Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1374b1-02f2-4e7e-8cf0-d926cf74aacc/1/Wu1KqVOO9ucoWih-q704ZYJTZ5Y.roa
File: Wu1KqVOO9ucoWih-q704ZYJTZ5Y.roa (raw, json)
Hash identifier: qritznDIdUj3gW47UVglx+5+PwRD+uYNwuSKJI+59MQ=
Subject key identifier: 5A:ED:4A:A9:53:8E:F6:E7:28:5A:28:7E:AB:BD:38:65:82:53:67:96
Certificate issuer: /CN=87fe29ab4de4aa268f7ec48a1c4a40e5f3ea22af
Certificate serial: 018570CBF52CC8E5E1452C38D0A4ECAB13F1
Authority key identifier: 87:FE:29:AB:4D:E4:AA:26:8F:7E:C4:8A:1C:4A:40:E5:F3:EA:22:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_4pq03kqiaPfsSKHEpA5fPqIq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1374b1-02f2-4e7e-8cf0-d926cf74aacc/1/Wu1KqVOO9ucoWih-q704ZYJTZ5Y.roa
Signing time: Mon 02 Jan 2023 04:44:52 +0000
ROA not before: Mon 02 Jan 2023 04:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41164
IP address blocks: 46.212.0.0/17 maxlen: 17
46.212.128.0/17 maxlen: 17
178.232.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:f5:2c:c8:e5:e1:45:2c:38:d0:a4:ec:ab:13:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87fe29ab4de4aa268f7ec48a1c4a40e5f3ea22af
Validity
Not Before: Jan 2 04:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5aed4aa9538ef6e7285a287eabbd386582536796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:b6:0d:13:38:10:0a:a8:46:69:3f:dd:30:
d3:35:b3:8e:ad:40:ef:0f:fe:0c:1d:10:8f:c4:4b:
03:86:9d:69:f0:31:61:fe:16:48:c2:c3:6f:be:b0:
47:65:66:e0:36:d3:43:16:dd:78:f8:45:8a:2f:3c:
1d:de:0c:a5:4c:b2:05:51:58:1c:48:40:c1:02:64:
3b:ff:4f:83:02:14:a5:b2:74:2b:0b:52:a7:38:67:
37:ca:28:b9:8c:2d:3c:85:38:9b:ca:2a:bb:b4:0c:
39:d5:0c:63:98:64:97:a2:82:ae:fe:0c:bd:e6:bc:
68:ba:b0:27:22:0b:a9:b4:32:1f:ca:09:56:ef:c8:
1b:0c:69:c7:fc:d9:b2:0b:37:4d:65:fd:9e:96:79:
55:8c:f4:21:5d:23:ca:87:3a:55:5d:e5:1e:b6:98:
4a:04:23:3a:b9:21:da:af:3b:e1:a9:95:0f:ef:4e:
f9:00:89:2f:e1:08:7a:0c:c3:63:80:1a:16:17:06:
1f:aa:e1:7a:3f:dd:f6:5c:5d:20:07:5a:cb:13:08:
de:97:71:bc:09:e7:e8:43:40:28:30:5b:cb:43:7f:
dd:a4:ae:38:97:3d:0b:22:58:dc:b6:43:a2:bf:44:
3b:47:96:02:c5:7e:d6:b8:6c:c5:07:fa:26:5c:89:
24:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:ED:4A:A9:53:8E:F6:E7:28:5A:28:7E:AB:BD:38:65:82:53:67:96
X509v3 Authority Key Identifier:
keyid:87:FE:29:AB:4D:E4:AA:26:8F:7E:C4:8A:1C:4A:40:E5:F3:EA:22:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_4pq03kqiaPfsSKHEpA5fPqIq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1374b1-02f2-4e7e-8cf0-d926cf74aacc/1/Wu1KqVOO9ucoWih-q704ZYJTZ5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1374b1-02f2-4e7e-8cf0-d926cf74aacc/1/h_4pq03kqiaPfsSKHEpA5fPqIq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.212.0.0/16
178.232.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:68:99:14:e8:31:01:df:d7:de:81:10:24:ef:ee:1f:91:9d:
6e:cc:1c:1d:b7:a6:9b:c7:b2:09:7f:37:c2:6f:0b:eb:c3:7e:
a2:84:a4:85:ee:b5:6a:f3:ff:39:ab:17:f4:84:74:66:21:99:
9f:ff:b4:4d:a2:67:2e:7b:5b:f4:6f:47:17:5c:f9:97:c1:cf:
55:9d:e2:d7:4e:6d:e8:35:01:aa:f2:4f:54:5f:48:82:64:7e:
15:98:3d:ba:68:a0:89:74:b1:d1:66:95:ef:fd:4e:a4:9e:2d:
f3:5a:e0:50:71:0c:27:b8:e6:86:7b:cc:e7:e3:31:de:f1:11:
3a:aa:2f:59:3e:98:ec:eb:22:30:4c:77:91:88:77:66:4f:97:
02:49:88:03:b8:fc:8f:a0:70:65:31:f5:04:19:6d:05:8e:09:
1b:0b:4f:a8:67:24:b0:6f:9c:5e:d4:44:49:cd:38:77:ed:81:
e2:6f:69:bd:5c:9f:be:a7:bf:05:f5:3a:0b:98:08:df:b3:dd:
7a:20:c5:74:03:00:61:06:32:23:fe:9e:54:39:0f:d5:f3:ef:
97:5c:96:12:5b:83:62:6f:3e:17:15:41:85:e3:67:12:c0:b3:
48:41:cd:55:71:2f:3b:07:75:60:32:32:58:68:0b:59:42:fb:
56:35:b0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:03 2024 by rpki-client on console-fra.rpki-client.org