Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e535cc-8425-4a7f-a6ae-d46d771dd1cb/1/wccV-CL0kpYsFY2CrdMfX65CjkQ.roa
File: wccV-CL0kpYsFY2CrdMfX65CjkQ.roa (raw, json)
Hash identifier: ILJQ+7s/Hy+YY0wGBxH2LtTpMuaMKq5NmMSgxO3vxgo=
Subject key identifier: C1:C7:15:F8:22:F4:92:96:2C:15:8D:82:AD:D3:1F:5F:AE:42:8E:44
Certificate issuer: /CN=4074a6e2abc736b9fff03b52c4d7b179c416badf
Certificate serial: 0186360C1B2367BD20D11F59004848B0950D
Authority key identifier: 40:74:A6:E2:AB:C7:36:B9:FF:F0:3B:52:C4:D7:B1:79:C4:16:BA:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHSm4qvHNrn_8DtSxNexecQWut8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e535cc-8425-4a7f-a6ae-d46d771dd1cb/1/wccV-CL0kpYsFY2CrdMfX65CjkQ.roa
Signing time: Thu 09 Feb 2023 12:00:08 +0000
ROA not before: Thu 09 Feb 2023 12:00:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210079
IP address blocks: 185.11.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:0c:1b:23:67:bd:20:d1:1f:59:00:48:48:b0:95:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a6e2abc736b9fff03b52c4d7b179c416badf
Validity
Not Before: Feb 9 12:00:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1c715f822f492962c158d82add31f5fae428e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:89:8c:56:6c:f1:71:55:16:e7:c3:c2:c6:2d:
a6:61:ca:79:44:e6:f2:bf:c5:7e:dd:b1:a7:28:30:
e4:67:41:9f:0b:e5:74:16:9f:5d:78:5b:2f:95:46:
ec:fc:45:1c:8f:63:4d:0b:35:fb:57:c2:54:11:90:
86:b0:dd:05:d8:42:e8:a3:f2:eb:3f:11:6d:c4:fa:
d8:ad:db:99:8f:7c:ab:3d:1d:98:7e:cd:56:b2:0f:
c7:49:a9:00:cc:24:aa:c3:8d:56:aa:ba:68:d0:0b:
d0:33:83:25:0e:4c:a9:ae:24:14:75:05:b1:01:d9:
ad:3f:6f:b5:ec:4c:e7:84:1e:e0:e1:58:fd:ad:23:
1e:c6:55:e8:6e:16:09:36:3d:db:a3:3a:75:e7:45:
2b:6c:b5:5d:ca:dc:9c:60:03:f4:be:85:33:92:a7:
8f:3e:56:b5:6f:1f:d2:18:8b:db:d5:f9:13:6b:cb:
fd:a4:56:45:d9:ce:ad:8a:98:58:dd:7b:ab:ce:d8:
b3:85:f8:35:7a:ee:35:4f:bb:89:e4:7e:44:c8:da:
53:0b:d4:e4:e8:e5:03:37:d2:ec:77:f1:8c:e0:60:
59:cd:03:f9:9f:cf:4c:34:f5:11:e2:82:b4:e7:18:
0f:57:0f:6e:c8:79:9f:68:f3:1b:4a:ec:5d:af:ad:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C7:15:F8:22:F4:92:96:2C:15:8D:82:AD:D3:1F:5F:AE:42:8E:44
X509v3 Authority Key Identifier:
keyid:40:74:A6:E2:AB:C7:36:B9:FF:F0:3B:52:C4:D7:B1:79:C4:16:BA:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSm4qvHNrn_8DtSxNexecQWut8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e535cc-8425-4a7f-a6ae-d46d771dd1cb/1/wccV-CL0kpYsFY2CrdMfX65CjkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e535cc-8425-4a7f-a6ae-d46d771dd1cb/1/QHSm4qvHNrn_8DtSxNexecQWut8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.246.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:11:e1:81:4e:10:ae:cd:bc:26:82:47:08:80:d5:1c:d5:df:
13:18:37:33:39:46:a1:5b:e7:52:39:83:6c:37:e9:d6:f0:78:
34:e2:fe:81:d2:8f:c5:7a:35:25:ad:e7:11:67:1a:e8:8f:17:
00:8c:b8:a5:bb:16:ed:a0:b9:bb:5c:66:29:38:a6:14:df:ab:
ed:cb:ee:f6:22:b7:a9:0d:c9:ee:6d:3c:70:eb:a9:40:54:b9:
6e:36:2b:5f:ee:0c:c4:21:8c:db:97:60:70:0c:82:6c:ac:a6:
6e:51:be:83:9e:03:6d:b0:83:40:42:34:6d:70:61:3a:95:fd:
f2:e0:fe:44:20:0e:29:1f:0e:da:e4:f7:d7:62:9e:ac:db:a9:
cf:1a:c4:87:1e:28:61:7b:58:30:1c:0f:97:d2:e9:ca:34:c5:
50:52:d5:3a:13:a1:3d:c9:48:49:12:84:c2:b7:d2:53:9e:ab:
cb:b6:01:67:67:69:e9:04:f5:fc:38:ed:c0:44:b4:4e:d7:f9:
de:9f:69:9d:ea:5a:86:48:23:d9:95:de:33:5b:9f:82:d4:62:
29:0d:9e:a0:c8:07:88:12:11:58:2b:35:1c:3c:82:93:23:53:
b8:c8:e7:2c:ab:c5:b5:d6:ce:b5:de:c3:73:91:66:3d:f0:38:
09:17:11:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:47 2024 by rpki-client on console-fra.rpki-client.org