Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dc8781-3a1d-4420-b6d8-b20b9c594d59/1/wstYVJI1AWzvsMWv0MLwvCIzlN0.roa
File: wstYVJI1AWzvsMWv0MLwvCIzlN0.roa (raw, json)
Hash identifier: Wl54al4e4dZk15+bV4uRWbWTsM9q1fQL0u1YdSOvMi0=
Subject key identifier: C2:CB:58:54:92:35:01:6C:EF:B0:C5:AF:D0:C2:F0:BC:22:33:94:DD
Certificate issuer: /CN=3337a203155468ea08af7d9cbb2b87c2fc31318e
Certificate serial: 01856F66BF0BA1EAF262587FFD6A06717A43
Authority key identifier: 33:37:A2:03:15:54:68:EA:08:AF:7D:9C:BB:2B:87:C2:FC:31:31:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzeiAxVUaOoIr32cuyuHwvwxMY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/dc8781-3a1d-4420-b6d8-b20b9c594d59/1/wstYVJI1AWzvsMWv0MLwvCIzlN0.roa
Signing time: Sun 01 Jan 2023 22:14:42 +0000
ROA not before: Sun 01 Jan 2023 22:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 91.246.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:bf:0b:a1:ea:f2:62:58:7f:fd:6a:06:71:7a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3337a203155468ea08af7d9cbb2b87c2fc31318e
Validity
Not Before: Jan 1 22:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2cb58549235016cefb0c5afd0c2f0bc223394dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:98:49:ea:ca:88:b5:55:0e:50:fc:53:89:
3c:4e:f3:67:3c:85:72:4a:f0:cd:30:32:92:78:4a:
72:e2:87:60:30:49:47:3a:88:c1:38:04:a4:b9:08:
48:24:f2:5e:c8:b5:79:3d:d1:7d:62:4e:52:da:7a:
d8:24:ce:1e:a5:58:0c:70:41:94:e3:80:6d:04:03:
f5:eb:73:b7:48:f6:57:cf:8a:26:41:8a:4f:d8:f9:
69:bb:83:ba:7c:52:9c:e8:fb:98:a7:b2:41:30:27:
6f:7b:67:45:d2:0b:0f:d9:dd:67:77:da:33:c6:85:
d2:ae:1e:9f:4f:8b:a7:74:b1:f2:3d:e7:3b:cf:09:
79:aa:8d:5d:07:0b:c4:b6:b7:af:ee:41:08:50:89:
6d:0a:5a:b8:49:c9:bd:d2:df:0f:d0:50:4b:43:b9:
89:0d:59:f8:1b:e1:51:b9:4d:05:20:1b:f2:90:13:
e9:17:34:1f:6a:7d:f7:2d:9f:41:9e:85:df:c9:f5:
99:a1:29:ba:e8:f1:97:42:84:bb:dd:04:42:2f:63:
9b:35:07:a6:3d:73:d5:38:59:64:0e:89:1f:a0:a9:
b1:eb:2d:02:19:a1:03:a9:22:6d:1d:5f:eb:be:d5:
e7:dc:28:12:ad:97:4d:71:19:4c:34:e0:17:12:d5:
eb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CB:58:54:92:35:01:6C:EF:B0:C5:AF:D0:C2:F0:BC:22:33:94:DD
X509v3 Authority Key Identifier:
keyid:33:37:A2:03:15:54:68:EA:08:AF:7D:9C:BB:2B:87:C2:FC:31:31:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzeiAxVUaOoIr32cuyuHwvwxMY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc8781-3a1d-4420-b6d8-b20b9c594d59/1/wstYVJI1AWzvsMWv0MLwvCIzlN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc8781-3a1d-4420-b6d8-b20b9c594d59/1/MzeiAxVUaOoIr32cuyuHwvwxMY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.48.0/24
Signature Algorithm: sha256WithRSAEncryption
af:81:5d:28:c0:b2:94:13:c9:00:69:32:0c:e8:c9:ed:db:65:
d0:43:d5:ae:32:63:12:f7:19:94:01:69:b6:46:f9:a7:0d:df:
2a:56:96:3f:6b:b2:84:3b:2b:83:36:3f:c7:92:ff:05:10:db:
34:96:1f:96:a1:a0:b7:49:f6:56:35:86:33:e4:2c:29:31:10:
29:a6:d4:8a:be:71:d2:26:45:ee:23:1c:40:26:a2:80:e3:66:
e8:a6:5b:a7:08:02:16:38:5b:fb:68:f2:b3:c8:1c:5c:e4:93:
66:c8:2c:81:fc:cd:b0:94:91:d3:91:24:d2:e4:16:72:ab:9b:
f1:ab:ba:55:f4:1e:55:69:9c:20:fe:3e:3d:bb:c6:dd:6c:aa:
18:a7:39:9c:34:c3:84:71:09:0e:19:a0:32:ef:2f:f7:59:d5:
57:e5:e0:0b:b4:36:7f:d5:d0:0e:1e:fc:e5:07:58:2c:89:b6:
56:dd:43:78:88:59:b8:25:19:2c:c4:d1:59:51:72:df:b2:28:
1c:f5:e6:d6:e0:64:58:d0:c5:3a:63:b9:51:b8:db:c1:1e:99:
ae:71:23:e7:60:09:3a:0a:59:c4:f3:38:a5:da:e3:cb:fa:79:
14:df:b7:c0:66:f5:5e:d1:a0:dc:13:25:cc:d3:67:8d:c2:00:
b5:52:ac:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 13:20:42 2023 by rpki-client on console-ams.rpki-client.org