Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/wF7Zf6uKGiJbJKlraGK_bQUbxjc.roa
File: wF7Zf6uKGiJbJKlraGK_bQUbxjc.roa (raw, json)
Hash identifier: tjbcrLrLvXmwwZAo93XzdMt84kUp64Mh3YCtJ1qIFmU=
Subject key identifier: C0:5E:D9:7F:AB:8A:1A:22:5B:24:A9:6B:68:62:BF:6D:05:1B:C6:37
Certificate issuer: /CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Certificate serial: 018CC8010B6692F7B91E1DCABD1F70D86AF1
Authority key identifier: 15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/wF7Zf6uKGiJbJKlraGK_bQUbxjc.roa
Signing time: Tue 02 Jan 2024 02:29:20 +0000
ROA not before: Tue 02 Jan 2024 02:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206281
IP address blocks: 159.253.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0b:66:92:f7:b9:1e:1d:ca:bd:1f:70:d8:6a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Validity
Not Before: Jan 2 02:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c05ed97fab8a1a225b24a96b6862bf6d051bc637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:56:1d:4d:a3:f8:63:2c:e0:eb:df:25:b3:b9:
12:21:7a:09:cf:2c:f0:01:48:16:04:11:74:8b:30:
3f:81:84:5f:2c:01:91:44:1d:8f:66:d6:b1:01:7e:
49:94:62:12:50:07:79:9a:8c:13:95:07:2f:53:06:
4a:f8:5a:50:8e:34:1b:6b:39:05:08:07:fc:5c:5a:
4d:81:a9:89:ab:68:ec:27:fc:73:c0:6e:29:74:57:
37:57:b3:98:ec:b0:f0:ae:24:19:38:5d:66:b1:d7:
93:60:d8:e6:3b:51:71:1e:f6:25:b7:41:e5:ff:2c:
41:f1:b4:d3:6b:3f:e3:b3:d7:5e:5a:c5:46:7a:a3:
cc:c4:8a:2b:b0:e2:03:55:78:9a:a0:65:43:17:5b:
16:6b:9b:e2:24:ed:1f:38:33:d0:25:19:b0:9d:56:
8e:c7:72:76:12:e3:9e:e3:0e:a6:88:09:02:85:e1:
08:2f:d5:a2:3b:a8:92:2d:ae:60:ef:b0:d9:3f:9d:
88:b5:d8:98:4d:ae:14:81:bd:93:50:de:98:d1:f8:
ee:1a:b9:a6:06:90:0f:d2:50:51:4a:1b:40:05:42:
7d:d2:1f:5c:12:56:00:2f:c0:79:77:ea:59:65:cb:
5b:92:8c:21:f3:8f:82:c0:bc:14:84:26:c2:60:4c:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5E:D9:7F:AB:8A:1A:22:5B:24:A9:6B:68:62:BF:6D:05:1B:C6:37
X509v3 Authority Key Identifier:
keyid:15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/wF7Zf6uKGiJbJKlraGK_bQUbxjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.0.0/24
Signature Algorithm: sha256WithRSAEncryption
36:52:ee:68:29:c8:cd:e7:ca:40:36:b2:9a:47:3b:a7:4a:fa:
e7:78:4d:4d:e9:62:4b:5e:e0:c6:27:b5:ee:ae:b6:2d:02:44:
8e:d4:a6:b9:3c:20:8c:9e:61:f9:d0:2f:ca:38:c1:01:83:af:
e5:a5:d4:31:b1:24:91:20:92:f4:68:a6:fe:13:69:ff:7f:75:
f2:80:28:83:2a:6d:8a:fe:55:4c:cc:1d:d5:a8:3c:8b:0e:72:
30:fd:77:08:55:7a:c2:85:1a:af:85:3c:c6:4e:4b:37:ab:c1:
d6:93:2d:04:29:21:ba:14:68:07:29:40:d6:54:50:fa:1c:65:
1c:72:e7:10:70:24:38:69:4b:30:f6:c7:cc:b0:6f:e8:c4:bc:
22:94:c8:69:b9:0b:57:be:95:5f:7c:89:3d:bb:e7:07:f0:ff:
48:24:92:fe:ca:27:e9:d2:74:c5:36:6a:87:0b:35:91:be:93:
7e:e0:cd:e6:17:31:0b:13:97:73:04:45:2c:cc:6e:b5:0b:06:
81:68:a0:5b:41:99:0f:de:6d:b8:a0:64:08:ad:99:d5:e2:1a:
0e:97:e1:44:d3:c9:12:9f:f0:a5:26:88:94:1d:11:62:06:c2:
15:7c:0f:41:a9:43:b6:19:70:af:fb:22:6b:1a:cf:cf:0e:ef:
4d:f5:21:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 16:40:16 2024 by rpki-client on console-ams.rpki-client.org