Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/wHsavIqZj73PycRp58xVDUCWOP0.roa
File: wHsavIqZj73PycRp58xVDUCWOP0.roa (raw, json)
Hash identifier: uvvoF2m8hNfafC0R9e5ajBwTX/Ac14XHRD7McK9Ff/w=
Subject key identifier: C0:7B:1A:BC:8A:99:8F:BD:CF:C9:C4:69:E7:CC:55:0D:40:96:38:FD
Certificate issuer: /CN=74c17c3f45fc59ee6675f10914ec3a9e68b7238f
Certificate serial: 05922F9A
Authority key identifier: 74:C1:7C:3F:45:FC:59:EE:66:75:F1:09:14:EC:3A:9E:68:B7:23:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMF8P0X8We5mdfEJFOw6nmi3I48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/wHsavIqZj73PycRp58xVDUCWOP0.roa
Signing time: Sat 12 Feb 2022 22:07:08 +0000
ROA not before: Sat 12 Feb 2022 22:07:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3257
IP address blocks: 86.111.228.0/24 maxlen: 24
193.135.15.0/24 maxlen: 24
193.135.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93466522 (0x5922f9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c17c3f45fc59ee6675f10914ec3a9e68b7238f
Validity
Not Before: Feb 12 22:07:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c07b1abc8a998fbdcfc9c469e7cc550d409638fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:85:04:be:36:83:2b:c2:e4:f5:c7:65:f5:97:
10:38:b6:fe:c3:04:a5:ea:50:d8:9a:76:a5:a4:86:
7a:1a:c0:48:a7:b2:35:af:0b:14:5c:89:c5:d5:6f:
cc:26:9d:79:19:ed:a1:b0:8e:a1:10:f7:8f:40:8e:
70:7d:3c:1d:71:cc:6d:cf:84:b5:ec:33:eb:8f:8b:
fe:06:8e:e9:fe:33:5c:c7:72:92:65:e7:96:43:44:
9e:b7:bd:a5:00:fd:66:2f:69:8d:3a:8e:c0:c1:bd:
f4:6c:98:99:33:49:95:52:0d:4d:29:2e:fc:cb:d9:
49:f2:e4:13:ec:55:ee:0d:f4:0e:6b:9b:7d:90:b3:
78:bf:cc:a5:40:dd:88:7a:08:48:dd:15:85:74:68:
be:ef:f1:14:f2:ac:be:6b:c8:ce:b9:ac:2d:80:59:
94:8d:36:15:7c:e2:43:18:43:e0:e7:98:ed:7c:1a:
50:10:fa:64:8a:2a:0e:e0:6f:24:46:2d:5b:af:9c:
f4:eb:64:71:b4:f2:ff:05:19:ea:d2:63:41:6b:bd:
6f:0b:5b:12:0b:8f:ba:f7:bb:5a:ad:5a:c1:f2:c1:
71:4c:16:b3:e1:9b:b6:9d:a8:7b:6e:e6:8a:fb:f3:
63:36:3c:2f:90:61:6e:62:dc:0b:a5:a4:e6:20:f0:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7B:1A:BC:8A:99:8F:BD:CF:C9:C4:69:E7:CC:55:0D:40:96:38:FD
X509v3 Authority Key Identifier:
keyid:74:C1:7C:3F:45:FC:59:EE:66:75:F1:09:14:EC:3A:9E:68:B7:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMF8P0X8We5mdfEJFOw6nmi3I48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/wHsavIqZj73PycRp58xVDUCWOP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/dMF8P0X8We5mdfEJFOw6nmi3I48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.228.0/24
193.135.15.0/24
193.135.24.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c5:ed:86:18:5a:98:30:f8:69:f2:22:59:45:fd:d1:b7:b4:
ca:b4:cf:81:12:7a:a8:21:c2:98:11:bf:8a:7f:96:cf:5b:52:
46:06:9e:e0:b1:0c:9c:9a:dc:ee:a8:12:6a:90:b8:76:6d:89:
fd:1f:36:0f:b8:45:02:e5:de:c4:c5:0a:7f:2c:f6:f6:a4:bb:
f8:f7:8f:d4:8c:b6:e2:3f:e5:42:2b:01:53:3a:dc:46:6f:38:
73:a5:9e:da:60:07:20:15:9c:43:61:37:21:cb:dd:d1:6f:2e:
97:29:41:e2:68:d2:a1:3e:d5:28:0b:3b:1e:30:b4:86:45:42:
f2:71:6c:74:e9:ef:3f:88:24:0d:65:52:42:5a:be:b1:07:5d:
54:1a:39:ee:12:fb:53:65:21:ec:4c:7b:f4:66:6a:48:dd:10:
c4:05:5d:c8:e9:7e:37:e4:e7:16:dd:25:0a:55:86:03:e5:90:
5b:2f:5d:e0:4e:15:ab:01:25:1f:1c:ec:2e:fb:94:2e:eb:54:
b4:d6:cb:96:bb:e8:31:d0:13:91:d6:c4:4f:c7:1f:30:31:fd:
d5:03:6c:ed:79:33:91:57:d8:01:c4:28:a3:cc:51:8e:56:83:
42:b1:bb:08:92:3e:94:b2:0c:ea:7b:71:51:2a:c8:3a:9d:57:
14:57:4a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:51 2024 by rpki-client on console-ams.rpki-client.org