Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/WPAJ1xEwl518L6XInjNLCMOv5oc.roa
File: WPAJ1xEwl518L6XInjNLCMOv5oc.roa (raw, json)
Hash identifier: KtmQ9gC+fwMr2uJVo+uViLiEYw8HxgcSqMLMhrsaZXM=
Subject key identifier: 58:F0:09:D7:11:30:97:9D:7C:2F:A5:C8:9E:33:4B:08:C3:AF:E6:87
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 018216617A0C5685D891C2544F7D31A5AD31
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/WPAJ1xEwl518L6XInjNLCMOv5oc.roa
Signing time: Tue 19 Jul 2022 12:14:23 +0000
ROA not before: Tue 19 Jul 2022 12:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 194.104.156.0/24 maxlen: 24
194.104.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:61:7a:0c:56:85:d8:91:c2:54:4f:7d:31:a5:ad:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 19 12:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58f009d71130979d7c2fa5c89e334b08c3afe687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:80:78:df:f8:3c:2f:f8:6d:a2:4b:fd:f6:da:
83:b8:bb:80:1b:48:18:d9:9b:68:ff:0f:24:da:ae:
f1:ad:b3:ee:82:0e:0d:c9:73:7d:cb:9f:cc:33:c6:
14:08:e0:20:30:e0:c3:54:f6:fc:e6:6b:9a:46:2c:
57:6b:fc:37:e3:32:12:1e:9f:7d:19:f1:b0:49:35:
42:89:6a:c6:6a:36:13:51:97:11:ea:5f:14:f2:b9:
c9:09:28:c3:0c:eb:14:cd:6e:cf:fc:17:d6:29:fb:
db:29:e4:cf:eb:b0:08:cc:b7:8f:34:20:4d:ff:6b:
94:6c:c3:25:d6:83:6a:14:91:71:b3:96:6b:82:5b:
37:aa:a0:cd:8c:e1:44:7a:f8:49:51:a9:72:a7:c1:
d6:1d:e0:84:2e:6d:10:c2:a7:39:3c:42:a5:b4:d6:
3e:4e:51:6c:3d:dd:01:9b:29:8d:e7:c5:0f:f8:b9:
5c:19:6c:1d:85:4b:30:b5:cd:60:44:7e:62:3a:9c:
3c:13:6c:1c:cb:f4:8e:a5:75:5e:e7:58:7a:0d:8f:
8a:85:3a:eb:d4:19:7d:4f:a3:39:ba:c9:55:a3:2a:
00:bd:e9:f9:39:88:b7:ee:be:34:50:32:d7:5f:05:
27:84:72:0e:7b:50:97:ad:42:83:d5:b9:c0:2d:c4:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F0:09:D7:11:30:97:9D:7C:2F:A5:C8:9E:33:4B:08:C3:AF:E6:87
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/WPAJ1xEwl518L6XInjNLCMOv5oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.156.0/24
194.104.158.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:29:fb:18:8d:9a:dc:82:60:40:f2:99:43:cd:36:bd:98:d9:
eb:ac:8e:93:39:a7:59:6b:dc:5c:59:55:4a:45:ca:2d:7e:bf:
bc:79:42:19:fd:c9:6f:cc:5d:1d:bc:46:5a:95:2f:92:d9:cb:
29:47:28:7c:a1:0a:99:97:18:5d:24:b1:a5:a0:30:3c:79:10:
39:e9:57:1a:1e:3b:2f:8b:45:f0:ac:42:7d:66:76:11:99:26:
fd:84:89:b0:06:e8:53:12:19:f3:51:28:7c:ce:e5:a4:f5:87:
d8:55:c5:50:be:23:f2:3f:d0:0d:af:38:41:1f:4a:c8:9a:49:
96:eb:35:ab:c1:2b:ed:6a:8c:b3:b7:f5:a0:fe:f9:91:c0:6a:
25:2e:45:49:6e:94:13:da:0e:ef:a4:00:d3:e7:f1:b6:60:fd:
f8:0e:48:d6:02:8d:e9:ed:59:11:60:1a:62:51:29:c9:88:4e:
85:e6:c9:03:74:86:dc:86:e6:c8:08:9b:7e:8d:8f:be:2a:be:
19:0f:ea:0b:fc:60:ab:96:b5:d0:ff:5d:26:95:b1:2c:fb:5c:
5d:12:b4:f6:1d:11:72:b9:67:bc:6d:f7:2f:9e:79:04:5b:84:
a0:71:e6:fc:60:4b:e6:fb:61:24:13:63:14:5b:dc:bc:c7:28:
a2:c0:27:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org