Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/WnC8_H8WON3BAEDSbN-LUEK5slg.roa
File: WnC8_H8WON3BAEDSbN-LUEK5slg.roa (raw, json)
Hash identifier: 9p7JoQVrHBUFx+ZeYp4bJbLnn+TLru+eFrwkkRAV8LE=
Subject key identifier: 5A:70:BC:FC:7F:16:38:DD:C1:00:40:D2:6C:DF:8B:50:42:B9:B2:58
Certificate issuer: /CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Certificate serial: 018D303B08E3A72C46372E0763E89333C600
Authority key identifier: 15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/WnC8_H8WON3BAEDSbN-LUEK5slg.roa
Signing time: Mon 22 Jan 2024 08:13:11 +0000
ROA not before: Mon 22 Jan 2024 08:13:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 159.253.4.0/24 maxlen: 24
185.13.226.0/24 maxlen: 24
185.13.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:3b:08:e3:a7:2c:46:37:2e:07:63:e8:93:33:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Validity
Not Before: Jan 22 08:13:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a70bcfc7f1638ddc10040d26cdf8b5042b9b258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:47:c4:60:a1:1a:3b:41:fe:28:be:1c:23:7e:
3c:12:29:8c:2d:db:f0:b3:67:f5:42:22:ad:0d:58:
5f:49:7a:d2:ed:9d:8d:e2:b8:17:fa:50:0b:99:13:
0d:5d:4d:c0:33:27:90:bd:80:66:6f:a9:d6:7e:50:
31:7c:28:7e:17:6f:01:4c:cb:81:6f:0a:de:a6:64:
e2:39:69:b8:4d:68:16:2a:cd:ba:e6:b5:1f:e3:28:
ab:fc:db:4d:ce:79:dd:fc:43:6b:45:40:9a:f8:75:
c8:a2:60:ca:a3:cc:b5:c1:cf:26:e0:54:39:03:dc:
55:f3:ec:1b:ae:70:5e:41:d4:83:ba:04:82:e7:43:
26:85:a2:71:f0:03:55:44:fa:de:08:dd:1b:19:4d:
e1:9f:77:d2:d3:04:99:d2:64:2d:40:9e:4b:e9:92:
43:99:c2:54:97:01:42:ba:17:b3:cd:fd:2a:ae:7b:
97:9a:7f:e9:04:c5:3e:98:13:0d:89:df:09:a1:b7:
87:23:d1:2f:1a:ee:2d:78:80:93:13:7e:4d:c3:d0:
6e:06:23:1f:a0:6d:52:06:14:78:12:15:5d:d3:53:
b2:4c:c9:de:44:7e:b8:3e:c8:69:99:49:5d:d4:2c:
3a:11:40:f0:15:a5:ca:6e:25:87:46:27:a7:b4:91:
fc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:70:BC:FC:7F:16:38:DD:C1:00:40:D2:6C:DF:8B:50:42:B9:B2:58
X509v3 Authority Key Identifier:
keyid:15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/WnC8_H8WON3BAEDSbN-LUEK5slg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.4.0/24
185.13.226.0/23
Signature Algorithm: sha256WithRSAEncryption
48:8d:74:86:35:68:14:7d:99:ce:cd:c8:eb:c7:52:41:e9:c1:
37:20:24:1f:7b:cb:07:41:93:df:14:cb:60:c7:2b:80:97:73:
17:b2:3d:36:99:7e:f1:61:0f:01:52:fc:e9:d3:e8:56:e6:3b:
db:c0:bb:4d:b5:b2:69:4e:fa:ca:8c:54:3f:71:8f:3a:d4:c4:
5f:73:3c:b4:14:71:e4:4d:fb:19:b7:67:93:be:5a:8a:c8:88:
2e:20:9a:12:7f:29:af:a6:9a:01:40:b6:ac:fc:1a:dc:90:4b:
b2:34:45:8b:d8:3e:57:cc:f1:8f:dc:13:99:53:68:e4:00:7b:
6c:a7:65:7d:a2:8c:f0:66:bf:9a:69:1c:12:c3:e0:c7:25:ba:
35:52:3c:11:6b:b1:f8:c5:c7:ae:e9:03:5d:46:e2:af:a4:28:
24:9f:76:e1:05:ef:db:69:7c:b9:23:b5:f0:63:d3:f4:5d:c6:
6a:f4:8c:bf:f3:9a:6d:ba:ba:34:ce:12:90:df:52:d4:af:d0:
c9:c5:8e:bc:f5:ba:8e:c8:63:aa:7b:44:23:bc:b1:60:f2:ea:
19:49:3c:a4:72:c0:62:61:31:0c:2f:37:e7:3e:47:a4:c4:c2:
84:5b:ea:1e:9f:44:6b:81:70:70:f5:d8:6d:41:fc:e6:ea:b1:
db:d0:f8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 16:40:16 2024 by rpki-client on console-ams.rpki-client.org