Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3af1e6-7f6d-4ac8-a022-fab9bab2f894/1/WLH0jS9h2g1Nfzu9kYDewEiOg8g.roa
File: WLH0jS9h2g1Nfzu9kYDewEiOg8g.roa (raw, json)
Hash identifier: 3QwVTssOFQBtZ8BRwdlD8Ap/O86nQ9pvRr31RZmd78s=
Subject key identifier: 58:B1:F4:8D:2F:61:DA:0D:4D:7F:3B:BD:91:80:DE:C0:48:8E:83:C8
Certificate issuer: /CN=166dcaf076c3ec103117deaa67990c968bcd644d
Certificate serial: 0187464315D2C96AFC10C019A3967D112867
Authority key identifier: 16:6D:CA:F0:76:C3:EC:10:31:17:DE:AA:67:99:0C:96:8B:CD:64:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm3K8HbD7BAxF96qZ5kMlovNZE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3af1e6-7f6d-4ac8-a022-fab9bab2f894/1/WLH0jS9h2g1Nfzu9kYDewEiOg8g.roa
Signing time: Mon 03 Apr 2023 08:36:54 +0000
ROA not before: Mon 03 Apr 2023 08:36:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200131
IP address blocks: 213.109.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:43:15:d2:c9:6a:fc:10:c0:19:a3:96:7d:11:28:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166dcaf076c3ec103117deaa67990c968bcd644d
Validity
Not Before: Apr 3 08:36:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58b1f48d2f61da0d4d7f3bbd9180dec0488e83c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:bc:53:14:e3:f3:0c:b4:7c:4d:02:31:cf:
5e:5b:5f:52:10:d7:c8:83:45:57:b5:5d:1e:04:59:
4a:18:bc:2e:dd:91:79:52:53:0e:2b:64:c5:16:20:
d9:b4:40:de:a6:85:4b:58:d2:ba:66:32:a1:21:0b:
9b:17:36:b3:bc:ed:4b:18:e0:6b:ff:14:de:1a:bd:
9d:dd:0f:17:23:0d:05:47:b9:f2:54:ec:3a:c1:5a:
9c:80:b5:6e:0a:29:b9:b6:73:3d:8d:66:b9:c7:92:
e0:8c:72:a0:3e:e7:7f:46:8c:28:19:7e:15:a9:64:
0a:a5:a1:0b:7e:af:8f:84:79:77:46:87:a5:ec:f7:
47:c9:fd:3e:6a:26:b9:2a:b3:bb:64:95:f0:ea:43:
bb:90:a6:a7:ab:22:d9:22:95:82:55:7d:85:e9:fa:
4e:0c:2b:40:9e:39:1e:26:bd:5f:92:34:b7:9a:2d:
98:c7:60:0d:ef:20:af:ee:a1:e3:84:97:47:e1:3f:
b5:fe:80:07:0f:76:62:71:bb:61:14:e4:4b:9b:ef:
f3:b3:12:31:e7:46:e8:27:56:e0:3a:59:47:2d:19:
2c:9c:17:d8:e0:93:e3:28:4e:25:d5:9d:02:a5:80:
ea:ad:9b:15:25:30:df:00:29:2f:19:52:1c:49:98:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B1:F4:8D:2F:61:DA:0D:4D:7F:3B:BD:91:80:DE:C0:48:8E:83:C8
X509v3 Authority Key Identifier:
keyid:16:6D:CA:F0:76:C3:EC:10:31:17:DE:AA:67:99:0C:96:8B:CD:64:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm3K8HbD7BAxF96qZ5kMlovNZE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3af1e6-7f6d-4ac8-a022-fab9bab2f894/1/WLH0jS9h2g1Nfzu9kYDewEiOg8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3af1e6-7f6d-4ac8-a022-fab9bab2f894/1/Fm3K8HbD7BAxF96qZ5kMlovNZE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.154.0/24
Signature Algorithm: sha256WithRSAEncryption
29:0c:b9:b5:79:ba:ac:36:cf:f8:6b:91:75:43:4c:a6:d6:22:
d5:ce:0c:c1:b1:d0:b0:08:f4:8d:46:7c:e0:75:ce:ae:53:f0:
eb:8b:f0:ab:c8:dc:f9:b9:3b:cf:37:21:ba:58:be:df:6f:91:
47:51:c4:4e:4e:ef:5d:c2:76:38:0c:f5:bf:bc:a3:85:1f:68:
81:c1:8f:40:4e:f5:22:c4:78:07:4e:65:67:07:76:8a:f7:ea:
68:1c:fd:b8:65:d3:dd:52:d8:69:99:be:d2:dc:8c:e0:ba:d1:
98:ac:1f:29:af:fe:a0:da:a3:75:2b:a0:74:9b:81:23:ca:0d:
97:bc:97:1f:11:29:48:c1:aa:dc:65:92:f8:82:1e:ab:74:57:
95:91:26:eb:66:7d:e0:2e:a7:29:a9:22:d4:f7:bb:e4:6c:0a:
5c:60:81:99:0a:41:80:1d:5a:fd:9c:37:a2:5b:ba:1f:b8:9f:
fa:a0:a2:13:db:37:90:a4:e4:7d:71:ce:8b:04:86:28:5f:cf:
72:59:ed:49:36:c2:d0:14:7d:68:d6:a0:f4:75:be:26:c7:22:
75:12:83:a9:53:4e:fd:63:5c:ea:26:a7:b4:01:c1:23:42:e0:
a0:b4:82:55:ef:cf:96:eb:ca:b9:d8:69:e4:e0:52:03:e8:93:
7d:76:af:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 14:16:34 2023 by rpki-client on console-fra.rpki-client.org