Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/wdC-WhQlGgwJ_kgVS7EOMi6e7UM.roa
File: wdC-WhQlGgwJ_kgVS7EOMi6e7UM.roa (raw, json)
Hash identifier: atHcCLObFlemsBdMtyBl5truZh+laFQmyvy2vwVSz2w=
Subject key identifier: C1:D0:BE:5A:14:25:1A:0C:09:FE:48:15:4B:B1:0E:32:2E:9E:ED:43
Certificate issuer: /CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
Certificate serial: 01851603EBC0FC3A91E63A06B32FFFFE1C8E
Authority key identifier: D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/wdC-WhQlGgwJ_kgVS7EOMi6e7UM.roa
Signing time: Thu 15 Dec 2022 13:40:33 +0000
ROA not before: Thu 15 Dec 2022 13:40:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47264
IP address blocks: 185.75.240.0/24 maxlen: 24
2a05:5500:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:16:03:eb:c0:fc:3a:91:e6:3a:06:b3:2f:ff:fe:1c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
Validity
Not Before: Dec 15 13:40:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1d0be5a14251a0c09fe48154bb10e322e9eed43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9a:92:b0:6a:fd:6d:8b:93:1f:99:d3:8d:ab:
25:41:90:30:e5:70:34:52:2a:bc:e7:5e:bc:0c:db:
7d:10:6b:df:db:e4:ba:ce:41:e7:30:d1:1c:9a:b0:
72:d4:c0:35:cd:9b:83:68:3b:e2:c9:1e:56:5d:2a:
b0:01:bd:c9:4c:1d:cb:a2:69:7a:5d:3d:a0:2d:cf:
1e:1b:c4:ac:1f:e2:c5:28:0c:6f:0b:eb:bf:35:f6:
bb:da:de:58:c6:cb:44:f5:8e:44:0e:f5:bf:45:39:
c6:60:3c:72:31:f4:62:1b:78:6c:82:ec:9e:7d:34:
0b:5b:41:90:14:1f:50:e4:d1:be:94:12:52:fe:ae:
27:db:69:ab:b4:4e:78:55:fe:6e:05:df:5e:b5:fd:
2b:11:c1:88:ec:3c:d9:f2:57:4f:3d:57:6d:e5:13:
cd:ed:88:f1:21:3f:20:c4:c2:ea:96:a9:11:e5:a5:
25:50:8b:55:ad:a6:fc:42:60:41:bd:29:6b:7d:39:
cb:8e:3c:02:2f:fc:3a:8f:71:37:df:ba:d7:8d:e0:
b4:77:09:cb:e2:63:ac:f8:99:96:1e:fa:33:f7:c5:
5c:28:93:4a:22:24:2f:32:12:14:3a:8d:05:22:47:
f7:29:c2:f3:a6:ea:23:52:03:96:0c:fc:d0:02:b0:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D0:BE:5A:14:25:1A:0C:09:FE:48:15:4B:B1:0E:32:2E:9E:ED:43
X509v3 Authority Key Identifier:
keyid:D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/wdC-WhQlGgwJ_kgVS7EOMi6e7UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.240.0/24
IPv6:
2a05:5500:11::/48
Signature Algorithm: sha256WithRSAEncryption
68:41:d7:8a:c9:24:95:e7:2c:30:ed:3f:83:89:50:7a:87:d2:
cd:4a:10:5e:09:b5:f4:e9:e0:7c:43:44:b8:6a:61:a9:02:81:
ec:31:ca:30:f4:5a:2f:50:aa:c0:df:5f:cc:d9:91:5c:19:74:
15:8c:ec:41:2e:8e:4b:ce:3c:df:bb:96:a7:8c:31:29:47:23:
b9:00:29:8f:14:cc:6d:fb:bc:76:75:87:03:56:60:65:15:de:
f6:06:ba:95:ce:55:6b:42:7d:90:a4:bf:c1:09:79:f1:90:76:
1e:58:14:b8:d6:b8:3a:4f:ce:26:f9:12:e6:87:57:47:c8:75:
1c:0b:51:a4:16:71:c7:b4:09:88:0e:b0:82:6d:73:90:c0:e2:
e7:aa:c6:8f:06:b4:09:60:5d:02:19:f2:83:65:78:25:dd:c4:
2b:2c:76:b3:f4:c1:e6:39:10:6d:f4:1b:69:ed:2a:69:6d:99:
80:80:d2:0f:05:7c:25:3c:e9:12:a3:ef:1d:75:1a:ff:30:42:
0d:aa:d3:6e:e6:d3:80:91:ec:97:3b:71:be:f7:ed:5a:2d:a2:
12:21:c3:42:1c:e5:99:2c:65:3f:a0:59:c5:65:f3:ff:c6:e4:
68:5a:bf:ef:b1:25:0d:e2:e7:f3:05:2e:fb:47:07:32:5d:5d:
f2:e5:2e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:01 2024 by rpki-client on console-ams.rpki-client.org