Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d21a60-950b-4f29-a588-412ae25384df/1/wBDj2unoNV4e4p3jo26Lj7dRbFA.roa
File: wBDj2unoNV4e4p3jo26Lj7dRbFA.roa (raw, json)
Hash identifier: +y3xqPRY8yUvPn859fX1BuPrDMIaLp7zV4y9FryfAC4=
Subject key identifier: C0:10:E3:DA:E9:E8:35:5E:1E:E2:9D:E3:A3:6E:8B:8F:B7:51:6C:50
Certificate issuer: /CN=b634918f4135a42084f1a4661e8ead9a28df8e73
Certificate serial: 01856D9D039D0C0095B90A191B0FCD220226
Authority key identifier: B6:34:91:8F:41:35:A4:20:84:F1:A4:66:1E:8E:AD:9A:28:DF:8E:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjSRj0E1pCCE8aRmHo6tmijfjnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d21a60-950b-4f29-a588-412ae25384df/1/wBDj2unoNV4e4p3jo26Lj7dRbFA.roa
Signing time: Sun 01 Jan 2023 13:54:44 +0000
ROA not before: Sun 01 Jan 2023 13:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 130.255.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:03:9d:0c:00:95:b9:0a:19:1b:0f:cd:22:02:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b634918f4135a42084f1a4661e8ead9a28df8e73
Validity
Not Before: Jan 1 13:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c010e3dae9e8355e1ee29de3a36e8b8fb7516c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:8d:2e:c8:5c:a9:6e:d4:5b:a5:d5:e3:ac:
d0:2d:35:2c:fb:24:1c:8b:f2:2e:1b:78:69:7f:69:
2d:59:f1:af:d6:e2:57:1e:ae:14:50:cb:6e:f4:6a:
42:e5:8a:de:c3:87:79:44:ca:14:f1:20:e6:67:fb:
0e:30:f4:49:b9:4d:3a:57:a5:4c:42:eb:8a:b3:37:
28:32:14:4a:f3:88:06:e9:8c:72:b0:82:81:b2:ea:
8b:28:1b:c9:64:3f:77:90:1f:e7:2d:89:ae:ea:f3:
7d:1d:18:25:7c:6b:ef:eb:6f:bb:2a:5e:b8:32:26:
72:fc:57:89:ba:1b:54:6d:e7:c6:e2:50:45:d8:6c:
b4:fd:59:fe:73:12:77:87:ac:cf:0f:63:94:35:46:
55:1a:94:fc:f8:c9:50:3d:68:42:13:62:8a:97:3e:
09:c9:7f:27:91:72:65:80:14:13:2e:da:55:89:3d:
4d:31:af:09:e5:c2:8a:d4:14:95:a6:e0:0e:37:f3:
62:d3:44:f2:6f:65:57:2c:8f:2a:1f:9e:e0:df:1f:
b8:3c:79:1a:ae:84:d2:a5:fa:0e:2f:2a:a6:dd:8d:
37:dd:ed:9c:73:1d:a3:f3:ba:2a:c5:90:58:a2:76:
8c:63:28:5d:0b:72:8b:1b:3e:48:28:eb:7c:f3:3c:
1f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:10:E3:DA:E9:E8:35:5E:1E:E2:9D:E3:A3:6E:8B:8F:B7:51:6C:50
X509v3 Authority Key Identifier:
keyid:B6:34:91:8F:41:35:A4:20:84:F1:A4:66:1E:8E:AD:9A:28:DF:8E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjSRj0E1pCCE8aRmHo6tmijfjnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d21a60-950b-4f29-a588-412ae25384df/1/wBDj2unoNV4e4p3jo26Lj7dRbFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d21a60-950b-4f29-a588-412ae25384df/1/tjSRj0E1pCCE8aRmHo6tmijfjnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.168.0/24
Signature Algorithm: sha256WithRSAEncryption
95:6c:b9:09:ed:a8:99:a4:21:6a:7e:4e:ba:45:17:b9:cb:b8:
74:d9:12:4c:6a:68:c0:c0:34:74:67:82:5f:f8:40:5b:f3:6f:
a3:a0:44:de:8e:38:6e:20:d9:8f:01:60:f3:9a:b9:65:50:f7:
93:13:d2:ec:7f:f5:48:c8:6a:b5:23:4e:fe:d6:ef:ae:dd:7c:
57:60:d0:7f:21:d8:bc:da:8c:07:07:18:4d:ec:17:37:ea:9a:
f2:82:c0:75:69:4e:f0:97:fc:83:86:08:0b:0f:fb:b0:3b:ae:
e8:1e:2f:c7:20:68:7c:ed:34:71:31:b8:ac:a3:1e:fc:10:21:
62:69:91:31:07:40:83:ea:11:8b:e6:0b:22:f6:16:74:18:d2:
91:06:83:68:6e:23:84:61:1d:0d:39:c9:7d:b8:18:3b:33:ee:
4d:a9:28:4d:d9:61:8b:e0:a1:8f:52:fc:4a:b8:87:b4:25:bc:
ff:a2:fc:c1:af:90:26:4e:43:a2:45:73:10:6f:1f:e0:5c:e0:
8a:74:bd:f6:f1:21:0c:26:17:ec:cb:b2:ba:e6:b4:54:fa:3b:
71:0e:68:dd:c8:fd:30:08:c9:b4:5f:ff:0b:31:59:97:3a:df:
0f:32:4b:f8:32:85:9b:1f:44:91:84:53:c5:64:f8:4b:98:a1:
b7:48:81:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 10:21:45 2023 by rpki-client on console-fra.rpki-client.org