Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/89fa49-43d2-49a7-8e58-3b2a32571673/1/WoqshTn2aUuzBPuvV-7iIVcNhKI.roa
File: WoqshTn2aUuzBPuvV-7iIVcNhKI.roa (raw, json)
Hash identifier: M+g8XR6lJsftQBkzF+2NpQ2wM46lbZotw8KMyrKNeNI=
Subject key identifier: 5A:8A:AC:85:39:F6:69:4B:B3:04:FB:AF:57:EE:E2:21:57:0D:84:A2
Certificate issuer: /CN=67b22c9c4c9b45b9f2a0d43678e6b34bc09110c4
Certificate serial: 018573039E665C5B1FE4A9970B6B47487E66
Authority key identifier: 67:B2:2C:9C:4C:9B:45:B9:F2:A0:D4:36:78:E6:B3:4B:C0:91:10:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7IsnEybRbnyoNQ2eOazS8CREMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/89fa49-43d2-49a7-8e58-3b2a32571673/1/WoqshTn2aUuzBPuvV-7iIVcNhKI.roa
Signing time: Mon 02 Jan 2023 15:04:55 +0000
ROA not before: Mon 02 Jan 2023 15:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24875
IP address blocks: 212.18.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:9e:66:5c:5b:1f:e4:a9:97:0b:6b:47:48:7e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b22c9c4c9b45b9f2a0d43678e6b34bc09110c4
Validity
Not Before: Jan 2 15:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a8aac8539f6694bb304fbaf57eee221570d84a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:f6:c6:23:0e:ec:82:62:0b:ff:7a:81:9c:
5f:e2:08:51:8b:0f:b0:d6:ba:07:34:67:08:bf:c4:
c4:4a:48:7c:67:be:f8:db:b8:dd:f3:25:c2:4a:40:
f5:34:67:19:06:66:3b:c7:07:71:31:84:d6:d9:94:
bd:2c:07:37:59:d0:c2:29:13:4c:82:ab:68:19:e5:
c0:fa:63:b9:2e:7c:47:24:90:ed:d8:89:a7:10:71:
f0:0a:1d:2f:08:30:81:56:f1:da:a3:1d:dd:67:0e:
ba:fb:5b:32:53:2f:fc:33:bc:68:b5:03:1e:fc:27:
80:5c:4d:de:6e:12:c0:9e:b4:7f:70:47:48:3c:65:
ad:8c:e4:c1:22:1f:3b:92:1b:fb:73:b8:6f:a2:7b:
5c:c5:1c:bb:9c:aa:c4:56:26:51:d1:ad:39:70:98:
99:8e:f9:50:a4:23:19:6d:51:ea:8e:2a:ac:f4:fd:
8e:90:1e:3e:47:88:8e:7e:e6:0c:8f:81:08:6f:50:
cf:cb:07:57:45:61:9e:0b:51:51:4e:c0:87:ab:98:
fc:1c:0d:8d:cc:58:84:80:c1:b7:fa:6b:11:f1:b1:
ab:48:3f:cf:91:76:82:33:63:b8:f7:af:92:8c:74:
a7:36:c3:11:ac:82:f7:61:78:54:00:b4:2e:fa:e1:
df:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8A:AC:85:39:F6:69:4B:B3:04:FB:AF:57:EE:E2:21:57:0D:84:A2
X509v3 Authority Key Identifier:
keyid:67:B2:2C:9C:4C:9B:45:B9:F2:A0:D4:36:78:E6:B3:4B:C0:91:10:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7IsnEybRbnyoNQ2eOazS8CREMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/89fa49-43d2-49a7-8e58-3b2a32571673/1/WoqshTn2aUuzBPuvV-7iIVcNhKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/89fa49-43d2-49a7-8e58-3b2a32571673/1/Z7IsnEybRbnyoNQ2eOazS8CREMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.115.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b9:2c:71:10:49:7f:ec:2f:de:f5:5b:a5:80:7e:c0:bb:6c:
0b:dd:8c:0c:68:cf:9c:89:7d:57:90:5d:b2:01:aa:0b:31:03:
48:94:ab:04:77:0d:45:18:85:a0:68:55:be:5a:e7:12:93:c3:
9e:a4:8d:c7:0c:2f:2e:09:98:6c:bc:9e:12:b3:fe:7c:3a:18:
6c:dc:c0:23:3f:0f:5f:e8:d3:9a:ac:02:ca:40:b5:c5:5a:ee:
7a:c2:f7:95:9a:22:56:01:0c:b1:73:de:47:ed:d5:1c:2e:e2:
b6:08:ee:26:75:d1:bf:b2:ff:ab:98:c4:c4:75:95:e9:4d:17:
a6:7e:52:bc:bb:06:31:38:06:ce:02:8a:56:de:b1:88:39:3d:
82:5a:06:3f:9b:db:2f:13:1e:32:d0:0a:72:e9:68:61:c9:36:
48:79:42:f4:53:13:69:0e:48:a6:d3:28:93:63:e3:8a:09:2d:
f1:d4:94:5d:be:02:ae:2f:51:a7:3d:22:c4:e6:49:80:cc:70:
78:f9:c7:fe:71:c6:a6:cd:10:d2:8e:db:25:62:87:7f:a7:3a:
86:02:30:9b:c6:2c:98:50:54:e5:b9:3c:f4:32:c9:78:a2:fa:
8f:19:fd:75:e1:5c:f6:49:8f:64:55:70:f3:26:bb:b1:ea:23:
ab:ea:35:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:25 2024 by rpki-client on console-fra.rpki-client.org