Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/WaE5lp3clv3uhv0fyFCZfceg0-Q.roa
File: WaE5lp3clv3uhv0fyFCZfceg0-Q.roa (raw, json)
Hash identifier: l4G12I7UY769xJ79OHuI0lqhj9YhvGqxV9hBymA216A=
Subject key identifier: 59:A1:39:96:9D:DC:96:FD:EE:86:FD:1F:C8:50:99:7D:C7:A0:D3:E4
Certificate issuer: /CN=715b900ab9fff1388a4f746a89ec41859ef4779e
Certificate serial: D4AAEA
Authority key identifier: 71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/WaE5lp3clv3uhv0fyFCZfceg0-Q.roa
Signing time: Sat 01 Jan 2022 01:53:32 +0000
ROA not before: Sat 01 Jan 2022 01:53:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 86.106.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13937386 (0xd4aaea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b900ab9fff1388a4f746a89ec41859ef4779e
Validity
Not Before: Jan 1 01:53:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59a139969ddc96fdee86fd1fc850997dc7a0d3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5e:90:33:ef:1c:52:b0:2e:b1:82:fa:df:ff:
27:d0:4c:3a:1b:95:8e:be:59:06:48:37:89:4a:5b:
f2:ed:dd:3d:67:ac:74:4c:07:d8:33:85:9e:c8:1f:
60:ec:65:0a:3e:2b:90:7f:22:4e:4f:6a:56:79:20:
20:33:dc:2e:2c:f9:cd:d5:ef:8d:4a:f8:65:c6:9a:
86:11:04:e1:82:59:8f:50:a0:48:01:98:5c:87:82:
9d:de:42:a1:d2:0a:c7:8a:e0:b7:0a:0d:79:ae:3c:
37:92:90:d2:13:f4:97:75:7f:f9:60:0c:7b:d1:06:
c8:77:ce:13:f9:af:a0:1c:03:80:76:ac:02:0e:02:
d2:da:73:ae:cd:ca:a4:33:b7:bb:29:67:82:a2:e3:
cd:fe:db:ed:22:02:5c:72:84:f0:78:ea:cf:bd:ee:
91:80:4e:a5:ec:3e:60:37:ee:74:3c:16:2e:e1:a5:
d7:92:c8:66:fd:82:16:8d:ab:78:62:8e:ed:a7:1b:
51:60:5b:e4:ff:66:54:3d:6e:86:9b:72:6d:86:9e:
e7:f3:36:f0:14:23:3e:fd:ba:1c:f5:fa:4e:ce:b9:
56:d4:84:83:ee:06:eb:43:8b:93:93:d3:77:82:1a:
ad:94:ad:c2:3c:c0:69:94:2e:2c:b9:8a:f4:2b:25:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A1:39:96:9D:DC:96:FD:EE:86:FD:1F:C8:50:99:7D:C7:A0:D3:E4
X509v3 Authority Key Identifier:
keyid:71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/WaE5lp3clv3uhv0fyFCZfceg0-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/cVuQCrn_8TiKT3RqiexBhZ70d54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.22.0/24
Signature Algorithm: sha256WithRSAEncryption
18:29:ae:3f:29:52:03:e5:70:70:28:3c:44:6f:0c:e6:80:33:
02:a6:cd:19:b0:c2:3d:d7:d0:29:8b:a8:6a:85:a4:0c:44:e4:
55:a8:04:dc:85:65:c7:9d:c6:96:6d:f9:b5:d1:af:11:f9:c5:
da:af:d6:d7:19:4c:92:7b:b5:f2:dc:dd:99:27:a5:59:c1:c2:
5f:8b:b4:ff:64:93:9c:15:87:41:7e:7c:99:bd:cc:d4:7c:ce:
2c:b9:e2:c8:26:f3:e6:08:1b:23:9a:00:9f:9e:e2:85:ab:c5:
bc:e1:52:41:6c:07:cf:a6:2a:e5:83:b7:1b:6d:26:5e:0a:78:
43:f9:d7:e2:8c:26:57:7e:90:b5:13:9f:c9:c8:a1:ba:60:21:
61:0b:a2:54:56:55:1c:9d:db:ac:3c:82:e5:c6:56:6c:47:5c:
21:ca:38:9b:db:fc:69:79:af:d7:63:ed:7d:9b:f1:51:90:7c:
9c:9b:df:56:19:81:37:b3:1e:c4:ea:57:8c:9a:94:67:a8:d7:
b0:7f:d5:5f:96:1c:30:e9:20:99:41:43:15:8c:c3:70:69:88:
f6:e2:e4:aa:8e:f9:46:6d:cb:5e:e6:84:36:1f:f5:ba:19:02:
31:ea:ac:b2:8e:52:57:71:f8:f0:a8:1a:b7:de:25:46:c1:ce:
0a:d6:e1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:42 2023 by rpki-client on console-fra.rpki-client.org