Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/wLYGZ3Lbf5j9uJ1mSN3YTNHrJxc.roa
File: wLYGZ3Lbf5j9uJ1mSN3YTNHrJxc.roa (raw, json)
Hash identifier: Dywjf3ZF1Zd9ZSyeFrzHJVcCHVlrwgjIZEdkdFIkqJk=
Subject key identifier: C0:B6:06:67:72:DB:7F:98:FD:B8:9D:66:48:DD:D8:4C:D1:EB:27:17
Certificate issuer: /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial: 01856F02246A45C16FA144A7CDBBBA553F18
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/wLYGZ3Lbf5j9uJ1mSN3YTNHrJxc.roa
Signing time: Sun 01 Jan 2023 20:24:49 +0000
ROA not before: Sun 01 Jan 2023 20:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 213.198.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:24:6a:45:c1:6f:a1:44:a7:cd:bb:ba:55:3f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
Validity
Not Before: Jan 1 20:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0b6066772db7f98fdb89d6648ddd84cd1eb2717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b3:0e:25:d7:cc:0d:91:9c:25:d2:d2:98:5f:
c2:27:72:6c:72:11:6d:1a:97:fb:93:b1:41:ee:23:
aa:38:14:52:05:39:6a:e2:60:d3:12:61:8b:4c:4d:
d9:6a:4a:2a:45:8d:0b:5b:57:1b:da:78:82:60:b4:
a6:b4:d8:57:58:42:44:9b:78:6c:9f:72:de:eb:f1:
07:2e:60:df:52:ed:58:4b:ba:73:44:7c:75:09:12:
cd:3b:ac:6e:a0:5c:91:a0:10:95:e0:ee:02:a3:66:
a9:da:45:61:07:70:62:31:3b:44:1f:02:25:04:c4:
73:2b:e3:a7:a3:97:c3:99:1f:4b:e3:4a:25:b8:99:
b8:a1:e5:4d:65:d9:0b:0c:6d:c8:15:ba:1b:e6:7b:
e8:95:ea:65:fd:1c:d5:ae:95:64:7e:b1:3b:f1:bd:
86:99:af:4d:17:6f:db:df:f3:93:27:f3:8d:42:d5:
cf:51:31:18:86:01:a4:ff:03:11:49:14:7f:4b:6f:
f0:c5:8c:5e:ac:c2:40:89:33:19:0a:a4:1e:37:e6:
f4:14:79:7f:64:32:00:c3:01:a9:c4:7d:aa:9d:a8:
8f:d9:05:8b:48:1a:80:23:28:8e:9a:63:c3:57:29:
2b:27:6f:bd:a1:8a:9f:f4:bf:c7:45:c6:f9:28:40:
20:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B6:06:67:72:DB:7F:98:FD:B8:9D:66:48:DD:D8:4C:D1:EB:27:17
X509v3 Authority Key Identifier:
keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/wLYGZ3Lbf5j9uJ1mSN3YTNHrJxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.198.67.0/24
Signature Algorithm: sha256WithRSAEncryption
96:d4:1e:d5:89:ec:9c:33:98:23:ca:43:11:f9:3e:76:5c:7c:
de:ad:70:36:5b:e0:09:29:c0:a8:cc:6c:e8:7b:50:4b:14:c4:
3c:06:7e:55:2d:02:0d:8d:9a:87:c3:d3:aa:fc:75:d0:47:f1:
13:7c:43:fd:d3:1c:88:95:47:a9:9b:28:c1:70:92:46:9e:cb:
e8:df:c3:4e:ea:76:b7:c5:a3:43:7e:ef:44:f3:6d:ed:3f:d5:
55:67:5e:18:52:64:d4:03:4b:2e:4a:33:8a:e1:19:bd:d7:e6:
ce:79:08:62:1d:0a:33:60:c1:9c:02:6b:04:c7:f2:4b:fd:2c:
46:cb:73:de:6f:70:33:8d:9f:d5:e1:b4:3b:b0:36:b0:84:ba:
58:e1:ad:33:44:2f:c8:cd:c5:70:61:79:e6:87:a3:80:48:58:
c2:cc:5e:06:07:49:ae:bb:fc:f9:11:09:a1:77:74:11:bc:d7:
dd:18:ba:35:3b:91:4c:cf:cf:05:94:f5:46:67:70:9c:da:be:
94:ef:5f:e2:62:18:ad:b7:05:21:03:df:c3:af:78:2c:f4:93:
3d:d8:c1:33:af:bc:95:6f:d3:46:c7:88:ac:ed:98:a5:d0:6a:
90:36:02:a3:b5:c2:73:a8:3c:b6:fd:59:76:48:37:00:cb:7c:
20:a8:4e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:06 2023 by rpki-client on console-ams.rpki-client.org