:5f:26:ea:be:4d:2c:17:c6:fc:
76:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9C:60:2A:74:91:29:E2:65:9C:8C:DA:46:91:1E:35:CA:0D:5F:7F
X509v3 Authority Key Identifier:
keyid:5A:33:B9:AE:BB:6C:F6:FF:70:96:3B:BE:71:76:0C:7B:4F:95:71:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjO5rrts9v9wlju-cXYMe0-VceI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/80c901-cc75-4817-bcd2-b9229ec7c490/1/XZxgKnSRKeJlnIzaRpEeNcoNX38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/80c901-cc75-4817-bcd2-b9229ec7c490/1/WjO5rrts9v9wlju-cXYMe0-VceI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.110.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c4:e8:3e:0b:39:da:e0:3c:a4:4e:48:ef:97:4e:de:6c:a9:
8e:e3:97:46:01:4f:e4:03:3f:3d:a3:cf:46:a3:39:f4:2e:05:
94:fa:99:1a:ae:e8:d1:eb:cb:0a:7d:91:39:3c:b2:e8:75:d6:
e1:c0:a7:9e:5c:71:2c:0a:38:a6:aa:b8:8f:ad:10:14:21:cc:
b0:87:b0:13:15:3e:ca:05:5a:27:f3:33:30:36:d2:44:4e:c1:
6f:7a:47:b8:3c:3b:ce:da:66:10:03:fb:ad:a1:2f:32:d3:9b:
6b:2c:36:11:8a:df:1b:01:c8:ed:c4:c1:e7:94:27:ca:58:8b:
49:6a:6d:09:e9:82:24:8f:b2:f6:43:90:a7:8b:b1:48:c4:58:
8a:4c:db:1f:47:58:0c:d6:eb:b3:7a:d9:c5:a2:a3:1d:e1:dd:
88:3e:f8:ea:11:92:61:db:3a:5e:9f:63:0d:72:7e:aa:64:29:
69:fd:ca:4b:f0:51:4d:55:87:76:eb:71:64:c2:d9:54:66:f7:
5c:e2:47:52:68:f5:2d:ca:fb:b7:65:7f:45:09:8a:e9:49:8a:
24:5b:c2:43:34:0e:a8:56:17:30:f3:e5:df:52:90:59:40:3f:
54:1e:43:5a:6b:33:b7:47:d1:cd:1e:8c:4e:f7:94:4a:b2:f9:
a9:04:d5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:47 2024 by rpki-client on console-fra.rpki-client.org