Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/wd03iui8gDNdk6fiW79MM51hHq4.roa
File: wd03iui8gDNdk6fiW79MM51hHq4.roa (raw, json)
Hash identifier: U58uzP1eu9FejOViiyboA0E0K2/uLX7O8kbUaCHS+Us=
Subject key identifier: C1:DD:37:8A:E8:BC:80:33:5D:93:A7:E2:5B:BF:4C:33:9D:61:1E:AE
Certificate issuer: /CN=f454851d2627dc81c894c54f46e233a24fad1600
Certificate serial: 01856D38724A0E04905FC0B7934A7FE09079
Authority key identifier: F4:54:85:1D:26:27:DC:81:C8:94:C5:4F:46:E2:33:A2:4F:AD:16:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FSFHSYn3IHIlMVPRuIzok-tFgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/wd03iui8gDNdk6fiW79MM51hHq4.roa
Signing time: Sun 01 Jan 2023 12:04:53 +0000
ROA not before: Sun 01 Jan 2023 12:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50267
IP address blocks: 212.46.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:72:4a:0e:04:90:5f:c0:b7:93:4a:7f:e0:90:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f454851d2627dc81c894c54f46e233a24fad1600
Validity
Not Before: Jan 1 12:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1dd378ae8bc80335d93a7e25bbf4c339d611eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:22:63:b8:3f:00:ce:c4:b5:39:b9:53:16:89:
0b:71:a1:94:7f:3e:0a:86:21:35:b1:04:0b:69:5c:
f5:67:e1:91:55:6e:99:66:f0:c8:ee:79:71:5b:f8:
f2:0d:38:d8:14:54:b6:89:a8:b7:f6:f5:f7:df:70:
1c:f8:b7:14:5b:ba:ca:05:02:ed:76:c2:56:89:61:
a2:fa:82:a5:b9:22:19:f8:b0:f9:e9:db:b5:34:7d:
16:e7:05:a1:a7:91:33:23:c1:c0:86:9f:77:b4:bc:
0b:d2:5f:01:b7:b9:e3:67:aa:ab:95:84:13:b3:2a:
f2:80:f3:87:bd:dd:d9:9f:b5:aa:53:f2:f7:4e:bc:
2c:73:e3:b5:8a:5c:f7:be:70:91:60:15:c4:b6:35:
b9:ea:9d:6a:8c:fe:39:ba:02:34:c0:86:b7:6d:36:
c5:8b:8d:77:cb:a8:32:6d:e8:09:06:d7:e2:4f:bd:
e9:3f:a2:9f:57:49:10:4b:00:d5:8d:ff:21:5f:b8:
02:5a:24:a5:55:b7:f4:c0:a9:70:7a:49:dc:18:98:
3b:18:16:63:83:92:28:92:70:13:0f:a3:7a:f3:36:
54:f2:25:c2:ef:87:80:f0:3b:ea:22:f3:86:a1:be:
aa:b6:70:bf:9d:38:cf:cd:57:81:3f:34:14:af:54:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DD:37:8A:E8:BC:80:33:5D:93:A7:E2:5B:BF:4C:33:9D:61:1E:AE
X509v3 Authority Key Identifier:
keyid:F4:54:85:1D:26:27:DC:81:C8:94:C5:4F:46:E2:33:A2:4F:AD:16:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FSFHSYn3IHIlMVPRuIzok-tFgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/wd03iui8gDNdk6fiW79MM51hHq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/9FSFHSYn3IHIlMVPRuIzok-tFgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.36.0/24
Signature Algorithm: sha256WithRSAEncryption
38:0e:d0:cf:c3:41:d4:67:46:8c:d9:bb:82:41:49:c1:2f:6a:
f2:c5:fb:8e:ab:63:34:fa:9f:26:cc:65:6b:9b:88:58:62:33:
b5:ce:ff:cf:0b:46:92:9d:6c:6a:be:8d:70:47:70:61:90:e0:
69:17:6e:03:ec:b3:f6:85:50:66:3d:d0:54:e4:ae:12:51:fb:
ee:ac:c3:4e:e3:48:6d:92:d1:3c:9a:44:b7:e1:ca:f0:b0:c9:
85:41:cf:29:b5:65:23:15:cc:7e:46:30:fb:31:69:06:37:94:
82:6f:35:fb:c9:54:e7:f0:a9:ad:32:02:62:05:0e:cb:3f:fc:
77:f1:d6:b7:54:e2:1a:d6:47:b3:06:68:b5:40:dd:eb:4d:0f:
84:c7:c1:c3:78:f7:67:cd:1d:3c:db:be:01:77:c8:59:b8:26:
58:0a:e0:66:68:55:34:aa:b2:28:ff:d9:81:de:bd:6f:ef:05:
ac:fc:f4:26:96:b8:46:cc:2d:6f:dd:76:91:1c:52:db:01:6d:
e9:74:1e:49:0f:af:14:bc:b2:29:d4:a6:55:70:ca:8e:d7:43:
91:ae:0a:8e:34:6f:57:de:5e:a5:c2:03:04:ae:28:cc:f7:b3:
01:d1:1a:9b:b6:90:d0:19:51:b6:cb:ef:56:90:a0:ca:11:c6:
44:91:d9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:07 2025 by rpki-client