Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/24e16c-1b0d-4a81-a2dc-63b5a9c1332c/1/WYnb5YzCm6Y9a-mb1olyTyjyXrk.roa
File: WYnb5YzCm6Y9a-mb1olyTyjyXrk.roa (raw, json)
Hash identifier: DqwXisANKQDPMwNx7//oHmd5OvpIfce5xBHeDH35O3c=
Subject key identifier: 59:89:DB:E5:8C:C2:9B:A6:3D:6B:E9:9B:D6:89:72:4F:28:F2:5E:B9
Certificate issuer: /CN=423f8cf872b491e055c046c04b26c651a29e92fe
Certificate serial: 0185739F2AD18E9F4CF3AE7A99756C0B36C0
Authority key identifier: 42:3F:8C:F8:72:B4:91:E0:55:C0:46:C0:4B:26:C6:51:A2:9E:92:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj-M-HK0keBVwEbASybGUaKekv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/24e16c-1b0d-4a81-a2dc-63b5a9c1332c/1/WYnb5YzCm6Y9a-mb1olyTyjyXrk.roa
Signing time: Mon 02 Jan 2023 17:54:48 +0000
ROA not before: Mon 02 Jan 2023 17:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57426
IP address blocks: 94.231.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:9f:2a:d1:8e:9f:4c:f3:ae:7a:99:75:6c:0b:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423f8cf872b491e055c046c04b26c651a29e92fe
Validity
Not Before: Jan 2 17:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5989dbe58cc29ba63d6be99bd689724f28f25eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a2:11:f6:05:aa:04:f8:0c:a0:94:00:0a:cf:
e3:ef:5e:a9:ba:de:9a:80:25:0d:05:f9:51:f3:3f:
67:67:47:ce:9b:57:ae:88:da:c4:b3:d5:a1:dc:f4:
de:de:f7:f4:4b:1a:7e:e8:33:6a:44:e5:4b:b4:2c:
8d:bd:3a:f8:41:d6:66:a1:5b:5f:f3:24:f3:81:c1:
24:fd:db:23:fb:14:63:22:14:a1:fd:6e:cb:ca:39:
02:78:c8:f3:9b:1b:d6:c8:83:b6:42:7b:d1:bf:48:
91:b1:00:c0:7c:0e:c7:75:c6:be:bc:55:3f:ce:73:
97:e9:98:cf:5e:a3:ec:17:3e:06:89:90:bc:7c:6a:
92:e2:c9:77:b9:97:cc:08:0a:5d:5e:43:b9:49:6b:
fa:3b:96:ee:59:b7:6b:0a:3b:43:f8:7e:4d:a8:8f:
f0:74:e8:e6:e8:03:50:7c:ed:4d:90:a2:11:e7:bb:
3c:fd:52:c0:b1:36:6b:60:2f:d0:b1:91:6f:ac:a7:
76:33:8b:ce:03:94:b1:e2:24:ec:76:94:c5:54:de:
0d:76:b0:7d:ef:8c:d4:fe:5c:4d:b6:d5:96:fe:c2:
68:a9:1f:1b:25:3a:b3:84:70:21:93:90:dd:ff:27:
64:fc:f0:ba:56:ad:f1:b0:c4:cc:a1:ed:68:78:7a:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:DB:E5:8C:C2:9B:A6:3D:6B:E9:9B:D6:89:72:4F:28:F2:5E:B9
X509v3 Authority Key Identifier:
keyid:42:3F:8C:F8:72:B4:91:E0:55:C0:46:C0:4B:26:C6:51:A2:9E:92:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj-M-HK0keBVwEbASybGUaKekv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/24e16c-1b0d-4a81-a2dc-63b5a9c1332c/1/WYnb5YzCm6Y9a-mb1olyTyjyXrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/24e16c-1b0d-4a81-a2dc-63b5a9c1332c/1/Qj-M-HK0keBVwEbASybGUaKekv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.215.0/24
Signature Algorithm: sha256WithRSAEncryption
17:50:01:23:73:b9:2c:b6:3f:c8:d3:34:ae:9b:04:36:71:90:
dd:3d:a0:e9:d2:95:1a:48:d4:a0:6d:aa:d4:6f:96:cd:76:19:
aa:c2:cf:01:90:89:ef:12:17:42:c7:96:47:70:b8:b7:76:01:
bb:66:12:3b:2f:43:a2:8a:9e:c7:25:2a:9f:ab:9d:41:0a:e5:
c4:30:c6:59:38:0b:5b:79:26:ed:77:9f:09:9d:b2:ad:63:00:
db:55:f6:eb:31:7e:63:e3:9d:9e:19:fc:19:91:56:63:e7:db:
1c:ae:44:4c:92:ab:80:e4:35:66:99:81:0e:1b:cf:ea:ae:e9:
29:8a:82:a8:83:29:19:87:17:7b:40:93:66:b3:ff:c1:f1:cd:
78:4e:aa:74:35:4c:70:3d:76:7e:01:14:b5:b1:ec:a1:13:21:
bd:aa:9b:d7:06:d9:a5:7b:33:49:59:4d:3a:28:f2:bb:e2:9f:
1c:ed:f5:f4:f2:0c:a9:90:a7:2b:74:c9:ff:03:21:2e:2e:ff:
46:48:d5:0d:d8:43:3b:e8:9a:58:db:60:2d:9a:60:47:0f:28:
8a:29:5e:7d:ee:53:2d:d6:61:9f:8f:7d:72:78:6b:21:4a:62:
4d:c6:be:4d:b7:66:72:7a:c3:2d:3e:86:cf:9b:9f:ef:ab:69:
ba:43:05:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:20 2024 by rpki-client on console-ams.rpki-client.org