Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/WhNYAeU2ia8LESJTSe9zS6X00vA.roa
File: WhNYAeU2ia8LESJTSe9zS6X00vA.roa (raw, json)
Hash identifier: tiDeM0jzvAO030IzZHctewAG5MHzg4OxeVmQSLe7RJ0=
Subject key identifier: 5A:13:58:01:E5:36:89:AF:0B:11:22:53:49:EF:73:4B:A5:F4:D2:F0
Certificate issuer: /CN=f7e784f370640383e97ec92963bcad3181b99774
Certificate serial: 0185B9B384E981A8F24A86917ABF3BD5719A
Authority key identifier: F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/WhNYAeU2ia8LESJTSe9zS6X00vA.roa
Signing time: Mon 16 Jan 2023 08:30:27 +0000
ROA not before: Mon 16 Jan 2023 08:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 92.249.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:b3:84:e9:81:a8:f2:4a:86:91:7a:bf:3b:d5:71:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e784f370640383e97ec92963bcad3181b99774
Validity
Not Before: Jan 16 08:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a135801e53689af0b11225349ef734ba5f4d2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:2d:35:18:b1:40:8c:96:bc:0c:d4:b6:32:
37:ac:ff:aa:fe:cd:6b:fb:02:c1:08:b1:06:87:68:
8e:b8:87:9a:a8:e8:e9:27:2e:d8:bf:91:ce:28:ee:
ac:df:18:04:15:d8:31:a6:1d:94:b5:68:0b:87:a3:
cf:8c:2f:9a:59:5b:8c:3d:75:32:90:48:39:30:62:
a7:a8:da:83:8d:c5:23:48:12:a3:6c:28:de:0e:fa:
21:c3:45:a4:12:b3:b8:df:23:65:bf:e9:90:af:bf:
6c:5c:db:fc:ee:2f:49:79:f9:a7:be:31:42:61:75:
2b:84:41:68:aa:12:41:7c:00:4b:14:bc:8f:75:5d:
80:a8:c1:bc:45:b1:ea:3d:dd:81:f6:3e:b5:d9:82:
5a:f4:ad:00:26:a3:ff:bf:c1:14:50:4c:a5:81:3c:
3c:aa:2c:d0:bc:54:c9:c5:2a:25:0b:c7:2a:01:75:
64:0f:e4:cc:5d:9c:7e:ff:3f:f0:75:a6:f7:b0:28:
b6:a7:8d:03:cb:85:67:9d:de:f4:a0:24:45:40:86:
fc:4d:80:51:6f:51:80:a5:d8:4c:5b:6f:01:fb:0b:
11:f6:4f:b3:71:72:d7:cb:91:b2:8e:2a:af:4d:9c:
41:4b:45:ea:01:e8:4d:bc:3e:0f:98:4e:2e:13:ec:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:13:58:01:E5:36:89:AF:0B:11:22:53:49:EF:73:4B:A5:F4:D2:F0
X509v3 Authority Key Identifier:
keyid:F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/WhNYAeU2ia8LESJTSe9zS6X00vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/9-eE83BkA4PpfskpY7ytMYG5l3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.27.0/24
Signature Algorithm: sha256WithRSAEncryption
00:a0:3a:15:2e:2f:ad:e6:e3:34:c6:24:c5:57:5c:76:71:2b:
be:9c:9c:2a:0c:8f:f1:cf:4f:a0:98:50:db:e6:a1:fa:2e:fc:
0d:80:b8:3a:6b:53:95:61:74:cc:c5:65:f2:46:60:26:29:be:
08:46:64:44:7e:7e:24:1e:30:c0:dc:44:4b:fc:c1:a9:3e:7c:
1b:86:b5:a3:27:47:0f:05:8f:a3:73:07:3f:a0:6c:46:2e:0c:
ea:b0:e4:76:51:2b:d8:57:17:6a:0e:b3:19:86:1a:69:ba:99:
4d:e0:8a:83:fc:6e:a9:78:b1:56:93:b8:5c:2e:42:35:74:15:
f8:d9:ee:36:d2:96:76:f1:69:cb:46:13:4e:1d:06:8b:1b:72:
b4:b1:b7:94:68:b0:ed:ec:4b:3a:02:db:02:5b:3d:be:1f:3b:
1f:4f:30:3f:6c:01:a0:7a:c7:14:94:a8:e5:ce:20:9f:3d:de:
93:01:26:f2:c8:89:89:96:36:4d:d8:1e:ba:87:81:c2:84:8f:
fe:99:d5:39:b1:4e:c4:1a:14:42:ed:c9:67:2c:e4:f7:82:f3:
b9:2e:21:bd:9c:08:06:76:c2:d1:6a:39:49:04:c4:93:67:75:
52:dd:0a:a9:d8:26:2a:0d:68:66:bc:35:c0:b7:3f:65:9c:fd:
0e:d5:0b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:49 2023 by rpki-client on console-fra.rpki-client.org