Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/Wbg5-0cZzY-lUXwo70GwUiyubkQ.roa
File: Wbg5-0cZzY-lUXwo70GwUiyubkQ.roa (raw, json)
Hash identifier: joJekyu5ED8v2Ublp55n+hh8wZdMnSpAvCG8A5vhP9E=
Subject key identifier: 59:B8:39:FB:47:19:CD:8F:A5:51:7C:28:EF:41:B0:52:2C:AE:6E:44
Certificate issuer: /CN=a5c66ed880e4e28e8a6e4a1b5f9e092223502bb6
Certificate serial: 01C2F2C9
Authority key identifier: A5:C6:6E:D8:80:E4:E2:8E:8A:6E:4A:1B:5F:9E:09:22:23:50:2B:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcZu2IDk4o6KbkobX54JIiNQK7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/Wbg5-0cZzY-lUXwo70GwUiyubkQ.roa
Signing time: Thu 19 May 2022 05:48:17 +0000
ROA not before: Thu 19 May 2022 05:48:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 212.23.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29553353 (0x1c2f2c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c66ed880e4e28e8a6e4a1b5f9e092223502bb6
Validity
Not Before: May 19 05:48:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59b839fb4719cd8fa5517c28ef41b0522cae6e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4a:35:bb:5c:bd:2b:76:62:f4:aa:fb:02:f0:
bf:c3:99:9c:51:34:2d:af:38:ed:41:3a:cd:fe:ba:
5b:13:a2:13:ad:e2:0b:d7:86:9c:39:f0:6e:a6:5f:
16:aa:7f:18:b4:5b:8c:22:67:3f:e0:da:29:61:75:
61:c3:12:2b:84:27:2e:a2:e1:7e:10:93:10:e3:dd:
51:1c:7a:bd:69:3c:4f:de:b6:c7:07:e2:de:69:b1:
71:e0:c9:ed:ec:74:2b:01:00:82:be:50:af:17:65:
17:03:f7:7a:d1:1a:cd:27:8c:f0:6d:dc:65:71:12:
fb:89:ca:c3:aa:fc:19:2f:4c:20:8e:82:e5:71:ba:
38:6a:72:1e:ee:45:cb:00:2b:e2:74:ea:e1:74:c0:
1a:68:62:ab:3c:a8:9b:90:dd:17:06:f5:69:67:d9:
03:11:78:96:7b:a6:7c:a2:e0:8c:da:47:0a:fc:cc:
8e:af:4d:ad:29:3e:ed:f7:3d:71:b4:75:8c:b3:6c:
29:92:70:11:be:32:b3:5d:b8:7e:db:cd:a0:8f:e6:
84:43:62:bc:0b:94:5c:61:4b:4f:f9:02:81:80:53:
58:60:c8:95:15:78:7d:d0:e5:4c:df:ba:24:65:c3:
69:67:bf:4c:2b:0c:bb:e0:c2:57:38:92:c1:63:fd:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B8:39:FB:47:19:CD:8F:A5:51:7C:28:EF:41:B0:52:2C:AE:6E:44
X509v3 Authority Key Identifier:
keyid:A5:C6:6E:D8:80:E4:E2:8E:8A:6E:4A:1B:5F:9E:09:22:23:50:2B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcZu2IDk4o6KbkobX54JIiNQK7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/Wbg5-0cZzY-lUXwo70GwUiyubkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/pcZu2IDk4o6KbkobX54JIiNQK7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.212.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:cd:e0:2c:f5:26:30:76:89:bf:e8:e0:5c:9f:41:71:e9:f3:
07:76:9d:dd:28:1c:02:ac:70:01:26:75:d5:8b:22:c0:32:f8:
c5:12:9c:dc:7c:d1:08:c2:80:f1:5a:da:82:41:31:28:3f:a9:
fa:86:84:22:86:39:69:33:60:b3:21:5f:f2:1f:09:dd:91:d3:
9f:17:7a:62:c0:f2:cf:57:c2:9c:5d:7e:3c:51:f1:a8:c0:d1:
ae:d4:d6:16:f0:f4:27:1a:d2:a0:47:8d:b9:ef:b6:0b:9a:cf:
6a:07:a4:3a:19:1d:6b:71:d0:c1:5d:a8:33:54:1b:8c:f0:20:
4a:e3:fc:2a:96:52:0b:9f:4c:a4:bb:b0:df:23:32:e9:86:b8:
01:ef:62:98:ac:a1:de:40:04:d0:e1:5f:77:3b:b7:cc:2d:a4:
bd:7a:b5:5d:26:50:43:f3:77:4b:f8:be:3c:44:58:bc:2d:44:
91:9d:91:d5:06:30:b1:98:85:d9:b9:04:82:ae:07:1e:de:f0:
fd:3b:0a:85:9d:36:6c:f8:20:49:40:30:04:53:80:98:c4:82:
4a:60:3e:50:19:14:b0:3c:d0:50:75:b4:b9:c8:70:b6:4f:3c:
ae:b7:2c:00:19:6e:03:45:51:5e:1a:31:a2:59:74:1f:86:72:
11:9f:c4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:07 2024 by rpki-client on console-ams.rpki-client.org