Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/wsK0D8wDr8rujESkvsS_drCnVNM.roa
File: wsK0D8wDr8rujESkvsS_drCnVNM.roa (raw, json)
Hash identifier: p/xmzfJoMSS5uzc/tb89aWTa4Tqg7wGtnKEFFnJ7vls=
Subject key identifier: C2:C2:B4:0F:CC:03:AF:CA:EE:8C:44:A4:BE:C4:BF:76:B0:A7:54:D3
Certificate issuer: /CN=12608e7181a303df044911ab4f2d51c2887ef278
Certificate serial: 018A6F32CAE407BF64859BE0F5A56509E892
Authority key identifier: 12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/wsK0D8wDr8rujESkvsS_drCnVNM.roa
Signing time: Thu 07 Sep 2023 10:31:54 +0000
ROA not before: Thu 07 Sep 2023 10:31:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40065
IP address blocks: 45.149.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:32:ca:e4:07:bf:64:85:9b:e0:f5:a5:65:09:e8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12608e7181a303df044911ab4f2d51c2887ef278
Validity
Not Before: Sep 7 10:31:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2c2b40fcc03afcaee8c44a4bec4bf76b0a754d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:41:73:6f:d9:b2:8e:2d:fc:ef:8a:19:47:a0:
97:ec:e8:74:9a:c1:b4:bc:31:a5:d6:f1:9f:ef:fd:
79:30:55:0b:8f:44:16:d4:c4:89:f7:f8:5c:d9:be:
9f:93:19:dd:6b:d9:98:9b:fe:40:0d:61:25:ff:a8:
6a:73:67:bf:6a:86:f1:f2:81:3b:67:e4:47:51:4e:
38:55:ee:e3:b2:8e:b6:6b:74:6c:12:87:3a:e8:ec:
86:23:3a:8f:02:1d:20:e2:4d:1f:61:dd:6a:b4:23:
04:b7:db:92:8f:a5:d3:ce:5a:18:b7:d7:8a:e7:fc:
60:e7:d9:e1:ea:bb:b7:49:71:bd:78:26:b2:e9:65:
bc:91:e2:4e:63:24:af:45:2c:0f:01:e9:e2:d8:af:
f2:a6:32:4d:e5:31:e0:69:2e:0e:38:b4:96:19:09:
ed:e5:64:e3:7b:dc:e3:54:d5:de:eb:81:72:ea:4a:
3c:56:1a:e3:66:1c:5a:68:99:34:a4:e4:7a:fc:59:
53:26:ed:ec:a5:8e:1c:cb:6b:04:4a:72:4a:db:6d:
5f:19:db:bc:a4:1f:5a:0c:62:1b:21:bc:2a:8a:03:
39:7e:95:3c:06:14:37:ee:c1:12:bf:42:9b:4d:c8:
00:d5:72:2d:2f:91:9a:32:52:78:04:93:0c:48:1c:
c9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C2:B4:0F:CC:03:AF:CA:EE:8C:44:A4:BE:C4:BF:76:B0:A7:54:D3
X509v3 Authority Key Identifier:
keyid:12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/wsK0D8wDr8rujESkvsS_drCnVNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/EmCOcYGjA98ESRGrTy1Rwoh-8ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.17.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a1:60:59:47:72:3f:c7:a1:48:e9:de:86:b2:d8:a5:a1:8b:
a5:42:bd:36:6c:d6:bb:c2:be:a2:8a:d0:3a:97:c4:a9:a7:e3:
cf:f4:02:cf:a0:cb:08:01:52:c9:de:19:17:d3:30:c8:4b:8d:
24:cb:4d:fa:c7:e6:c8:09:2f:e6:d2:7b:df:04:20:c9:fc:6f:
5d:46:ce:8d:4d:c7:6f:44:e9:dc:de:3d:89:32:83:b0:f1:50:
88:bd:27:f1:0c:7a:e7:5b:56:5c:63:4d:af:79:15:79:7b:37:
09:03:50:98:42:94:f1:e1:e8:28:d0:fa:27:3b:83:f3:f2:ca:
6e:93:16:c1:f3:eb:56:93:93:76:41:4e:31:a9:1b:c3:a7:9e:
26:c0:bf:1d:21:d6:fb:2d:57:0f:f9:6f:51:7b:d4:3c:ee:aa:
f5:55:4b:68:98:db:f9:d3:51:c9:a0:af:ed:a7:99:ba:cd:dd:
71:47:7e:41:36:91:cc:36:ca:da:5c:97:84:15:eb:d1:f3:38:
22:26:68:43:73:8d:77:56:59:ef:bb:00:82:44:45:d7:c5:5c:
9c:ce:57:a5:2c:02:00:7b:a0:c8:d9:ea:8d:31:63:7a:5f:91:
db:24:7d:c5:e5:da:9d:e4:17:4d:3f:bb:cd:8b:88:97:20:54:
e6:6e:45:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:53 2024 by rpki-client on console-ams.rpki-client.org