Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/7a180c-c1a5-4146-8429-08380fffc169/1/WLJeOqOXyej1bhRhP32kZ5SDYe0.roa
File: WLJeOqOXyej1bhRhP32kZ5SDYe0.roa (raw, json)
Hash identifier: f4jMZCUygykPuKjtj12ylMG063evDyL/223+jpFE5QQ=
Subject key identifier: 58:B2:5E:3A:A3:97:C9:E8:F5:6E:14:61:3F:7D:A4:67:94:83:61:ED
Certificate issuer: /CN=3ed2591c1c83db30e42fb0e4ab8130e6ca20bf8e
Certificate serial: 018991ACC962431E0C4346C11A3FC9A9A807
Authority key identifier: 3E:D2:59:1C:1C:83:DB:30:E4:2F:B0:E4:AB:81:30:E6:CA:20:BF:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtJZHByD2zDkL7Dkq4Ew5sogv44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/7a180c-c1a5-4146-8429-08380fffc169/1/WLJeOqOXyej1bhRhP32kZ5SDYe0.roa
Signing time: Wed 26 Jul 2023 10:09:27 +0000
ROA not before: Wed 26 Jul 2023 10:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49392
IP address blocks: 178.23.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:ac:c9:62:43:1e:0c:43:46:c1:1a:3f:c9:a9:a8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed2591c1c83db30e42fb0e4ab8130e6ca20bf8e
Validity
Not Before: Jul 26 10:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58b25e3aa397c9e8f56e14613f7da467948361ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:c2:b0:61:85:11:3c:45:c4:9c:dc:6f:8a:
47:89:c1:89:f6:2a:aa:fe:7c:9f:e0:6c:ab:19:64:
69:30:b7:d7:77:d4:5e:15:8b:4a:c8:e2:aa:b0:ae:
87:ff:ea:d4:0f:b6:65:cf:d7:f1:50:68:7c:51:c2:
d0:bc:0e:d0:3f:1b:2d:48:52:61:ee:10:99:a6:8d:
10:4e:5b:31:41:af:3a:89:0c:ca:b4:b8:2a:f9:6c:
79:d9:ef:af:66:07:96:af:d7:9f:14:d1:d4:31:cd:
a1:06:2d:2b:33:da:a3:e3:2f:8c:2a:73:94:c5:7a:
42:21:d8:85:80:ee:53:f2:7a:46:cf:ff:a5:84:fc:
f7:6e:06:8b:e6:c3:40:67:60:73:ae:5b:63:01:08:
46:45:66:66:71:d8:59:db:d8:66:9d:ea:1f:f4:8c:
a5:97:39:b4:8f:e9:7c:39:9f:01:5a:47:04:b4:34:
52:9c:86:42:31:ab:88:84:91:d5:a2:9f:73:12:34:
5b:83:05:03:32:da:15:e0:89:ee:e2:f7:5e:c1:a3:
43:b1:69:c2:c0:05:a8:32:49:30:63:71:b1:cf:b6:
6e:2d:75:13:a3:59:5f:04:7f:cc:fc:02:b4:f1:0e:
e1:d2:1f:29:9d:92:4f:18:e2:c7:05:a2:71:29:06:
ed:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B2:5E:3A:A3:97:C9:E8:F5:6E:14:61:3F:7D:A4:67:94:83:61:ED
X509v3 Authority Key Identifier:
keyid:3E:D2:59:1C:1C:83:DB:30:E4:2F:B0:E4:AB:81:30:E6:CA:20:BF:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtJZHByD2zDkL7Dkq4Ew5sogv44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/7a180c-c1a5-4146-8429-08380fffc169/1/WLJeOqOXyej1bhRhP32kZ5SDYe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/7a180c-c1a5-4146-8429-08380fffc169/1/PtJZHByD2zDkL7Dkq4Ew5sogv44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.186.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:2e:82:8e:7d:6c:0e:84:7e:27:90:93:9c:6e:f3:81:05:fc:
02:64:a9:c6:14:07:74:c9:39:fe:b3:85:6d:67:ef:cc:a2:60:
38:62:1f:8d:e4:51:9c:1a:e9:7c:23:a7:75:a8:25:9b:9d:ea:
b5:1c:91:81:61:8a:73:3a:2c:78:10:19:97:a3:4e:5d:7b:2d:
c3:44:c1:13:a1:12:c0:88:2c:90:f3:54:15:b5:fa:fd:bb:7c:
c1:c8:76:8c:11:4d:16:81:5c:07:86:9b:ad:a7:6f:8c:3e:43:
57:77:fd:e5:c0:62:31:c1:4b:b7:77:3c:26:9c:80:9a:37:d5:
f5:84:34:5c:18:7a:7a:61:f5:4a:8d:b1:f4:fc:cf:b8:4e:bf:
ed:d2:4c:ca:09:f6:77:db:96:b0:d2:e8:34:c3:1e:ad:05:17:
24:20:3d:6d:17:32:8b:22:7c:84:8c:2b:6a:a3:b7:9b:81:3f:
81:7f:91:c2:6a:87:5b:3b:da:74:cd:cd:ab:0d:e5:3a:56:d9:
f5:c1:e0:65:c0:5d:e2:b5:92:d2:42:9f:3e:71:68:f1:34:b7:
a2:51:22:d2:5c:67:91:6e:55:89:3d:91:f3:a6:7c:61:03:0a:
ab:4e:1c:7f:2c:de:e5:3b:b7:13:61:33:af:4c:f0:0c:a6:c3:
eb:f0:5b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:29 2024 by rpki-client on console-fra.rpki-client.org