Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/462f92-808c-4440-a905-e7484e2f9aa2/1/wxK84gI3QBEcwen7jU5vNEVqeic.roa
File: wxK84gI3QBEcwen7jU5vNEVqeic.roa (raw, json)
Hash identifier: lofjzOhTe4mu58zNwQb00Cmaew+NDBWwPUOXXX+Fjak=
Subject key identifier: C3:12:BC:E2:02:37:40:11:1C:C1:E9:FB:8D:4E:6F:34:45:6A:7A:27
Certificate issuer: /CN=286f9a9bbb868ce6d43a154e2a7e298b6b2365b2
Certificate serial: 018A5EF589D8A529A4686554B923AF5026B1
Authority key identifier: 28:6F:9A:9B:BB:86:8C:E6:D4:3A:15:4E:2A:7E:29:8B:6B:23:65:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KG-am7uGjObUOhVOKn4pi2sjZbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/462f92-808c-4440-a905-e7484e2f9aa2/1/wxK84gI3QBEcwen7jU5vNEVqeic.roa
Signing time: Mon 04 Sep 2023 06:51:04 +0000
ROA not before: Mon 04 Sep 2023 06:51:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.252.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5e:f5:89:d8:a5:29:a4:68:65:54:b9:23:af:50:26:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286f9a9bbb868ce6d43a154e2a7e298b6b2365b2
Validity
Not Before: Sep 4 06:51:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c312bce2023740111cc1e9fb8d4e6f34456a7a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:27:9b:77:96:c8:70:68:ee:d2:21:f8:f2:24:
8d:36:ca:a8:d3:af:85:f5:63:e3:00:d8:4f:45:15:
b8:16:c2:c9:95:38:7e:4a:64:62:12:b4:66:27:e1:
7a:11:75:04:90:d0:2d:96:e8:de:d9:9c:5b:59:fa:
e7:6d:33:82:76:b9:3b:30:32:72:08:d5:b0:ce:82:
64:58:55:b7:45:8c:a2:87:0c:5d:37:fb:b1:54:fe:
92:0f:7c:07:4b:3d:0e:da:4d:ef:0b:81:5e:30:f7:
a6:7a:8e:3f:73:35:5e:70:20:cc:b9:18:4d:72:0e:
fe:4f:15:c2:4e:6e:2e:90:a5:c3:81:ba:11:90:68:
ba:1a:2f:83:54:58:8f:08:aa:5f:63:b6:7c:48:c2:
a5:b0:38:2e:c0:28:11:c4:2b:ea:2c:29:aa:d7:03:
9f:45:0f:7e:2d:5e:28:0f:56:88:7b:41:a1:b7:82:
5a:92:a7:2a:5e:70:f1:42:a8:7c:31:12:83:6f:c5:
f2:0d:5f:e4:e1:e4:50:7d:74:7b:c2:75:5e:81:6c:
bf:47:16:fc:ca:35:15:de:f4:ed:ca:a3:0e:d1:3b:
73:21:ff:cc:17:41:75:ac:33:85:2e:ca:81:37:53:
a1:06:28:f8:93:44:96:f2:b9:13:61:32:30:46:e4:
35:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:12:BC:E2:02:37:40:11:1C:C1:E9:FB:8D:4E:6F:34:45:6A:7A:27
X509v3 Authority Key Identifier:
keyid:28:6F:9A:9B:BB:86:8C:E6:D4:3A:15:4E:2A:7E:29:8B:6B:23:65:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KG-am7uGjObUOhVOKn4pi2sjZbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/462f92-808c-4440-a905-e7484e2f9aa2/1/wxK84gI3QBEcwen7jU5vNEVqeic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/462f92-808c-4440-a905-e7484e2f9aa2/1/KG-am7uGjObUOhVOKn4pi2sjZbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.211.0/24
Signature Algorithm: sha256WithRSAEncryption
84:99:b6:f2:ea:01:08:b1:ba:17:52:36:22:9b:92:f7:52:53:
cc:6e:1c:48:f3:5e:ef:ea:fe:37:82:f0:c9:79:fd:d9:3a:b4:
29:8e:c8:b9:da:25:23:55:c9:1f:3a:36:05:70:73:ca:f6:dc:
65:1b:f1:33:c1:59:f0:dc:25:8e:d7:19:09:06:95:96:01:06:
c9:a3:78:53:cc:70:3c:52:1a:51:72:2c:59:fb:42:25:7d:95:
31:1e:45:a5:c3:db:ec:1a:4c:ea:6c:88:e3:3d:42:68:43:67:
1d:92:2f:32:18:ab:7c:22:48:d0:a8:77:1c:32:2e:d4:aa:04:
78:28:f1:37:a5:36:0a:47:87:d3:fa:24:8e:4c:a9:0b:6d:de:
b5:0c:e0:d2:d5:d0:17:9e:75:c1:76:9d:b7:d1:e1:0e:a8:d5:
a7:ec:6d:ef:c7:c8:83:99:ad:f4:9c:12:c6:cf:26:c1:af:df:
36:ed:4f:d4:cf:4d:ef:85:7c:e2:a4:0d:e5:91:b6:af:3b:48:
28:76:b7:71:ce:a8:c5:7d:98:df:c0:cd:07:4e:77:0b:c6:d2:
15:c3:f2:77:be:51:eb:f7:fd:42:c4:27:a8:fa:ba:1f:74:5a:
ff:e6:61:4c:70:32:d5:84:dd:ba:f2:6c:26:cd:5b:ce:55:20:
5b:0c:49:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 06:35:00 2023 by rpki-client on console-fra.rpki-client.org