Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/wjWF5UZtPWM2SQoBp-szKBPS4II.roa
File: wjWF5UZtPWM2SQoBp-szKBPS4II.roa (raw, json)
Hash identifier: 1qUjbXyheEavVlAo5V3S+MjpaBllblPAk1nZ1boiyAg=
Subject key identifier: C2:35:85:E5:46:6D:3D:63:36:49:0A:01:A7:EB:33:28:13:D2:E0:82
Certificate issuer: /CN=df4657812435bb1af4802f96032f91c57cbcc933
Certificate serial: 0181F705053592084DF64A88A4D6A28B5EFE
Authority key identifier: DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/wjWF5UZtPWM2SQoBp-szKBPS4II.roa
Signing time: Wed 13 Jul 2022 10:05:10 +0000
ROA not before: Wed 13 Jul 2022 10:05:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12722
IP address blocks: 194.34.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:05:05:35:92:08:4d:f6:4a:88:a4:d6:a2:8b:5e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4657812435bb1af4802f96032f91c57cbcc933
Validity
Not Before: Jul 13 10:05:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c23585e5466d3d6336490a01a7eb332813d2e082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2d:20:fc:d9:5e:cb:99:37:da:77:d5:f8:61:
1c:66:2d:dc:2e:39:a4:73:8b:8a:1a:04:3e:82:c0:
14:af:2f:de:38:dd:b9:17:b9:40:d9:04:17:c9:7f:
af:e8:89:d4:a3:23:27:b4:95:bd:3c:7e:1a:36:17:
7e:2d:fb:f8:13:90:4d:c9:77:1b:75:8e:0e:07:a7:
06:05:04:bf:73:f5:c6:22:19:c1:5a:07:13:f0:95:
0f:99:36:48:60:f9:23:20:ef:f1:de:2a:1c:19:02:
c6:0b:57:c1:4b:16:31:ed:9d:0c:66:d1:12:77:4b:
5a:e6:fd:1e:d0:84:05:19:4d:e5:21:0f:2c:cb:9d:
75:e7:8f:52:08:11:af:e0:96:44:a1:75:08:9e:1b:
66:2d:4a:7c:62:52:be:04:1b:44:07:ee:fd:3b:b6:
26:b0:bf:a1:50:df:b3:40:e1:03:d6:4d:b5:75:0f:
a4:a6:f7:28:87:63:71:c0:81:91:8d:62:03:5f:17:
c8:04:e9:9f:b1:93:c1:24:57:c1:dd:4b:7f:08:ca:
ce:48:1f:7f:32:e3:b6:91:c2:d2:d9:aa:ac:e8:48:
6b:a0:5d:48:b2:4e:c2:99:bd:9e:42:c9:36:5d:4c:
47:10:6f:86:8b:de:43:a4:ac:d6:af:e9:ce:8a:12:
d9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:35:85:E5:46:6D:3D:63:36:49:0A:01:A7:EB:33:28:13:D2:E0:82
X509v3 Authority Key Identifier:
keyid:DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/wjWF5UZtPWM2SQoBp-szKBPS4II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.250.0/24
Signature Algorithm: sha256WithRSAEncryption
42:1f:7f:b7:a4:1f:54:ac:8a:74:0e:d3:25:f5:f7:96:c2:0b:
16:b6:5b:8c:5f:c3:0a:b2:e3:1f:eb:a3:ff:49:ec:75:8f:9e:
27:4e:94:34:15:3e:d3:ae:c3:99:7f:a8:59:ea:eb:ff:58:cb:
a3:82:a6:30:ed:ce:7a:25:c6:f6:88:a5:89:df:bf:9d:d0:1b:
52:67:35:cc:18:f7:c9:e3:f6:d2:24:f3:21:31:2d:e6:01:d5:
89:26:17:af:a1:57:83:cb:a7:9c:48:d6:65:d8:0c:bd:fe:36:
dc:e6:89:58:3b:ed:f0:d4:ac:04:5c:1a:cd:07:96:16:68:95:
4a:df:c4:49:1c:51:47:80:62:02:93:01:35:a4:a8:9d:c9:9c:
cc:29:8a:8c:18:9b:0a:59:5d:e9:0a:6a:43:61:51:7d:5a:bf:
73:a2:74:a6:f7:8e:64:e5:29:72:ef:bf:8d:8b:25:a7:40:13:
0a:d1:58:f7:d6:25:01:fd:51:87:83:42:68:90:9f:34:14:be:
7a:8e:59:ce:7e:35:f1:d6:9b:51:ed:7e:ac:6c:3b:8d:45:17:
2a:d1:88:c3:bb:ee:42:e4:cf:ef:b7:b0:50:8b:9e:a8:f6:9d:
23:22:da:62:92:46:c0:59:1d:1c:0a:82:26:c1:ca:df:a0:7c:
90:6d:ab:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:25 2023 by rpki-client on console-ams.rpki-client.org