Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/whwoQVdMAopTyIO8QmxWixsPGhE.roa
File: whwoQVdMAopTyIO8QmxWixsPGhE.roa (raw, json)
Hash identifier: +mWPHxMeJTO0VIE2q+6X85jvN0bURVZuk7Csjw6NObE=
Subject key identifier: C2:1C:28:41:57:4C:02:8A:53:C8:83:BC:42:6C:56:8B:1B:0F:1A:11
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01842F6BE145A6451D4F3F726AFC78AD7670
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/whwoQVdMAopTyIO8QmxWixsPGhE.roa
Signing time: Mon 31 Oct 2022 19:01:49 +0000
ROA not before: Mon 31 Oct 2022 19:01:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 195.206.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2f:6b:e1:45:a6:45:1d:4f:3f:72:6a:fc:78:ad:76:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 31 19:01:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c21c2841574c028a53c883bc426c568b1b0f1a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:37:5a:30:b0:98:de:7b:f5:81:54:30:ba:
c0:e5:c1:1d:c8:4e:f1:72:be:1c:42:a5:b3:12:9e:
9e:8b:b0:60:4b:45:78:08:0f:47:7e:da:04:8b:50:
c0:c5:38:0a:74:57:ad:24:03:a6:13:cd:28:18:00:
57:9a:16:fb:1e:09:74:d5:75:c7:ff:6d:9a:56:59:
33:ef:7b:ce:c4:73:c8:36:93:3d:c6:ce:5e:c4:98:
9c:86:52:73:d8:d3:86:b0:17:78:ce:82:69:e5:6a:
3d:6b:7e:4d:0c:85:7e:3b:3a:d4:9c:9c:b0:22:31:
68:c3:3e:fd:91:df:f8:ef:07:ae:f8:15:12:40:31:
c4:29:a9:92:c9:86:d5:76:68:b4:c7:d0:2e:dd:9b:
02:bc:71:4e:9a:30:5b:8d:20:57:71:af:da:c2:44:
50:92:66:70:cb:7b:60:8d:4b:97:bc:a5:a6:97:f5:
47:c4:0c:1e:76:b5:4b:43:c3:41:ea:7b:a3:e1:65:
bf:63:83:f3:fb:e8:f5:f3:53:4b:f5:4e:dd:60:41:
4b:2f:2e:ea:db:6b:ed:9c:e4:5d:ac:4f:e6:0c:cc:
e6:17:9d:b6:a7:39:e8:90:05:21:bf:88:98:d6:87:
ff:14:59:9e:2b:b0:db:87:16:5b:4d:a4:79:e0:21:
54:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1C:28:41:57:4C:02:8A:53:C8:83:BC:42:6C:56:8B:1B:0F:1A:11
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/whwoQVdMAopTyIO8QmxWixsPGhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.230.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:24:9b:c6:ec:a1:c9:e4:ef:85:47:c5:7e:32:08:0c:17:2c:
f5:9a:06:98:8a:e3:1b:58:cf:74:7b:ce:ff:a3:ce:b8:7b:6a:
fe:3f:90:f4:8f:d3:39:97:66:d6:46:a9:de:f3:57:1a:e5:8b:
6e:e0:34:eb:c6:7b:8a:7f:16:b4:88:9c:2e:2c:3d:dd:60:6e:
2e:52:93:e5:5c:b4:92:56:a8:de:97:02:15:b5:1d:ba:37:d6:
06:90:3a:cd:bf:55:61:d3:73:b4:b6:57:8c:b3:97:27:e9:c0:
e9:72:ba:9e:b4:0f:b7:bf:3b:1e:94:08:51:1b:aa:3c:50:4f:
26:5d:02:48:98:86:13:a8:d4:e9:94:37:ef:8f:24:64:33:f7:
f3:39:c7:6c:dc:63:5f:bd:20:fe:55:11:09:0f:73:bc:a0:a7:
f0:1b:cf:00:37:5e:ba:5f:2b:6a:c6:13:ac:ce:8d:fb:5a:b1:
4c:3e:c3:93:79:54:15:af:73:19:d2:94:e1:8a:a7:74:63:c3:
9d:bd:ff:5b:09:f2:70:6e:a8:67:da:ea:7e:d3:af:ca:89:bd:
34:3a:4c:d4:67:8b:b6:e9:0d:29:45:74:d5:49:51:65:92:c5:
c4:73:a9:05:e9:44:d3:90:43:4f:61:27:1d:bb:c8:55:c3:d8:
af:10:b5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org