Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ba8dad-955f-4863-adf1-058664646bec/1/WPTRlFGT8V_3JxF1womZ2WQTxf4.roa
File: WPTRlFGT8V_3JxF1womZ2WQTxf4.roa (raw, json)
Hash identifier: bbAHbU0OYep+2X+vNiTUMm1k/DkdBOKqt9rXjkB2n68=
Subject key identifier: 58:F4:D1:94:51:93:F1:5F:F7:27:11:75:C2:89:99:D9:64:13:C5:FE
Certificate issuer: /CN=c743e8fa71bb7eee461e015306629831c7fb5db8
Certificate serial: 0185729EFEDDC0208E631F7648A479EC4648
Authority key identifier: C7:43:E8:FA:71:BB:7E:EE:46:1E:01:53:06:62:98:31:C7:FB:5D:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0Po-nG7fu5GHgFTBmKYMcf7Xbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ba8dad-955f-4863-adf1-058664646bec/1/WPTRlFGT8V_3JxF1womZ2WQTxf4.roa
Signing time: Mon 02 Jan 2023 13:15:00 +0000
ROA not before: Mon 02 Jan 2023 13:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 18779
IP address blocks: 2a11:c500::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:fe:dd:c0:20:8e:63:1f:76:48:a4:79:ec:46:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c743e8fa71bb7eee461e015306629831c7fb5db8
Validity
Not Before: Jan 2 13:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58f4d1945193f15ff7271175c28999d96413c5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:67:f7:17:67:8f:e9:4c:4d:65:a9:8d:8f:25:
92:2a:92:e6:15:55:c1:75:a9:48:d1:fb:41:af:ae:
95:5c:b2:46:9a:7b:d5:32:6b:be:73:c8:00:ce:e5:
73:88:6b:12:e0:c6:d5:5d:f3:81:42:e4:7e:59:64:
6d:32:19:07:40:0f:4f:95:86:0c:2f:2e:7c:a1:98:
e3:61:13:0e:ff:75:73:8d:c6:ea:04:9f:34:29:de:
02:df:a2:73:2e:65:0f:ba:5a:0b:e7:34:9d:5f:20:
d9:7c:02:30:e1:03:01:76:1f:70:ed:80:e7:6e:5f:
eb:b2:86:9a:6a:dd:69:8c:ef:2f:23:c4:a7:f4:ba:
7e:1e:77:82:f4:d9:a8:37:79:41:51:08:d8:8a:61:
29:27:2d:77:30:2e:60:03:e7:52:ab:58:53:85:33:
48:a4:c2:e2:a6:66:cc:4e:9e:4d:f0:ad:a8:ac:d4:
2e:de:e2:05:7b:6d:73:dc:7f:fa:12:bf:4f:b2:ee:
19:51:d6:a0:fe:e1:a1:4b:a3:20:5b:1b:dd:7b:07:
71:ad:01:d7:f1:83:35:12:0a:18:a9:b9:33:44:a4:
db:21:2e:0a:b0:7b:2c:8c:4e:4c:b0:dd:6e:ad:64:
6c:09:b3:19:5e:26:32:2a:93:89:88:1c:61:24:01:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F4:D1:94:51:93:F1:5F:F7:27:11:75:C2:89:99:D9:64:13:C5:FE
X509v3 Authority Key Identifier:
keyid:C7:43:E8:FA:71:BB:7E:EE:46:1E:01:53:06:62:98:31:C7:FB:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0Po-nG7fu5GHgFTBmKYMcf7Xbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ba8dad-955f-4863-adf1-058664646bec/1/WPTRlFGT8V_3JxF1womZ2WQTxf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ba8dad-955f-4863-adf1-058664646bec/1/x0Po-nG7fu5GHgFTBmKYMcf7Xbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c500::/29
Signature Algorithm: sha256WithRSAEncryption
01:f9:ee:f2:3b:bd:d8:ae:fd:20:4c:9d:2c:fa:a1:4d:21:da:
e3:81:9e:cf:e6:76:6c:63:b4:1f:60:83:95:8b:a7:ff:f2:fd:
59:43:89:b5:c1:c3:48:1e:44:fd:8c:70:1d:91:25:ea:bd:7a:
ea:b9:23:08:8b:76:ba:af:35:fc:1a:24:c4:20:4b:63:22:50:
ef:27:e0:10:41:da:88:85:f8:ab:db:fa:17:e0:e4:38:6a:85:
1c:8e:41:70:42:b1:6e:ad:b2:f3:2b:ba:ce:ac:d4:bb:8f:7b:
ee:e1:48:46:17:40:5e:4b:02:84:a3:b5:a1:b5:5a:20:ef:c4:
13:1b:db:e5:fe:e6:e2:5e:20:71:4a:2d:0b:08:7b:d5:94:42:
4b:ad:cf:34:07:89:91:32:8f:69:64:28:de:14:83:ee:8a:97:
7f:c9:a5:fe:59:be:81:bf:d2:5a:15:cc:e0:e3:7d:f9:fb:bb:
47:78:b2:6d:cc:ab:86:a9:50:d4:e4:6f:8f:f8:3a:9b:24:5c:
5f:af:a8:80:7b:e4:7a:9e:d0:37:bc:31:3f:14:9b:12:ba:98:
3b:88:cc:b6:38:b6:70:f6:4c:fa:1b:6b:57:8d:d6:76:03:8a:
80:43:43:bd:62:3c:d0:80:db:4f:56:a6:2b:25:25:ab:8d:34:
5f:64:d9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:09 2024 by rpki-client on console-fra.rpki-client.org