Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6b1404-b146-4061-8327-1e0c5c0afa5f/1/wZNgx7K7t8WApHYZbLcGACgkzHI.roa
File: wZNgx7K7t8WApHYZbLcGACgkzHI.roa (raw, json)
Hash identifier: SM8HpZTL211hs+VfbaPdOTHxswhrQ6IQFtmf7yI7Yb8=
Subject key identifier: C1:93:60:C7:B2:BB:B7:C5:80:A4:76:19:6C:B7:06:00:28:24:CC:72
Certificate issuer: /CN=6da2fed4872997fe0ce0408d32bbc2d015449de2
Certificate serial: 04AF1A8A
Authority key identifier: 6D:A2:FE:D4:87:29:97:FE:0C:E0:40:8D:32:BB:C2:D0:15:44:9D:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/baL-1Icpl_4M4ECNMrvC0BVEneI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6b1404-b146-4061-8327-1e0c5c0afa5f/1/wZNgx7K7t8WApHYZbLcGACgkzHI.roa
Signing time: Thu 27 Jan 2022 18:28:53 +0000
ROA not before: Thu 27 Jan 2022 18:28:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200553
IP address blocks: 91.198.141.0/24 maxlen: 24
91.198.147.0/24 maxlen: 24
91.198.158.0/24 maxlen: 24
91.198.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78584458 (0x4af1a8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6da2fed4872997fe0ce0408d32bbc2d015449de2
Validity
Not Before: Jan 27 18:28:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c19360c7b2bbb7c580a476196cb706002824cc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:82:d5:62:86:83:88:44:61:6d:a5:56:dc:67:
5b:0b:a8:52:b6:79:22:fa:cf:b3:d8:d5:ca:20:a5:
d8:85:dc:2c:15:20:83:8a:ba:cd:1a:b3:90:78:f0:
84:5a:42:92:81:a6:8e:2d:62:68:0d:bf:fa:ef:19:
fc:c6:80:f7:d1:d7:fb:2c:76:c4:97:f6:d8:65:4f:
ba:9d:cb:e2:3f:40:19:e7:25:3a:32:22:6d:f1:57:
37:ed:52:b5:16:cb:c3:71:1e:1a:c5:98:78:54:dd:
b0:cb:1b:1f:b6:26:97:e0:0a:44:56:03:17:d5:fb:
47:2c:36:9b:06:f8:3a:9e:37:fd:f5:9b:22:63:50:
50:e4:e0:9f:ca:5a:c9:0f:a2:c5:62:1b:58:86:2a:
24:4d:69:df:4c:2a:6c:52:3a:32:d4:3c:c6:56:35:
cd:99:d5:f1:fc:97:09:d0:70:f9:d1:60:e6:ef:2d:
37:ef:68:ac:c1:e0:c2:44:ef:d5:b2:5e:46:60:94:
d1:72:42:f6:40:c0:7a:bc:db:32:c9:6d:64:fb:97:
55:5f:95:7e:e0:71:2f:67:51:16:d5:56:b5:f2:11:
c9:23:4c:d1:22:58:44:79:47:0c:0f:ff:44:1e:87:
06:15:53:53:36:a6:1a:de:fc:c8:06:62:88:f0:f0:
d0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:93:60:C7:B2:BB:B7:C5:80:A4:76:19:6C:B7:06:00:28:24:CC:72
X509v3 Authority Key Identifier:
keyid:6D:A2:FE:D4:87:29:97:FE:0C:E0:40:8D:32:BB:C2:D0:15:44:9D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baL-1Icpl_4M4ECNMrvC0BVEneI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6b1404-b146-4061-8327-1e0c5c0afa5f/1/wZNgx7K7t8WApHYZbLcGACgkzHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6b1404-b146-4061-8327-1e0c5c0afa5f/1/baL-1Icpl_4M4ECNMrvC0BVEneI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.141.0/24
91.198.147.0/24
91.198.158.0/24
91.198.167.0/24
Signature Algorithm: sha256WithRSAEncryption
67:2b:29:d1:56:cf:e9:1b:cc:b5:d8:13:2e:46:9d:70:c4:8d:
59:9a:36:75:df:b4:f6:fd:e3:9d:41:33:a2:f3:e4:d8:6d:20:
b5:49:6a:37:22:da:f5:83:32:09:ee:ac:8c:67:83:5c:74:82:
94:39:69:14:a6:40:86:0a:6a:79:97:ed:32:45:5b:db:c2:36:
89:70:0d:97:ba:8e:ab:e0:6f:9b:14:bb:aa:63:85:bb:77:8d:
7b:48:ce:fa:d9:0e:f2:d2:a4:ca:a4:3f:28:16:ff:d2:71:73:
03:27:25:bf:02:70:48:ee:20:09:57:f7:95:0d:95:d7:79:68:
35:8d:ae:ae:8a:e0:c4:ed:6a:64:4d:0d:3a:42:4b:2d:48:98:
52:11:98:2d:3d:1e:ee:2e:f6:04:79:2b:57:56:33:78:6d:88:
05:4b:53:1a:0c:7e:7e:b7:8a:2a:90:13:f0:6c:9f:d8:3d:d9:
98:b9:54:27:87:84:e9:55:6f:69:e9:d9:8d:dd:7f:f8:d2:03:
35:34:67:00:f6:b1:5a:44:66:de:a5:a9:bf:9e:79:ee:67:a2:
ee:a5:11:bb:ee:5f:0d:06:77:8a:5d:2c:d0:24:b4:34:df:c9:
e2:b2:68:13:97:e7:da:e1:de:eb:5a:b3:af:28:77:14:e9:ee:
3e:a5:a5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:37 2024 by rpki-client on console-fra.rpki-client.org