Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7e34ae-025a-4c99-9841-5d82b6bebc82/1/wTwduIinC0W60WOX0gNzjNJyr6w.roa
File: wTwduIinC0W60WOX0gNzjNJyr6w.roa (raw, json)
Hash identifier: YC4saLMXp6rl9b1e8fEgvN6nAD1v2/9ULMj5G7neD64=
Subject key identifier: C1:3C:1D:B8:88:A7:0B:45:BA:D1:63:97:D2:03:73:8C:D2:72:AF:AC
Certificate issuer: /CN=26a3871322d9b5a6e89d71cc17d25c2f3310aa74
Certificate serial: 018C6C97F1E830EBF803264560B7725A86D5
Authority key identifier: 26:A3:87:13:22:D9:B5:A6:E8:9D:71:CC:17:D2:5C:2F:33:10:AA:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqOHEyLZtabonXHMF9JcLzMQqnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7e34ae-025a-4c99-9841-5d82b6bebc82/1/wTwduIinC0W60WOX0gNzjNJyr6w.roa
Signing time: Fri 15 Dec 2023 08:29:06 +0000
ROA not before: Fri 15 Dec 2023 08:29:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 194.59.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:97:f1:e8:30:eb:f8:03:26:45:60:b7:72:5a:86:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a3871322d9b5a6e89d71cc17d25c2f3310aa74
Validity
Not Before: Dec 15 08:29:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c13c1db888a70b45bad16397d203738cd272afac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:20:b5:3e:15:00:5f:19:54:36:5e:53:e3:c2:
30:e7:ee:db:9b:fc:d7:7e:9d:c1:a2:4f:3d:4b:6d:
51:28:dc:93:25:a9:f9:2d:33:6d:e5:09:9d:5d:4d:
14:f0:a4:a2:17:7b:3e:72:97:0c:4d:33:77:15:ba:
3c:27:b0:b4:2d:d8:5f:2d:59:ef:2e:10:40:52:bb:
e3:d3:c1:80:f1:28:fd:89:be:83:d2:f0:65:28:df:
1e:35:da:3e:82:d0:a8:44:23:5f:7f:a9:47:6a:5c:
a7:f1:c1:19:9d:db:31:86:ec:40:42:d7:43:98:da:
00:dc:9c:90:be:99:2d:ed:eb:2f:36:cb:62:cb:1b:
6c:5e:d0:18:10:ef:4e:be:97:10:03:15:fb:e7:88:
ed:6e:20:8c:6f:d4:52:31:2d:e2:82:22:de:bb:f8:
39:d5:38:ec:7c:a5:20:96:16:52:8d:f9:8a:69:64:
09:43:82:58:85:83:45:da:bd:91:a3:74:24:6e:42:
ee:72:4b:04:e3:da:51:33:2b:e8:11:a0:82:75:9c:
41:7f:32:50:9d:21:a6:35:00:62:37:f5:19:ae:c8:
ca:8b:2d:ba:96:34:29:0f:09:7a:a8:fd:b9:4e:9e:
57:91:2d:ac:75:d4:06:e4:77:d3:9e:2a:b8:f3:5c:
fa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3C:1D:B8:88:A7:0B:45:BA:D1:63:97:D2:03:73:8C:D2:72:AF:AC
X509v3 Authority Key Identifier:
keyid:26:A3:87:13:22:D9:B5:A6:E8:9D:71:CC:17:D2:5C:2F:33:10:AA:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqOHEyLZtabonXHMF9JcLzMQqnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7e34ae-025a-4c99-9841-5d82b6bebc82/1/wTwduIinC0W60WOX0gNzjNJyr6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7e34ae-025a-4c99-9841-5d82b6bebc82/1/JqOHEyLZtabonXHMF9JcLzMQqnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.183.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:93:05:0d:a4:d5:89:ae:60:cf:96:f3:34:0e:f1:88:7f:13:
5c:dc:17:5a:ec:52:47:7a:35:a6:11:25:52:75:87:d1:5a:74:
8a:94:01:85:c3:6e:d7:ff:20:de:ba:fc:64:45:02:08:c9:4d:
41:75:f2:e5:7e:59:d0:57:af:19:f2:5d:a6:aa:22:11:89:da:
de:7e:45:09:a1:69:43:ec:32:d0:20:3a:06:cf:cc:de:f4:36:
a7:60:99:52:a3:26:9c:dd:5b:4d:fb:15:6b:ca:7c:99:08:38:
e7:04:bc:4b:41:c4:67:cf:e9:fb:ba:d3:cd:b2:a7:c0:3a:a6:
2e:b7:32:69:27:90:77:1e:7c:45:54:a0:04:21:14:81:48:05:
f5:8c:69:08:cc:c8:e5:d1:18:a2:b9:b7:7b:3e:0a:a1:f6:ff:
a9:6f:92:5c:ca:53:5c:bc:45:ea:5e:50:82:d7:9a:51:6b:64:
93:cf:7b:db:ae:5f:ab:ec:f3:47:80:e5:bb:54:2f:11:14:9b:
6a:56:4b:c7:e6:8b:7a:7e:52:38:b0:46:5d:e9:7b:9e:0d:b6:
f8:7c:ca:00:b7:81:57:d2:fc:fb:3d:60:f6:13:ed:9c:4e:18:
ce:c0:5d:b8:44:64:7a:b7:3c:d2:57:9b:5a:4a:b7:56:a1:e5:
9d:d5:ca:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:31 2025 by rpki-client