Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/WZwlMmXK7sGmxrManO_XByZATas.roa
File: WZwlMmXK7sGmxrManO_XByZATas.roa (raw, json)
Hash identifier: Jvk9xZPqKAGyDKr5t4MFuMEC9u+Z0RTj2qbSc6fbygE=
Subject key identifier: 59:9C:25:32:65:CA:EE:C1:A6:C6:B3:1A:9C:EF:D7:07:26:40:4D:AB
Certificate issuer: /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial: 04D08C0D
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/WZwlMmXK7sGmxrManO_XByZATas.roa
Signing time: Sat 01 Jan 2022 04:56:21 +0000
ROA not before: Sat 01 Jan 2022 04:56:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21859
IP address blocks: 45.143.4.0/24 maxlen: 24
45.143.7.0/24 maxlen: 24
45.143.5.0/24 maxlen: 24
45.143.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80776205 (0x4d08c0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
Validity
Not Before: Jan 1 04:56:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=599c253265caeec1a6c6b31a9cefd70726404dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:fe:c3:dc:35:5c:12:f5:ef:e1:f4:8d:de:
ab:c8:b6:c9:5e:f0:ff:b3:92:de:aa:53:e5:2c:7a:
f9:a0:ee:93:37:78:db:97:8f:83:2c:3e:a0:09:c1:
81:71:a3:22:14:54:4b:cb:20:05:1c:7a:25:90:d2:
a8:95:22:46:92:72:d8:80:d0:08:6b:a4:c5:24:3a:
1f:8d:f3:ce:87:74:f4:2c:4c:50:f8:cd:11:cf:57:
8e:aa:94:13:bc:a5:c7:71:d6:ce:c0:fa:0c:24:f0:
2f:93:ef:a6:06:96:5a:07:5d:47:7d:c7:a4:44:19:
0a:b3:b5:24:75:2f:ab:f1:0c:71:ad:8f:e2:8e:49:
85:fb:78:70:da:e3:39:74:dd:81:f4:a0:3c:b0:3e:
e3:1b:8f:e0:83:66:7b:60:42:bd:90:b4:ad:e5:9e:
86:ee:d6:cc:e8:f8:79:1f:cb:a9:77:51:3b:a9:06:
53:5f:13:a2:ce:8f:aa:f7:a7:11:04:d6:ad:59:65:
81:d3:8f:3c:cb:70:c5:1e:53:d3:52:54:57:24:19:
5e:a0:de:8b:42:5f:ca:5d:49:77:24:c5:03:8a:b7:
98:d1:97:9c:d4:41:68:50:53:80:20:86:da:fa:c1:
68:ae:a0:aa:6a:48:1e:a3:22:46:ee:75:4a:39:ae:
5e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9C:25:32:65:CA:EE:C1:A6:C6:B3:1A:9C:EF:D7:07:26:40:4D:AB
X509v3 Authority Key Identifier:
keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/WZwlMmXK7sGmxrManO_XByZATas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.4.0/22
Signature Algorithm: sha256WithRSAEncryption
53:7b:c6:fe:90:8b:1d:84:ce:be:71:ac:84:6b:42:2d:9c:5f:
6e:63:95:8a:21:ad:35:dd:4d:ef:0b:b0:84:df:76:78:89:de:
4d:91:7b:03:aa:c0:87:ef:03:02:19:21:1f:ed:3a:c5:dd:04:
8f:43:39:dc:85:e9:cf:4b:3b:0f:3e:0a:b5:7a:4f:2d:63:77:
42:b6:7e:9c:b4:82:b8:2b:5b:22:1e:1c:6e:2a:40:46:2d:fa:
75:5a:04:0d:d2:cb:52:40:aa:46:76:40:26:cd:52:eb:16:65:
8e:5e:23:a3:3f:d8:cd:5e:f4:b1:5c:27:1e:f1:b7:02:d1:01:
e5:85:be:8e:11:e9:6f:cc:ec:7e:c0:f5:62:b2:79:bf:46:a7:
b7:68:ae:34:4b:10:73:47:db:81:3b:8a:83:38:7a:9e:60:6f:
b2:30:9f:3e:ae:d9:a7:f4:96:04:da:a6:21:ae:38:31:f9:f7:
91:62:6a:2e:f6:c7:a3:f9:ae:89:c5:62:6c:9f:16:8c:1d:5f:
5e:f7:f6:2f:3a:aa:be:6c:a0:84:ec:36:19:02:44:3f:8c:20:
3e:15:83:c5:48:d0:8a:16:38:6f:15:46:b6:04:91:46:67:ec:
86:e5:e8:58:5b:60:f7:12:fb:51:75:23:b3:3c:b9:ba:79:9c:
c5:65:4e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-ams.rpki-client.org