Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/SApYqwnWBg4l2-WqrqQELy-v25U.roa
File: SApYqwnWBg4l2-WqrqQELy-v25U.roa (raw, json)
Hash identifier: ZAZqdfrLAJOlmt8VnaZqE7OnyY+xWrqgtIwrQOUpdyo=
Subject key identifier: 48:0A:58:AB:09:D6:06:0E:25:DB:E5:AA:AE:A4:04:2F:2F:AF:DB:95
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 01856FCBA28949D37281122434A61B4A27DC
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/SApYqwnWBg4l2-WqrqQELy-v25U.roa
Signing time: Mon 02 Jan 2023 00:04:54 +0000
ROA not before: Mon 02 Jan 2023 00:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45839
IP address blocks: 185.100.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:a2:89:49:d3:72:81:12:24:34:a6:1b:4a:27:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jan 2 00:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=480a58ab09d6060e25dbe5aaaea4042f2fafdb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:11:3a:bb:2b:95:91:a9:55:ca:aa:6a:78:
79:b5:5c:93:6d:86:cd:31:cf:99:7c:bd:4b:a8:05:
50:12:be:35:6c:f4:4d:16:a0:d1:8a:5e:ee:a3:b7:
b6:67:fb:f6:f4:eb:ff:71:b7:88:cb:45:f5:0b:fc:
f5:ef:24:02:fe:7c:92:f0:ca:6e:2c:23:34:ab:cd:
0f:b0:2b:95:44:75:94:d9:50:93:4e:f4:40:d9:cb:
1e:54:44:a0:98:64:d5:40:8f:9e:ec:a5:2e:b7:1b:
8b:e9:3c:8a:a5:30:c7:89:9b:4e:a6:b6:7f:39:cd:
a9:93:29:44:49:9a:5d:87:be:91:af:b8:4c:e2:f3:
4d:89:e0:14:0e:6d:bb:c8:02:bf:e4:bb:8b:a0:41:
b0:aa:11:0d:c2:16:de:ca:9e:91:d1:24:24:ed:2d:
46:9d:e3:6b:b9:69:fc:14:c4:30:dc:94:59:8e:7c:
dc:b3:90:16:cd:bd:dc:cb:68:bd:4e:59:a8:bc:e1:
a5:90:46:af:83:de:48:35:6a:4c:98:d4:d7:5d:63:
a1:e8:1f:c4:f8:1b:32:25:fb:2b:c4:14:41:cb:ce:
94:79:73:e9:5c:df:dc:cf:50:43:b6:42:14:41:29:
ab:d4:f2:03:9a:c9:b0:5f:53:c0:80:09:a0:3a:ed:
5a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0A:58:AB:09:D6:06:0E:25:DB:E5:AA:AE:A4:04:2F:2F:AF:DB:95
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/SApYqwnWBg4l2-WqrqQELy-v25U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.215.0/24
Signature Algorithm: sha256WithRSAEncryption
23:9d:91:96:0c:c6:cc:92:c4:b4:d3:29:09:25:c4:9a:d2:00:
0c:0e:d5:ce:c3:f1:17:55:3c:f3:d0:b2:84:e3:8c:1e:d8:70:
71:12:7e:30:66:6d:d0:b2:67:bb:ec:eb:7e:28:56:fe:12:38:
b9:67:92:2c:65:f9:07:ab:05:6e:0c:df:68:74:5e:83:c5:67:
b3:95:0b:d7:1d:69:27:e9:e3:8a:92:dc:f0:36:01:10:6d:62:
9c:29:99:cf:29:da:b0:66:e4:7f:9c:c8:5a:7b:b1:40:ff:85:
0e:d4:61:9d:22:89:e4:a7:d6:ab:f1:cd:8b:43:cb:08:5a:63:
e8:fc:5f:e2:0b:fc:32:ed:b9:40:09:64:98:87:f6:59:52:3a:
bb:bc:df:60:a6:90:59:58:d8:b4:3d:46:9c:3a:52:cc:ef:29:
b3:9e:ba:9d:bc:39:7b:74:52:39:f0:d5:a8:5b:4c:80:45:23:
fa:82:c3:ef:b6:5d:51:39:b7:02:9a:83:e3:38:c3:d7:f3:85:
67:7b:57:03:8f:a4:5b:9b:4a:fe:9c:ae:92:18:59:e3:3b:7b:
5f:22:78:50:ce:25:1c:67:cf:da:df:43:c3:20:fe:37:88:b8:
f2:84:9c:72:8b:30:f3:88:2a:ec:ce:90:be:a7:c2:d4:73:ca:
3e:36:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 07:41:23 2023 by rpki-client on console-ams.rpki-client.org