Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/a8f1e9-6e36-4306-aec1-1f36c453f31b/1/wz6hdt9zPSZlQ1FhZYQYqFpqlZE.roa
File: wz6hdt9zPSZlQ1FhZYQYqFpqlZE.roa (raw, json)
Hash identifier: CysiM7Zw8J1fTbE8Ml+Aj5mrLpf1Gs01hlGpxrzQw48=
Subject key identifier: C3:3E:A1:76:DF:73:3D:26:65:43:51:61:65:84:18:A8:5A:6A:95:91
Certificate issuer: /CN=adc2dadd97390070af707fa6c2322d36b78e2008
Certificate serial: 0888F896
Authority key identifier: AD:C2:DA:DD:97:39:00:70:AF:70:7F:A6:C2:32:2D:36:B7:8E:20:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcLa3Zc5AHCvcH-mwjItNreOIAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/a8f1e9-6e36-4306-aec1-1f36c453f31b/1/wz6hdt9zPSZlQ1FhZYQYqFpqlZE.roa
Signing time: Sat 01 Jan 2022 01:50:54 +0000
ROA not before: Sat 01 Jan 2022 01:50:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51086
IP address blocks: 194.28.240.0/22 maxlen: 22
194.28.240.0/24 maxlen: 24
194.28.243.0/24 maxlen: 24
194.28.242.0/24 maxlen: 24
194.28.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143194262 (0x888f896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc2dadd97390070af707fa6c2322d36b78e2008
Validity
Not Before: Jan 1 01:50:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c33ea176df733d2665435161658418a85a6a9591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:40:68:af:18:4e:d2:ec:51:ec:50:68:99:
e4:88:18:08:c5:82:23:43:27:e5:21:cc:84:06:c8:
0a:36:5c:00:f3:d1:03:a1:9a:92:e4:51:05:a3:a0:
f9:5f:40:ab:8b:a9:26:b6:89:fa:c9:cd:e8:b1:3a:
f6:75:b3:3a:42:ea:3e:37:4a:a5:2e:36:74:cd:97:
c0:5a:6d:e5:79:1d:c2:99:93:ac:da:f7:89:fd:95:
d3:bc:7b:53:ea:a0:42:f9:7f:26:cd:b7:4d:d4:29:
7a:30:da:8c:7a:f4:70:82:d6:89:e6:62:ca:2d:fd:
00:07:0b:57:1e:2d:08:2e:3e:7a:74:96:27:db:a8:
1c:5f:5b:93:16:00:d3:1f:a4:0f:92:10:f7:fd:b4:
33:3d:49:06:7d:2c:63:ea:d4:bf:56:a9:c2:5b:43:
e5:9c:ea:17:7b:17:2c:a8:a9:1b:fb:1a:e6:60:d6:
56:f6:d1:9c:de:88:ee:86:a1:fb:e0:a2:44:ca:d5:
59:c3:70:46:e2:b2:f2:34:33:a6:68:f1:f8:64:e4:
11:50:d2:fc:f2:b4:73:51:82:85:8a:17:47:6d:80:
8c:5c:c5:0a:e8:08:48:d6:b9:47:04:d4:31:96:78:
1a:30:c5:ec:41:1e:b3:bf:90:fe:de:47:68:28:6f:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3E:A1:76:DF:73:3D:26:65:43:51:61:65:84:18:A8:5A:6A:95:91
X509v3 Authority Key Identifier:
keyid:AD:C2:DA:DD:97:39:00:70:AF:70:7F:A6:C2:32:2D:36:B7:8E:20:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcLa3Zc5AHCvcH-mwjItNreOIAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a8f1e9-6e36-4306-aec1-1f36c453f31b/1/wz6hdt9zPSZlQ1FhZYQYqFpqlZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a8f1e9-6e36-4306-aec1-1f36c453f31b/1/rcLa3Zc5AHCvcH-mwjItNreOIAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.240.0/22
Signature Algorithm: sha256WithRSAEncryption
16:1a:fd:15:c6:85:01:ba:b0:46:97:0c:52:21:7b:2a:51:4c:
40:0f:92:c0:a6:a7:7e:cc:d8:54:19:9a:50:3c:89:94:97:e3:
31:eb:3c:d6:fb:e8:25:7c:b2:ab:71:6a:a2:d8:e0:ab:90:13:
38:13:1a:72:68:ba:8b:ee:59:e1:d0:6a:6e:56:fb:ef:73:d6:
11:85:ea:a9:07:3c:51:ca:1a:66:28:0d:ac:2f:66:ab:b8:f8:
d3:7b:70:83:be:e5:12:bc:cb:78:12:d6:fe:1c:7f:c1:ee:96:
e1:c8:0b:0d:78:0b:24:ee:fc:da:c3:e1:54:29:e7:6e:2b:04:
97:9d:7f:fd:dc:fc:72:5b:59:a1:33:bc:52:c5:c3:88:ef:0a:
87:86:b8:ec:e7:97:c3:f8:c9:03:c3:94:33:70:50:a0:0a:d8:
b5:ce:d1:eb:85:5a:2d:10:3f:63:07:d4:18:5d:b3:64:1f:c4:
ba:09:7f:d8:96:8f:6a:a0:73:9f:6e:71:d1:85:16:aa:8c:70:
9d:93:16:60:1c:83:78:d7:78:3c:f0:ba:2c:2f:db:4c:d2:9f:
a9:8e:0a:fb:67:b9:65:f8:65:91:2c:1e:e9:36:53:2c:ef:f3:
5e:45:7f:9b:fb:7b:e7:79:82:3b:31:e3:f6:ec:2c:9d:1d:8f:
ff:ad:1f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:32 2024 by rpki-client on console-fra.rpki-client.org