Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/WWzrppcQzJrGAzPY_9NJKt1iNM0.roa
File: WWzrppcQzJrGAzPY_9NJKt1iNM0.roa (raw, json)
Hash identifier: X/QR6IUKBTLD51g5nuNslGdS+OIAZQw6HuM4WuGDhLI=
Subject key identifier: 59:6C:EB:A6:97:10:CC:9A:C6:03:33:D8:FF:D3:49:2A:DD:62:34:CD
Certificate issuer: /CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Certificate serial: 0186103AC3CF6996543F860CDEADF7DBFB84
Authority key identifier: F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/WWzrppcQzJrGAzPY_9NJKt1iNM0.roa
Signing time: Thu 02 Feb 2023 03:45:32 +0000
ROA not before: Thu 02 Feb 2023 03:45:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.94.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:10:3a:c3:cf:69:96:54:3f:86:0c:de:ad:f7:db:fb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Validity
Not Before: Feb 2 03:45:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=596ceba69710cc9ac60333d8ffd3492add6234cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:b7:7e:7c:eb:6b:f8:8e:51:dd:1f:55:ef:
09:48:d3:9e:18:41:68:0e:3a:2a:94:cc:15:e7:77:
a3:0e:e2:88:eb:26:60:9d:b1:ed:ec:78:cc:97:d9:
89:6c:2d:d5:6e:01:70:1a:35:6b:a3:1e:c4:33:a4:
e2:a1:40:38:fa:df:69:d0:f6:02:ba:1d:38:99:5a:
b5:17:df:92:96:07:c8:44:f1:2e:f7:52:bc:0d:f4:
83:1a:0f:b4:7d:f8:d2:56:bb:64:49:ee:a5:e9:ee:
c6:39:df:e0:30:33:53:a0:45:a9:cc:31:e7:78:f4:
1c:64:99:55:c9:76:56:57:cf:76:50:77:34:26:a8:
08:a2:5d:45:5e:ce:4f:56:59:93:38:58:21:9a:8a:
6b:7a:4e:4e:00:46:85:88:f8:24:c5:36:e7:86:5c:
9d:3b:47:34:b2:2c:52:3a:49:3c:bb:07:ac:e1:56:
36:d6:3e:fa:7e:ef:c0:55:d1:79:c1:db:64:72:af:
8b:ba:e3:c8:00:5f:f4:f0:0e:ec:94:b6:e3:41:d2:
9c:3d:e9:48:e4:55:9f:06:80:6b:ae:a8:33:bb:4b:
f6:4a:76:de:09:d3:52:72:b8:d7:8a:8c:49:a2:3f:
27:1c:d0:ce:c4:76:11:71:7d:be:7f:ec:68:6e:83:
bd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6C:EB:A6:97:10:CC:9A:C6:03:33:D8:FF:D3:49:2A:DD:62:34:CD
X509v3 Authority Key Identifier:
keyid:F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/WWzrppcQzJrGAzPY_9NJKt1iNM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/9Lp8FFiYuK49KzocccUKsZqT9kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:41:8b:3c:c0:c4:74:71:3f:c3:7c:79:00:35:9a:f0:f2:fe:
5d:8e:6f:7e:45:00:31:0b:fc:46:f4:2f:1e:61:78:c7:55:d4:
c0:0a:4f:2b:09:6c:25:d6:fe:45:bd:3d:f4:d4:f7:10:d2:14:
59:be:99:6b:80:9f:f6:1f:f9:23:72:91:ea:e0:84:a8:e3:09:
dd:8b:58:96:b3:57:0f:22:45:e4:2d:59:15:f8:b7:65:5d:f6:
44:2c:0e:e3:07:c6:bd:83:68:dd:97:bd:37:54:87:c0:b8:fe:
a4:df:07:89:4f:22:a5:79:be:4d:00:19:d5:9a:a1:e0:fc:c4:
b2:5a:5d:5c:0a:91:f8:37:b9:e7:f9:52:7e:5f:d1:20:7c:0b:
d5:ff:19:b3:26:96:ab:24:15:0d:aa:ab:b8:3c:b7:d8:b4:8d:
bb:2c:33:bf:1d:9a:28:aa:eb:20:92:7b:99:26:87:c0:c5:db:
81:41:5d:c4:d2:65:5c:17:23:08:a2:3a:80:a4:8d:27:de:87:
14:aa:a7:6b:b0:4d:f4:bf:e9:29:f2:6d:e5:c9:63:2a:3a:25:
b8:60:87:78:41:71:6f:11:98:10:6c:a3:c7:99:87:f5:32:e0:
9e:30:ff:14:f8:98:86:70:db:30:11:ba:99:49:85:75:5a:57:
d1:98:ec:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:14 2024 by rpki-client on console-ams.rpki-client.org