Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/WF1pgVoViXjG1TXvka170bQUFVw.roa
File: WF1pgVoViXjG1TXvka170bQUFVw.roa (raw, json)
Hash identifier: s9kqeJLXe76eQS5HB24sg7H6H93iaq/hoFsrGCSkQL4=
Subject key identifier: 58:5D:69:81:5A:15:89:78:C6:D5:35:EF:91:AD:7B:D1:B4:14:15:5C
Certificate issuer: /CN=fe5ef4b0f268d1ec24ccf542b4811d307aef0034
Certificate serial: 0189654A8E8426411152A96890FFA2F6DB3D
Authority key identifier: FE:5E:F4:B0:F2:68:D1:EC:24:CC:F5:42:B4:81:1D:30:7A:EF:00:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l70sPJo0ewkzPVCtIEdMHrvADQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/WF1pgVoViXjG1TXvka170bQUFVw.roa
Signing time: Mon 17 Jul 2023 19:18:52 +0000
ROA not before: Mon 17 Jul 2023 19:18:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 176.116.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:8e:84:26:41:11:52:a9:68:90:ff:a2:f6:db:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5ef4b0f268d1ec24ccf542b4811d307aef0034
Validity
Not Before: Jul 17 19:18:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=585d69815a158978c6d535ef91ad7bd1b414155c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:31:8c:06:4c:22:6b:82:57:13:d7:88:a7:11:
54:72:51:8d:d8:de:83:77:2f:0b:8a:f1:b8:18:5e:
6f:69:c3:1d:80:a4:a1:77:6a:29:be:97:65:ac:2b:
d7:d6:ae:42:11:18:85:74:57:1b:66:df:c6:7c:85:
0e:39:2c:7a:f8:70:60:91:ca:c1:ed:38:db:e0:c0:
1d:d7:c6:39:c3:2c:21:c6:b6:54:97:5d:2a:8e:f2:
89:2d:85:c4:05:23:9f:59:51:5c:93:22:ba:27:d6:
42:86:42:c0:68:08:b9:44:dc:ea:e9:c2:a8:6b:77:
81:5c:b0:c5:bc:ce:09:49:48:d2:dd:2b:a8:fd:1e:
21:c3:86:f6:c0:77:4f:91:44:38:99:d3:33:c8:25:
93:7a:e8:2b:26:e5:e5:19:b4:20:a0:b0:ce:8f:01:
9e:f8:da:1e:cc:25:ee:32:9e:34:e5:b1:85:09:85:
99:76:62:45:23:2f:30:17:0d:bd:5f:35:fd:86:45:
29:58:a0:92:86:a8:20:9d:a3:ad:c6:16:a3:5d:ee:
db:55:1f:36:f4:51:b8:90:8e:28:04:7d:69:c7:4a:
89:99:d9:bf:48:1e:58:20:19:d5:79:1f:ca:86:17:
14:55:09:c1:63:57:9c:eb:1a:c8:fe:6d:72:7a:3d:
23:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5D:69:81:5A:15:89:78:C6:D5:35:EF:91:AD:7B:D1:B4:14:15:5C
X509v3 Authority Key Identifier:
keyid:FE:5E:F4:B0:F2:68:D1:EC:24:CC:F5:42:B4:81:1D:30:7A:EF:00:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l70sPJo0ewkzPVCtIEdMHrvADQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/WF1pgVoViXjG1TXvka170bQUFVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/_l70sPJo0ewkzPVCtIEdMHrvADQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.8.0/24
Signature Algorithm: sha256WithRSAEncryption
96:27:14:8e:7a:a2:8c:7c:78:94:1a:3f:42:48:7e:74:19:db:
5d:30:b1:d7:a1:05:5b:87:53:74:73:5a:2d:01:70:81:5a:b2:
c5:2f:5d:ee:60:ad:eb:93:95:97:a0:f0:3c:99:5c:70:42:ad:
0b:95:36:59:33:30:b5:7f:5b:e0:a9:92:f9:f7:ea:fd:79:20:
1a:86:10:56:3a:c8:d3:dc:b9:6a:af:0c:99:38:fc:8d:5d:61:
53:e3:97:26:18:c0:9b:5e:37:f1:f5:ef:69:90:28:72:6c:2c:
40:a3:31:b3:d5:e4:8a:2a:f5:a4:a6:56:9f:b5:3f:48:bd:c2:
e3:8a:2d:aa:32:8b:cc:46:f2:10:6a:b0:06:5d:50:7c:82:21:
76:48:88:b2:4f:c0:27:1a:d9:6a:c9:06:f9:0c:e2:31:0c:10:
c0:99:20:4c:e5:bc:b4:72:91:21:a2:07:27:b0:6d:41:0f:b2:
87:f7:72:30:87:ef:a7:97:a0:bd:0c:64:f3:a2:8c:b9:3d:50:
b0:37:2f:4b:eb:1d:60:85:f5:6e:cc:91:f3:8c:a3:6c:ce:d9:
c9:bc:c9:71:62:cc:29:b0:42:69:22:21:ca:89:fb:40:30:01:
69:7c:80:20:ba:be:c3:bd:a0:a2:1c:e4:68:cc:cb:be:79:98:
c4:0b:a6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:56 2024 by rpki-client on console-ams.rpki-client.org