Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/wkcVpdTXgtFEnu1E1hTc69yWHIw.roa
File: wkcVpdTXgtFEnu1E1hTc69yWHIw.roa (raw, json)
Hash identifier: WJA3KGRqnqVAAV6aFoyHurrGKnlRDVt2AHPWhOdOmQ4=
Subject key identifier: C2:47:15:A5:D4:D7:82:D1:44:9E:ED:44:D6:14:DC:EB:DC:96:1C:8C
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 037C1DC0
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/wkcVpdTXgtFEnu1E1hTc69yWHIw.roa
Signing time: Mon 07 Feb 2022 07:42:29 +0000
ROA not before: Mon 07 Feb 2022 07:42:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
91.199.163.0/24 maxlen: 24
193.142.4.0/24 maxlen: 24
194.113.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58465728 (0x37c1dc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Feb 7 07:42:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c24715a5d4d782d1449eed44d614dcebdc961c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c4:42:b7:af:9a:7f:43:eb:ae:7a:fc:4f:92:
e3:04:e7:d3:e3:82:5e:a8:8d:a4:6f:84:05:2e:fb:
49:30:71:ac:90:1b:90:1c:89:f8:13:74:ec:a4:43:
ac:3c:08:50:48:1b:23:a4:1c:bf:60:5a:1b:58:7c:
27:a7:2c:64:8c:56:0e:42:85:8b:de:c1:3e:c4:91:
46:63:ee:f4:c3:a9:a0:6a:70:89:b8:bb:e0:eb:12:
88:8f:78:39:3b:2f:83:0d:7d:98:a5:fd:85:7e:76:
84:1a:2a:74:77:ba:d2:a8:1d:f7:83:40:69:3e:d5:
62:c9:a5:bf:23:b7:d4:da:c0:83:0b:47:fd:8b:73:
db:9e:88:f2:2c:1b:bd:af:80:12:e2:ba:b4:33:0c:
c3:fe:a0:f9:f4:9b:d6:c0:db:53:3a:fb:b0:4f:1a:
3e:95:67:6c:de:b1:2f:2c:e6:92:a2:dd:c9:73:c9:
cd:23:a3:31:3d:e2:5c:15:cf:07:c7:35:e0:f4:c7:
53:f0:8a:a3:2e:45:48:23:64:da:a2:14:de:76:df:
39:03:ac:ee:35:a5:80:94:84:aa:65:d9:35:37:97:
b1:40:05:0d:d3:08:6e:39:1b:2a:ca:16:88:7e:89:
5e:00:db:e0:df:81:d5:c0:9c:dc:fb:a3:f1:d6:d1:
7d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:47:15:A5:D4:D7:82:D1:44:9E:ED:44:D6:14:DC:EB:DC:96:1C:8C
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/wkcVpdTXgtFEnu1E1hTc69yWHIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.163.0/24
193.111.125.0/24
193.142.4.0/24
194.113.222.0/24
Signature Algorithm: sha256WithRSAEncryption
29:2b:cf:00:54:a5:4b:36:e6:da:3e:0d:b9:fc:fc:87:7b:f0:
d6:ca:47:42:ec:61:09:39:ac:ab:45:ea:13:ac:e2:bd:cf:c6:
82:cc:ef:37:4c:e3:9e:aa:2c:3b:cb:1c:e9:f8:17:4f:94:9c:
bd:b6:17:8f:e0:81:fd:76:fa:e1:9f:50:66:8d:ee:0f:58:b6:
29:b9:4e:2b:be:70:67:3a:c1:b6:b7:aa:5b:2d:95:35:92:00:
0e:3e:b2:53:98:17:66:e4:f8:77:1c:d3:84:62:d5:01:70:91:
b7:0b:fe:d7:da:b9:ca:2f:f9:bd:8f:97:8a:30:6d:77:58:91:
df:ae:8f:4e:b6:7f:fe:96:1f:ef:39:cf:b4:f3:44:bd:1c:25:
47:7c:6c:70:c3:29:20:6e:8b:cf:59:29:ef:d8:d7:39:45:13:
69:7a:26:8b:c3:01:d1:9b:a6:ae:72:f4:8b:9e:46:18:20:d3:
7a:27:cd:a7:b9:f2:1b:a7:17:46:d6:79:f9:64:a3:db:39:44:
9f:3f:af:6c:d7:48:29:9c:fd:2e:a3:2d:56:7f:76:27:e8:e0:
2c:0a:6d:54:d1:65:10:58:65:d3:5d:43:6f:72:e3:b2:8b:2a:
41:66:35:d9:64:c6:e0:ef:48:34:c3:a8:57:ff:ca:64:b9:12:
04:9d:dc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org