Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/WZWzR18rzAe2oJ5pYdPOmfamBbk.roa
File: WZWzR18rzAe2oJ5pYdPOmfamBbk.roa (raw, json)
Hash identifier: ur9H2m+9opBGtVIhS1L9KJtB9NpHVH8b4jvlHQqc5fo=
Subject key identifier: 59:95:B3:47:5F:2B:CC:07:B6:A0:9E:69:61:D3:CE:99:F6:A6:05:B9
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182D8FEC1391E9BF1348C9E4F737E38C43D
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/WZWzR18rzAe2oJ5pYdPOmfamBbk.roa
Signing time: Fri 26 Aug 2022 07:12:30 +0000
ROA not before: Fri 26 Aug 2022 07:12:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19437
IP address blocks: 86.38.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d8:fe:c1:39:1e:9b:f1:34:8c:9e:4f:73:7e:38:c4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 26 07:12:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5995b3475f2bcc07b6a09e6961d3ce99f6a605b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:b6:96:e1:64:0b:13:89:27:b3:d5:d2:24:
7a:cd:74:3b:29:44:71:4d:3e:10:d8:0a:e9:07:2a:
82:ec:2e:07:04:aa:d3:5d:c8:09:72:db:28:8b:51:
61:1d:44:56:82:86:7d:46:2b:3e:1a:38:08:43:43:
40:d8:8c:b8:17:63:23:36:e3:30:50:1b:7a:d8:af:
1d:2e:41:fb:be:84:77:23:f8:21:32:61:64:20:85:
9d:13:f9:5d:5d:8a:c9:c3:9e:68:c6:79:a7:85:1e:
33:e6:37:0d:b6:54:4c:6d:6e:4a:c4:18:4a:cb:bd:
35:00:98:72:f5:ad:3d:15:b6:68:74:98:8f:e0:e6:
50:67:d8:48:0c:7d:b3:f9:0a:10:b8:f6:3c:69:f8:
67:43:65:33:96:e6:7c:20:0d:d3:0a:65:9b:7b:9f:
f3:65:89:f1:94:2c:6e:f5:dd:50:4c:2a:2a:ae:18:
ab:5e:05:06:c4:01:e9:31:4b:84:c9:9f:69:e2:9d:
b3:be:5c:ca:ed:3a:09:e8:cd:64:f1:af:4a:96:bc:
d3:3d:a8:9e:51:39:e4:51:d7:c3:97:3e:d0:c0:8e:
ce:12:c4:87:80:09:ef:65:86:1f:3b:27:ab:bc:cc:
bd:d1:b3:9b:b0:23:d8:99:8e:98:41:34:b2:9a:73:
99:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:95:B3:47:5F:2B:CC:07:B6:A0:9E:69:61:D3:CE:99:F6:A6:05:B9
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/WZWzR18rzAe2oJ5pYdPOmfamBbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.189.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:e2:fe:fd:42:59:c6:74:dd:f3:04:9d:9d:d6:62:e2:ba:a4:
f2:81:94:c9:cd:3e:ae:83:55:e2:bf:7b:de:ee:cd:03:ae:13:
f3:c0:a1:df:55:5a:33:db:29:71:40:d0:5f:0f:88:58:d8:7b:
cc:1b:c4:e0:8b:30:44:1c:6f:5b:e5:ff:fe:a1:c4:2e:12:47:
b6:12:8d:8f:64:0c:14:5c:f1:c4:45:e2:c6:c1:10:03:a0:65:
84:af:5c:38:85:92:3d:62:49:7a:5e:03:e8:cb:5f:29:c3:dc:
ca:c2:58:80:44:17:31:1a:70:fc:09:6b:2a:63:25:b2:cb:6f:
98:0d:d5:0e:c8:0b:6e:80:43:eb:34:07:21:06:b2:52:5a:0d:
8e:87:51:31:41:99:89:20:62:ad:41:e1:c1:01:dc:1c:58:97:
d2:ae:0f:63:9d:4e:f7:30:37:98:c0:7e:38:70:58:76:76:07:
15:68:f8:ea:dd:85:47:f5:b5:73:f3:4a:02:b7:92:35:59:26:
c7:2d:fb:a1:de:a9:8d:2d:b7:52:5e:9b:23:6b:14:5d:18:e7:
e4:b1:d1:46:6c:41:90:08:e7:53:1f:f9:22:e8:5c:8e:46:fb:
4e:c2:45:1f:10:bb:bf:99:47:df:f9:62:2a:a9:d5:a9:6a:6c:
97:cf:a1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org