Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/wTC5WQ8IgxKK-w18y7p9FpAM1eg.roa
File: wTC5WQ8IgxKK-w18y7p9FpAM1eg.roa (raw, json)
Hash identifier: 1AmlqD6PVmTgRwlpOV45QI7CHe6qWmdqSorPw7bZlT0=
Subject key identifier: C1:30:B9:59:0F:08:83:12:8A:FB:0D:7C:CB:BA:7D:16:90:0C:D5:E8
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0186783EAA718A9FF054DABC5931F3E259E7
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/wTC5WQ8IgxKK-w18y7p9FpAM1eg.roa
Signing time: Wed 22 Feb 2023 08:30:18 +0000
ROA not before: Wed 22 Feb 2023 08:30:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 85.237.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:3e:aa:71:8a:9f:f0:54:da:bc:59:31:f3:e2:59:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Feb 22 08:30:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c130b9590f0883128afb0d7ccbba7d16900cd5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ac:16:5b:6f:70:d3:3c:81:8a:da:04:31:ba:
a8:46:e5:dd:95:a8:24:d0:5f:c1:8d:e1:6b:8f:f2:
b2:80:0f:b5:4b:e0:bd:c5:cd:93:ec:92:a4:f6:5c:
a7:81:b4:42:55:e2:8f:1d:27:de:68:80:8d:5f:83:
d5:1f:fc:da:92:d1:15:e9:3d:6b:c8:cb:9a:ca:c0:
3a:60:cc:21:fb:2e:cf:d0:cc:f6:21:b8:3e:75:e3:
02:02:c2:ef:de:73:88:6d:5b:2c:40:00:87:01:06:
a0:1e:3a:3d:26:b6:1b:37:d3:03:e7:f9:fa:f1:98:
a7:72:48:4d:32:46:ea:a8:46:fc:52:89:54:18:9b:
3d:50:02:cf:00:cb:e0:12:57:49:0e:53:0a:51:db:
d9:3a:b8:61:3c:53:e5:9b:06:7a:ab:21:16:e7:bc:
22:3a:41:a5:7e:be:0c:fe:7f:29:8c:1b:85:e3:73:
3d:e2:d8:83:86:dd:43:92:c2:f2:b5:d9:7f:f2:5c:
9c:2d:c1:6c:30:30:7d:06:dc:63:a9:3e:7e:bf:a1:
80:5a:d1:3d:81:e3:4f:61:27:cf:a2:30:75:f2:02:
22:da:dc:43:e1:a0:a1:46:eb:19:2f:d9:94:d0:4a:
ea:46:a3:f9:58:62:3f:8d:7e:1b:59:50:5a:7c:3c:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:30:B9:59:0F:08:83:12:8A:FB:0D:7C:CB:BA:7D:16:90:0C:D5:E8
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/wTC5WQ8IgxKK-w18y7p9FpAM1eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.206.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:e5:91:10:8c:15:ca:d4:de:53:a1:a1:95:dd:46:91:02:a8:
30:59:f1:96:05:fa:20:25:71:3d:70:3a:87:87:aa:a2:54:e6:
53:d2:a2:55:1f:20:6f:d4:ee:4e:d8:a9:b5:d8:67:26:12:f3:
ef:f7:73:3e:a1:89:aa:80:a6:5a:5c:4e:1d:2f:ab:ac:d9:cb:
8a:29:47:dd:66:b3:71:6d:f1:ca:39:24:39:14:18:81:59:29:
86:e9:b8:f9:79:ca:c7:ac:1c:86:41:1f:21:b6:45:08:7f:75:
c2:a7:6d:2c:87:71:82:bf:03:0a:95:59:4f:08:c8:d7:46:c3:
82:6b:90:b9:09:d8:c3:b2:94:18:26:79:b3:12:c2:38:e0:b8:
fe:79:00:f7:e9:db:d8:f8:ff:0b:f3:6c:ea:c7:71:51:ca:e0:
7d:87:c3:e3:b1:e7:05:27:97:2c:84:7b:85:b8:13:15:d9:dd:
85:b6:96:cc:8e:7a:84:05:9a:76:6a:44:f8:5b:e5:3b:40:65:
80:f7:bd:9e:05:97:da:de:5b:85:d2:b3:15:20:32:01:f0:d6:
c1:88:a7:0d:b2:6d:64:aa:15:4b:44:6a:10:dd:00:2d:88:e9:
b0:67:8a:bb:34:86:eb:d3:c9:91:a7:23:ba:82:e5:d5:6b:76:
0d:64:91:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:44 2024 by rpki-client on console-ams.rpki-client.org