Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9d60f1-5d78-403d-84a5-b399f6c88693/1/RQ9tZA2QOwstlOCv3kL6ZeH39so.roa
File: RQ9tZA2QOwstlOCv3kL6ZeH39so.roa (raw, json)
Hash identifier: hATh1kPtXQQT+mkHc/FtRUxil569XcXd4IfpACo3TMg=
Subject key identifier: 45:0F:6D:64:0D:90:3B:0B:2D:94:E0:AF:DE:42:FA:65:E1:F7:F6:CA
Certificate issuer: /CN=c23b7e7141e767e72a4e6780e673f61cda85eaf3
Certificate serial: 0ADFC709
Authority key identifier: C2:3B:7E:71:41:E7:67:E7:2A:4E:67:80:E6:73:F6:1C:DA:85:EA:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjt-cUHnZ-cqTmeA5nP2HNqF6vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9d60f1-5d78-403d-84a5-b399f6c88693/1/RQ9tZA2QOwstlOCv3kL6ZeH39so.roa
Signing time: Sat 01 Jan 2022 12:58:07 +0000
ROA not before: Sat 01 Jan 2022 12:58:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202829
IP address blocks: 185.152.188.0/22 maxlen: 24
2a07:80c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182437641 (0xadfc709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23b7e7141e767e72a4e6780e673f61cda85eaf3
Validity
Not Before: Jan 1 12:58:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=450f6d640d903b0b2d94e0afde42fa65e1f7f6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0b:58:84:04:3a:e2:ef:4a:6d:62:de:f8:f0:
da:94:a5:9c:bb:bb:e2:42:2d:7d:e8:84:5b:3f:07:
24:c6:1c:c4:dd:93:23:5c:33:22:21:de:80:ec:49:
cd:fe:27:5a:38:43:b9:bb:34:c4:c8:ab:65:ce:e0:
12:86:b6:07:fd:8c:5c:8c:b0:32:a4:b1:a5:76:e4:
70:a9:e7:db:c6:ff:e3:cc:ac:be:97:a2:11:87:9a:
4e:6a:07:a5:30:e6:af:df:15:c0:6d:4c:f5:89:c1:
b6:57:eb:06:74:9c:40:79:26:d1:bc:c4:24:85:c6:
7f:d1:28:14:4e:cb:70:fc:b0:58:f5:16:a1:81:82:
8d:5f:b7:e7:12:49:e0:f2:ba:5c:91:1d:64:4e:80:
02:59:c0:1c:23:47:15:42:21:83:18:7f:6b:c9:a4:
14:f3:cb:50:7f:a1:3c:73:f7:54:cb:8c:ab:2e:f4:
5e:68:06:45:0a:e6:e2:a9:66:fc:3e:d9:a3:c2:d6:
cb:49:46:3e:7f:7a:f3:1d:6a:52:fe:41:57:fa:bb:
4c:1b:ba:61:a1:5a:4b:b5:1a:8c:42:3f:fc:14:61:
37:0a:1d:cc:f5:ff:b9:66:10:30:41:be:46:c3:4b:
54:b0:f1:51:00:f2:18:3c:ba:a1:d7:8f:a2:52:00:
9b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0F:6D:64:0D:90:3B:0B:2D:94:E0:AF:DE:42:FA:65:E1:F7:F6:CA
X509v3 Authority Key Identifier:
keyid:C2:3B:7E:71:41:E7:67:E7:2A:4E:67:80:E6:73:F6:1C:DA:85:EA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjt-cUHnZ-cqTmeA5nP2HNqF6vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9d60f1-5d78-403d-84a5-b399f6c88693/1/RQ9tZA2QOwstlOCv3kL6ZeH39so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9d60f1-5d78-403d-84a5-b399f6c88693/1/wjt-cUHnZ-cqTmeA5nP2HNqF6vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.188.0/22
IPv6:
2a07:80c0::/29
Signature Algorithm: sha256WithRSAEncryption
00:5e:f9:74:00:6f:76:9b:f1:2e:44:8d:c9:99:76:8f:c8:86:
c6:bb:ed:ae:95:bf:7d:f2:00:ac:4a:14:af:c1:59:dc:e1:e4:
73:58:4a:d3:bf:0a:5d:fd:78:b4:22:d2:b8:61:3e:5a:85:65:
39:a9:e6:41:8b:cb:f8:df:80:ca:7e:24:3f:05:0e:67:08:ee:
91:ea:94:11:ed:2c:8c:38:a4:48:9a:56:15:ba:c3:0a:79:9d:
f2:27:1d:c7:75:6e:c1:83:9f:9a:6e:fb:f2:a4:6f:2d:e5:4d:
2a:d7:4c:11:82:b0:13:29:76:d3:d1:b5:d2:b8:32:4b:b5:85:
e9:c6:9b:88:7b:88:86:4d:16:ad:0e:ce:00:4a:b0:bd:79:ae:
de:d6:5d:dd:49:49:d0:a3:96:95:9d:12:c9:01:40:2a:ad:74:
cb:5b:1d:0f:21:c1:76:3e:a9:69:c1:45:b1:6d:6c:0f:44:23:
dd:51:10:5c:5e:6c:bd:60:c1:2b:8d:3b:f1:e6:ec:70:f2:1d:
28:b7:77:da:f2:f9:76:ee:79:65:5a:11:23:0d:68:16:5b:1e:
63:87:e8:4a:e4:dc:77:5b:97:42:62:a8:86:96:3d:75:b4:b1:
4a:66:65:d9:4b:85:6c:78:b5:34:8b:56:6f:85:b9:2d:94:6c:
64:8e:d4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:12 2024 by rpki-client on console-ams.rpki-client.org