Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/dc8aa8-720d-4bfb-9beb-3b2596205881/1/Wst3VKt357uEsKfSsViVPFCvpt0.roa
File: Wst3VKt357uEsKfSsViVPFCvpt0.roa (raw, json)
Hash identifier: AcVLklziID00q/Qxf9fSbwWVSuQVMSQgcZTLmhpyOwc=
Subject key identifier: 5A:CB:77:54:AB:77:E7:BB:84:B0:A7:D2:B1:58:95:3C:50:AF:A6:DD
Certificate issuer: /CN=aef634ac5e0b5a204c841068137583661a186581
Certificate serial: 01856CB838B51C8C778034914548FF5248F4
Authority key identifier: AE:F6:34:AC:5E:0B:5A:20:4C:84:10:68:13:75:83:66:1A:18:65:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvY0rF4LWiBMhBBoE3WDZhoYZYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/dc8aa8-720d-4bfb-9beb-3b2596205881/1/Wst3VKt357uEsKfSsViVPFCvpt0.roa
Signing time: Sun 01 Jan 2023 09:44:50 +0000
ROA not before: Sun 01 Jan 2023 09:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201211
IP address blocks: 95.130.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:38:b5:1c:8c:77:80:34:91:45:48:ff:52:48:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aef634ac5e0b5a204c841068137583661a186581
Validity
Not Before: Jan 1 09:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5acb7754ab77e7bb84b0a7d2b158953c50afa6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:00:27:47:08:49:4b:bb:f3:7a:21:4a:45:
22:0d:97:9e:cf:ca:11:ea:92:72:36:15:35:cf:13:
81:a5:82:2e:03:ba:9e:c9:43:a2:6f:c9:8d:c1:ab:
3c:bc:7c:f0:81:41:a5:ad:78:47:36:3d:8a:9f:ef:
e5:af:0d:e2:f0:91:a6:11:89:43:f7:af:44:e4:28:
06:04:f7:65:89:9d:b0:f6:d6:4d:ca:9f:4e:9f:d3:
ea:7d:59:3b:7e:9c:b3:6b:25:65:68:03:e3:25:72:
e8:d8:85:26:eb:fe:af:cc:b1:10:c0:a7:c6:7f:61:
06:52:b1:67:49:41:7c:7a:67:22:c3:1e:2f:51:30:
91:e4:94:6d:4c:bb:93:52:a6:0e:78:be:e5:0d:8e:
25:79:bb:4a:96:06:06:87:35:70:ee:69:38:5e:1d:
e5:91:28:bf:9f:8d:05:a7:94:08:27:7d:a5:22:5f:
37:fe:a5:28:5d:8a:99:9f:18:2e:0f:1d:b3:bb:c1:
84:de:09:75:d4:24:9a:aa:9e:4d:ae:01:2d:ad:52:
07:62:f2:af:43:a5:38:82:1a:9a:53:ac:61:5b:5f:
8d:86:7c:39:0f:37:b7:fa:1f:1e:2c:e2:58:41:0f:
4b:80:b8:15:81:c7:48:4c:47:b0:3a:4a:d0:b3:71:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CB:77:54:AB:77:E7:BB:84:B0:A7:D2:B1:58:95:3C:50:AF:A6:DD
X509v3 Authority Key Identifier:
keyid:AE:F6:34:AC:5E:0B:5A:20:4C:84:10:68:13:75:83:66:1A:18:65:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvY0rF4LWiBMhBBoE3WDZhoYZYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/dc8aa8-720d-4bfb-9beb-3b2596205881/1/Wst3VKt357uEsKfSsViVPFCvpt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/dc8aa8-720d-4bfb-9beb-3b2596205881/1/rvY0rF4LWiBMhBBoE3WDZhoYZYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.224.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:34:93:97:41:9a:62:75:bb:d3:a1:bc:4b:c6:ab:94:6b:10:
79:5d:e6:91:56:a0:33:02:4d:f3:d9:76:d2:50:87:9a:05:c9:
98:aa:5a:1d:ef:90:65:0d:35:66:04:b5:fd:a8:b5:8f:60:00:
77:3e:2d:51:cd:e3:c1:28:ce:90:52:6c:c1:f2:d9:1a:2e:28:
cf:56:33:d3:74:86:91:9d:d4:6f:ae:6e:d0:61:0f:ce:e2:c9:
2e:29:d0:eb:00:47:2d:a8:b4:1b:84:39:50:a7:a6:69:97:3a:
9e:fb:db:9a:1c:7c:7f:f9:84:f0:c9:73:b4:1d:1b:1b:43:fa:
b7:b9:aa:a7:7c:2d:38:23:40:ad:7e:45:d0:ed:c9:1b:f5:40:
fa:b0:07:b9:16:8e:0f:ea:26:10:dd:6f:1e:83:38:85:bf:fc:
38:09:7d:74:3c:b3:43:5b:20:6a:07:91:2c:75:cf:da:7c:22:
14:b4:11:8e:db:9b:a9:1e:45:48:15:dc:43:0a:51:c3:99:68:
e0:0e:5c:79:d1:48:48:a8:a9:47:ed:57:da:79:1d:70:91:05:
02:37:83:01:87:af:ab:48:be:40:48:a3:42:67:3b:53:bf:01:
50:55:5b:9d:a0:e1:ef:39:38:46:64:0f:71:65:d9:a4:6a:85:
c3:6f:b0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:15 2024 by rpki-client on console-ams.rpki-client.org