Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b0b9b8-d049-4562-b66e-d00ae30fd717/1/W3x8Whh5MiesIMAaUvWuvwzpkaE.roa
File: W3x8Whh5MiesIMAaUvWuvwzpkaE.roa (raw, json)
Hash identifier: LwDNoxZN8WD296n2757fuq/6RoFh2l4Tkp33Hgy203Y=
Subject key identifier: 5B:7C:7C:5A:18:79:32:27:AC:20:C0:1A:52:F5:AE:BF:0C:E9:91:A1
Certificate issuer: /CN=cec7ad4a0106bc519bbc44c1d3d382bb61f4a9fd
Certificate serial: 08F2198B
Authority key identifier: CE:C7:AD:4A:01:06:BC:51:9B:BC:44:C1:D3:D3:82:BB:61:F4:A9:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsetSgEGvFGbvETB09OCu2H0qf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b0b9b8-d049-4562-b66e-d00ae30fd717/1/W3x8Whh5MiesIMAaUvWuvwzpkaE.roa
Signing time: Sat 01 Jan 2022 15:56:08 +0000
ROA not before: Sat 01 Jan 2022 15:56:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60983
IP address blocks: 193.169.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150083979 (0x8f2198b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec7ad4a0106bc519bbc44c1d3d382bb61f4a9fd
Validity
Not Before: Jan 1 15:56:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b7c7c5a18793227ac20c01a52f5aebf0ce991a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:d2:57:9d:4c:05:6d:6d:70:34:2a:e7:af:
d3:c4:71:47:fa:38:4a:15:a7:87:d4:b4:41:01:45:
1c:e4:a1:7a:4e:47:fb:93:f9:02:70:f2:a3:3d:09:
c0:b4:69:78:7f:d7:5a:bb:87:41:49:48:e9:66:20:
e6:72:41:4e:4f:60:26:57:20:b6:45:c0:15:e8:a8:
f8:f8:56:05:74:c6:41:39:17:c6:c9:21:ad:c5:fb:
f7:ad:7e:14:90:83:83:3d:db:fd:33:ba:f7:ec:0a:
f9:7f:b1:7b:72:7e:6c:ce:8a:c8:72:91:80:c8:8a:
16:4f:59:7f:14:12:65:78:70:e4:4a:8c:4f:7a:35:
00:3c:37:6b:52:10:b0:16:19:d1:61:27:3b:42:b5:
8b:3e:38:bd:68:e7:73:7a:07:48:ac:a0:7b:9c:73:
c4:4b:2d:7b:bc:d8:c9:4b:04:26:af:21:79:33:43:
31:cf:41:b5:05:6d:4e:71:41:ed:0e:55:58:ab:a7:
5d:86:c5:dc:83:4e:f4:a8:a7:ba:8e:35:56:a7:86:
fb:2f:52:16:e8:55:44:80:4e:22:13:ff:b7:1e:5f:
af:9a:c9:b4:1a:87:d2:b0:b1:8e:75:1a:28:95:f6:
a5:8e:3d:82:fb:b8:b5:fa:bd:44:77:e0:6b:fb:6a:
cb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7C:7C:5A:18:79:32:27:AC:20:C0:1A:52:F5:AE:BF:0C:E9:91:A1
X509v3 Authority Key Identifier:
keyid:CE:C7:AD:4A:01:06:BC:51:9B:BC:44:C1:D3:D3:82:BB:61:F4:A9:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsetSgEGvFGbvETB09OCu2H0qf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b0b9b8-d049-4562-b66e-d00ae30fd717/1/W3x8Whh5MiesIMAaUvWuvwzpkaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b0b9b8-d049-4562-b66e-d00ae30fd717/1/zsetSgEGvFGbvETB09OCu2H0qf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.47.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e6:cc:ea:4d:17:41:10:ea:28:0e:b9:c1:b1:aa:d2:72:d4:
9e:12:14:4e:35:69:ff:5e:3a:cd:7c:ee:30:87:4b:23:b1:83:
22:f5:26:94:4a:6e:89:f0:73:4c:a8:3f:ad:92:79:87:76:d7:
25:a4:c1:08:cd:f0:1d:1a:dd:7f:6d:e4:53:92:25:f0:42:5f:
3e:67:96:1a:94:34:9c:48:4a:06:8d:26:e7:64:ea:88:95:a9:
5c:ad:b1:31:3f:8d:bc:ef:0b:ab:22:97:62:93:5a:c2:0f:9c:
0a:27:92:5e:b9:7d:37:75:75:6d:6e:1d:00:f1:5e:af:0a:ef:
cd:8a:73:1e:1b:9c:04:c6:85:eb:2b:27:4c:da:eb:4c:b6:2d:
26:41:13:d4:8c:bc:ba:ce:20:45:da:ad:ec:82:38:b2:91:66:
60:35:e5:cd:30:e5:d5:b0:87:24:ce:78:63:dd:7e:9e:e3:4e:
a7:17:c6:ab:48:9d:e0:47:3a:13:7c:4f:da:79:7d:8d:e0:71:
b3:c8:0c:0a:b0:35:b3:b4:13:88:66:08:4f:52:41:49:42:63:
2f:b0:d8:91:f4:63:db:3b:45:45:95:27:69:15:38:c1:45:77:
40:38:2e:c5:b5:1f:da:a4:c0:96:52:90:09:e1:2a:81:03:be:
4f:46:bb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:57 2024 by rpki-client on console-fra.rpki-client.org