Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Wd5NZRW6d8Trx7VLN97v4xhZcm0.roa
File: Wd5NZRW6d8Trx7VLN97v4xhZcm0.roa (raw, json)
Hash identifier: GbC+uMEojZdJvMtEDZ/HJHsF3kGpGhJL5HJOHgKjCCs=
Subject key identifier: 59:DE:4D:65:15:BA:77:C4:EB:C7:B5:4B:37:DE:EF:E3:18:59:72:6D
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018C025A9BEE04ADA7758B0F5AA7DA053565
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Wd5NZRW6d8Trx7VLN97v4xhZcm0.roa
Signing time: Fri 24 Nov 2023 17:22:21 +0000
ROA not before: Fri 24 Nov 2023 17:22:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.116.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:02:5a:9b:ee:04:ad:a7:75:8b:0f:5a:a7:da:05:35:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Nov 24 17:22:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59de4d6515ba77c4ebc7b54b37deefe31859726d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:43:9a:87:87:30:3e:85:2f:f8:5f:a8:62:
f1:87:14:14:68:a6:0e:82:86:ac:f9:27:cb:67:b9:
f1:9a:4a:ca:49:b5:3f:4a:cf:9c:c2:6d:4f:81:67:
98:7e:05:47:c6:95:03:f8:9a:92:a7:c3:e5:a9:34:
bf:fc:b4:f1:e1:e9:5a:01:02:a8:f4:81:05:7f:d7:
61:f5:17:17:9d:52:b3:6e:ea:8d:c3:38:09:8a:6a:
e8:83:3b:f5:27:30:48:f5:86:56:35:0d:b0:21:1d:
4b:51:76:b8:65:92:9a:05:d5:51:a8:6e:ba:44:0f:
3a:84:e0:f2:91:54:96:72:1e:3b:2d:bb:31:a3:bc:
df:fa:cd:ad:b2:35:84:ba:b1:2e:ce:92:37:1f:b5:
53:df:d0:44:f9:73:29:32:f9:89:c8:c3:4a:56:d8:
76:31:c8:9a:de:e8:df:20:cc:0b:5a:7e:e2:9b:e0:
a3:e1:59:e9:31:63:f2:6b:ab:93:6d:d8:1f:56:b3:
43:f8:d0:3b:fa:11:b7:32:94:7f:1b:cd:65:db:af:
ac:91:36:7d:45:fe:f1:62:0d:a4:8f:29:a9:f7:5e:
a1:6b:d3:61:a3:5b:0d:d0:52:4c:2b:54:00:ab:fd:
09:f6:56:bf:3b:08:31:c5:19:16:fb:a5:14:c8:9d:
6b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DE:4D:65:15:BA:77:C4:EB:C7:B5:4B:37:DE:EF:E3:18:59:72:6D
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Wd5NZRW6d8Trx7VLN97v4xhZcm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:6e:da:97:15:59:0d:c6:f7:6a:5d:05:be:c9:60:d1:0e:ba:
f7:32:d1:af:41:18:45:07:e4:66:9d:8b:34:53:80:bd:b3:b6:
dd:ba:86:ea:1b:cb:58:dd:e5:bc:41:bb:bb:04:2f:b7:0b:d8:
be:7d:50:37:bb:06:c9:8a:f9:3f:38:95:b6:a1:e0:49:b9:af:
78:4c:46:c0:e6:fa:96:d4:91:b2:05:48:9c:28:40:75:ab:17:
ec:68:d3:05:03:5c:7f:8f:99:a5:ae:5a:6e:32:30:71:8c:93:
ec:c1:53:3c:f5:7c:5a:56:bc:d0:92:3d:14:fe:87:a3:b2:91:
b9:97:22:02:b2:79:c3:ce:9f:ff:64:7f:8b:3d:2f:40:05:55:
2b:85:c2:1c:f2:f8:95:46:f0:b0:9b:e2:0f:fc:eb:c3:ca:8c:
93:08:bd:b6:c2:20:f5:23:e7:73:27:09:61:b8:2b:0f:37:ed:
cf:e1:53:53:fb:66:93:51:e9:08:98:28:5b:53:66:e0:ff:47:
52:67:ce:0a:62:b8:7c:57:d4:4c:bb:20:a5:b4:41:13:a3:d2:
d8:a1:ce:5e:f0:41:47:18:99:ce:a2:a8:96:fa:93:f8:9e:96:
c4:58:6b:53:f3:84:fd:af:fd:13:ad:28:94:52:d1:40:b7:36:
61:f8:78:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:18 2025 by rpki-client