Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/853e39-7482-475d-b488-b16972aab679/1/fWjdb16zzETlUu2CDR9N8zAjGGc.roa
File: fWjdb16zzETlUu2CDR9N8zAjGGc.roa (raw, json)
Hash identifier: spNiJiwv0nkukNjtWrTXFnuWNrAeCaPtmXCZN77ih3w=
Subject key identifier: 7D:68:DD:6F:5E:B3:CC:44:E5:52:ED:82:0D:1F:4D:F3:30:23:18:67
Certificate issuer: /CN=5a4c72c766b13224f8487a4f1b1b41cb88cfa712
Certificate serial: 01848A8581B994F3A4A08D63DBFE81ED0683
Authority key identifier: 5A:4C:72:C7:66:B1:32:24:F8:48:7A:4F:1B:1B:41:CB:88:CF:A7:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wkxyx2axMiT4SHpPGxtBy4jPpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/853e39-7482-475d-b488-b16972aab679/1/fWjdb16zzETlUu2CDR9N8zAjGGc.roa
Signing time: Fri 18 Nov 2022 11:35:15 +0000
ROA not before: Fri 18 Nov 2022 11:35:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209003
IP address blocks: 91.208.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8a:85:81:b9:94:f3:a4:a0:8d:63:db:fe:81:ed:06:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4c72c766b13224f8487a4f1b1b41cb88cfa712
Validity
Not Before: Nov 18 11:35:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d68dd6f5eb3cc44e552ed820d1f4df330231867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a8:8d:e0:53:24:89:0d:2f:fe:c7:58:38:8f:
be:70:85:0b:35:39:ae:d7:18:22:de:ed:85:a1:c4:
ab:fe:22:19:a7:66:9a:2b:b5:26:4b:a2:70:f7:47:
71:98:9d:58:9e:47:0c:8d:24:b6:35:0c:9f:72:d5:
84:64:f3:99:48:1d:23:e3:ed:76:70:0f:15:2c:da:
af:da:84:c9:96:cb:86:37:f4:07:71:eb:24:1c:3f:
0c:36:cc:73:05:f4:8f:68:65:e2:43:40:24:68:66:
3a:28:34:02:df:b8:f4:1f:e0:24:82:66:cb:9b:74:
27:ec:d0:99:bc:c8:31:ec:46:f7:5c:ba:9f:f1:a1:
26:c8:32:f0:10:89:b5:67:4f:9b:0f:8b:2d:f3:a7:
db:5b:93:54:1f:c1:c3:97:d9:5f:a7:be:b0:8c:e3:
a9:86:9d:4a:d2:45:61:49:44:19:67:75:0e:db:12:
0e:53:68:8f:4b:bd:e3:97:05:81:9a:c9:54:5a:df:
2f:fa:22:95:13:5d:94:39:c7:d8:5a:19:95:10:50:
25:9b:b7:b6:e9:79:73:6c:bf:c4:f6:de:6b:75:bb:
61:d0:d5:f8:51:fd:40:67:51:7f:15:a5:7f:4c:c0:
cf:21:b8:67:51:8d:3c:d5:0e:43:0d:e3:cc:47:ea:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:68:DD:6F:5E:B3:CC:44:E5:52:ED:82:0D:1F:4D:F3:30:23:18:67
X509v3 Authority Key Identifier:
keyid:5A:4C:72:C7:66:B1:32:24:F8:48:7A:4F:1B:1B:41:CB:88:CF:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wkxyx2axMiT4SHpPGxtBy4jPpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/853e39-7482-475d-b488-b16972aab679/1/fWjdb16zzETlUu2CDR9N8zAjGGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/853e39-7482-475d-b488-b16972aab679/1/Wkxyx2axMiT4SHpPGxtBy4jPpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.108.0/24
Signature Algorithm: sha256WithRSAEncryption
48:47:3f:37:84:18:08:25:bb:99:14:64:6d:9c:1d:a5:19:0d:
1d:06:c1:01:70:e3:20:1f:c2:b0:e3:3e:e5:17:19:cd:ec:d3:
1e:2a:8f:13:28:b3:52:73:74:f1:1c:54:22:a6:8b:63:df:09:
84:ad:49:b2:db:71:15:e3:37:64:97:37:90:98:92:40:d5:71:
72:73:93:0e:91:e6:a6:02:8b:5a:48:dc:8d:f3:d7:20:b7:28:
fb:d6:bf:ee:4b:70:5f:a0:b8:2a:de:3d:4d:58:18:ac:f7:8a:
2c:4f:88:d8:49:7d:4a:ea:97:ac:6b:c2:e8:3f:38:fd:6e:81:
1d:a8:61:0b:06:6b:e6:7e:74:bc:61:90:40:e0:77:3d:4b:36:
33:86:ae:5d:32:5a:5f:a4:4d:9d:0a:fc:31:72:b7:b5:92:aa:
fb:d3:d4:d5:31:dc:e2:07:5f:33:ca:4c:25:1e:e1:f2:80:c6:
50:e7:06:71:17:01:dc:59:d3:67:84:bf:1c:24:81:79:23:86:
db:fa:b8:ff:93:6b:b9:6b:c9:fe:6a:53:ea:24:02:bf:31:b6:
d9:47:97:04:0a:d6:d5:f2:43:07:54:a2:75:c4:0e:5f:99:63:
b3:30:60:af:c6:e5:75:2f:c6:9b:59:c8:c0:93:f5:c8:bf:8a:
76:a5:05:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:40 2024 by rpki-client on console-fra.rpki-client.org