Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a98a04-3309-4e72-a289-a65a835534e3/1/Waqf1uFhzMdYPAygDvwBjSfaziQ.roa
File: Waqf1uFhzMdYPAygDvwBjSfaziQ.roa (raw, json)
Hash identifier: ewvajCiywDBqgKJg7ixog/3GW2N2c/xPF3mNQuOkOmY=
Subject key identifier: 59:AA:9F:D6:E1:61:CC:C7:58:3C:0C:A0:0E:FC:01:8D:27:DA:CE:24
Certificate issuer: /CN=a8f910fc0f0b6e9d64666d068f1ce0ff4f296dc2
Certificate serial: 0181F4651047028C3BAB2DA3298BC8B6C53D
Authority key identifier: A8:F9:10:FC:0F:0B:6E:9D:64:66:6D:06:8F:1C:E0:FF:4F:29:6D:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPkQ_A8Lbp1kZm0Gjxzg_08pbcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a98a04-3309-4e72-a289-a65a835534e3/1/Waqf1uFhzMdYPAygDvwBjSfaziQ.roa
Signing time: Tue 12 Jul 2022 21:51:12 +0000
ROA not before: Tue 12 Jul 2022 21:51:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 176.100.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:65:10:47:02:8c:3b:ab:2d:a3:29:8b:c8:b6:c5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f910fc0f0b6e9d64666d068f1ce0ff4f296dc2
Validity
Not Before: Jul 12 21:51:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59aa9fd6e161ccc7583c0ca00efc018d27dace24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:2d:cc:04:6f:5c:d3:08:c7:3a:99:90:85:
67:6a:0d:e6:68:d2:73:01:d8:ec:13:ab:eb:fd:c2:
7b:e0:06:17:6c:74:77:83:22:bc:6e:78:77:4f:cd:
bf:42:de:95:d0:04:73:63:87:e1:7a:ec:dd:12:24:
b6:6f:e8:1b:58:41:98:b0:76:45:05:19:52:c7:77:
81:47:08:cd:5d:bb:0c:45:e5:06:e6:f0:46:b3:e7:
96:51:7d:38:87:4f:a4:b6:6c:25:b3:92:7d:79:01:
d4:54:cf:5f:08:a4:b4:20:b5:fd:64:32:ea:69:f3:
31:00:dd:74:df:9b:f8:ea:d9:7d:9b:50:38:7e:f2:
68:b6:aa:05:a0:79:be:3c:04:6b:85:8d:8c:96:7c:
eb:b0:13:2a:be:66:bb:a8:b5:81:c9:c0:a4:97:a1:
d0:29:6d:1c:8c:fe:fb:34:aa:1f:ec:8c:2a:dc:32:
da:14:59:f8:9c:65:c3:c6:98:02:ef:ef:0b:9d:51:
40:d6:a7:8a:3c:8d:9c:49:b9:f3:2b:43:7f:e2:c0:
3e:6a:c0:6f:2e:6c:71:8c:a7:f4:7c:43:c4:00:4a:
2e:95:2e:e5:5a:6d:80:78:91:0b:f3:78:38:e2:af:
ba:13:7b:c0:ca:3b:5c:ae:f0:42:94:5f:ac:ed:d8:
07:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AA:9F:D6:E1:61:CC:C7:58:3C:0C:A0:0E:FC:01:8D:27:DA:CE:24
X509v3 Authority Key Identifier:
keyid:A8:F9:10:FC:0F:0B:6E:9D:64:66:6D:06:8F:1C:E0:FF:4F:29:6D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPkQ_A8Lbp1kZm0Gjxzg_08pbcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a98a04-3309-4e72-a289-a65a835534e3/1/Waqf1uFhzMdYPAygDvwBjSfaziQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a98a04-3309-4e72-a289-a65a835534e3/1/qPkQ_A8Lbp1kZm0Gjxzg_08pbcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.44.0/24
Signature Algorithm: sha256WithRSAEncryption
27:32:ba:24:bc:53:0c:be:50:94:80:c4:9e:d9:d1:96:28:06:
2a:ee:95:ef:1f:4e:b7:4a:a2:11:a7:3b:a7:0b:e5:74:3f:e1:
e8:07:a0:9d:2a:03:5f:25:05:6d:5b:62:02:f3:73:b4:e8:3d:
2d:02:33:92:6d:e5:c4:04:e7:aa:cf:19:33:29:3d:a5:0f:8c:
13:49:6e:62:a5:6a:5d:a1:7c:dc:10:bd:ca:3c:df:89:09:40:
42:c9:5d:2d:f7:82:41:2c:19:70:3e:ab:5c:ce:77:14:c6:5c:
b4:4f:77:bb:d3:7e:93:f4:38:ca:46:41:2f:d8:22:aa:ac:b7:
60:e7:7d:03:64:8a:2e:72:11:3f:26:0e:5c:7e:5f:57:45:c0:
9b:4f:d4:ce:a0:63:a7:15:d6:68:21:c3:62:4e:ce:c3:07:67:
1d:4d:9f:8a:17:6b:37:cc:f6:0e:83:ff:49:9e:2f:06:b0:20:
70:87:d2:66:1a:28:8e:ef:b2:35:a1:ef:54:cb:ec:a7:2f:ee:
d8:64:56:c6:e2:50:70:ee:d1:25:83:fb:5e:ac:bb:63:f7:be:
76:d7:27:48:98:4e:57:44:3a:91:42:e3:93:cf:29:63:ab:f7:
b8:c7:02:83:b6:ec:89:d8:fe:a9:c9:61:b5:d3:af:13:5b:b1:
f3:6c:e0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:43 2024 by rpki-client on console-fra.rpki-client.org