Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2c9183-a763-47fd-b2b1-68ac3a5ece53/1/WKtKK5wM2g5LmYm9Uy3NWlUh5ks.roa
File: WKtKK5wM2g5LmYm9Uy3NWlUh5ks.roa (raw, json)
Hash identifier: EIk8YjwnRFIekEYbuqT6vluuOxIS+b9onHc+8hp3bJ8=
Subject key identifier: 58:AB:4A:2B:9C:0C:DA:0E:4B:99:89:BD:53:2D:CD:5A:55:21:E6:4B
Certificate issuer: /CN=fc3faa582d9f53b9a98682401481b0bf70581690
Certificate serial: 018CC7936399B02817F50C46B7D1D0CD387E
Authority key identifier: FC:3F:AA:58:2D:9F:53:B9:A9:86:82:40:14:81:B0:BF:70:58:16:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_D-qWC2fU7mphoJAFIGwv3BYFpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2c9183-a763-47fd-b2b1-68ac3a5ece53/1/WKtKK5wM2g5LmYm9Uy3NWlUh5ks.roa
Signing time: Tue 02 Jan 2024 00:29:34 +0000
ROA not before: Tue 02 Jan 2024 00:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57030
IP address blocks: 185.177.120.0/22 maxlen: 22
185.177.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:63:99:b0:28:17:f5:0c:46:b7:d1:d0:cd:38:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3faa582d9f53b9a98682401481b0bf70581690
Validity
Not Before: Jan 2 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58ab4a2b9c0cda0e4b9989bd532dcd5a5521e64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:90:66:fc:02:d6:a6:3a:52:be:c7:dc:d8:8d:
ef:9b:ec:83:f9:e9:75:0e:7d:db:85:79:3d:22:fd:
51:4b:30:31:39:ce:32:93:7f:8a:e4:94:b2:5a:9b:
34:1c:2d:b5:45:55:51:97:1b:41:35:2c:6d:b3:54:
0c:70:3b:5c:08:2e:1d:96:3f:bd:c1:ee:70:ea:d0:
98:0d:ae:63:76:e1:aa:40:57:24:6b:21:9f:1b:a4:
0a:58:ef:ba:5b:58:19:f4:28:9e:bc:d7:10:63:d2:
84:eb:ed:47:3d:ef:de:20:b0:06:95:b7:d9:ca:7f:
2d:ff:9c:cd:72:66:59:7c:65:91:e9:e9:d9:33:b5:
f5:ef:e5:cf:0b:78:fc:2e:ff:90:cb:d6:a4:16:21:
d9:f0:e9:36:ac:c0:4c:bf:67:c3:a3:97:31:eb:7b:
40:8f:45:2b:5a:74:51:24:48:dd:c8:c4:8f:f0:7e:
c2:3a:5d:1f:93:da:41:7a:18:78:85:b0:1b:f5:94:
74:36:16:9e:65:55:d4:f0:e8:df:9a:dd:d9:a3:d0:
1c:1b:91:79:fb:05:9e:a7:c8:05:30:32:de:0f:f5:
0e:19:74:9d:a6:75:86:c8:8b:64:1b:c3:be:6f:f1:
84:a5:8c:2b:c0:86:3c:ed:a5:23:55:50:e6:79:35:
cd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AB:4A:2B:9C:0C:DA:0E:4B:99:89:BD:53:2D:CD:5A:55:21:E6:4B
X509v3 Authority Key Identifier:
keyid:FC:3F:AA:58:2D:9F:53:B9:A9:86:82:40:14:81:B0:BF:70:58:16:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_D-qWC2fU7mphoJAFIGwv3BYFpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2c9183-a763-47fd-b2b1-68ac3a5ece53/1/WKtKK5wM2g5LmYm9Uy3NWlUh5ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2c9183-a763-47fd-b2b1-68ac3a5ece53/1/_D-qWC2fU7mphoJAFIGwv3BYFpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.120.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:ee:91:cf:80:ac:01:03:db:03:1d:65:eb:f4:05:9a:94:6e:
c8:fb:41:c3:fd:b4:1c:07:38:6c:a0:f8:21:3a:c6:c6:33:fd:
95:dc:87:37:d4:5c:a6:dd:0a:98:0b:ab:68:26:0e:ce:45:a4:
b7:5a:06:7d:91:10:0b:03:17:fd:0b:b9:53:0e:51:b7:a7:f4:
6e:c7:a7:48:7f:b3:9d:bb:3d:f2:91:d1:f3:6a:29:0d:e6:5a:
df:1c:fa:b8:a0:87:86:b2:f5:7c:5f:5b:5d:16:63:fb:a9:94:
ef:d5:5d:be:9b:11:66:6c:73:50:7c:98:65:92:6f:e3:1d:c1:
8c:67:13:4f:33:d2:11:2e:09:42:26:74:91:9d:a7:76:c9:f0:
59:78:fb:ab:c9:99:16:a5:60:bf:c3:6c:7e:4b:ff:54:dd:91:
4e:67:f6:bc:85:69:0b:a9:5c:f9:e8:a7:7d:b3:00:00:0a:c8:
5c:46:dc:83:4a:84:8d:bd:47:70:72:ef:12:77:d5:a4:f9:af:
7f:2c:75:3b:16:e5:17:19:af:24:e0:e8:bb:f4:c3:50:0f:52:
1d:c0:10:63:04:70:3e:09:c1:90:24:ea:0d:c9:08:91:e3:39:
b7:ae:ca:8a:34:14:4a:03:8e:0a:58:99:aa:36:98:27:03:7a:
ac:4c:ae:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:10 2024 by rpki-client on console-ams.rpki-client.org