Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/974238-01fa-4c15-b942-52d50b75d70c/1/WWm20MVbP-r5rj03hVH9yZ4y8_M.roa
File: WWm20MVbP-r5rj03hVH9yZ4y8_M.roa (raw, json)
Hash identifier: /nMkv1YABFQb10nBYN7BlLTIq4YlWy2bZl6lG1mpL3g=
Subject key identifier: 59:69:B6:D0:C5:5B:3F:EA:F9:AE:3D:37:85:51:FD:C9:9E:32:F3:F3
Certificate issuer: /CN=5e2f2e4b664d3edba236a8768dc9541e7d9d529c
Certificate serial: 01856EA6A859D8BE2B4CA9F689C4E2592897
Authority key identifier: 5E:2F:2E:4B:66:4D:3E:DB:A2:36:A8:76:8D:C9:54:1E:7D:9D:52:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xi8uS2ZNPtuiNqh2jclUHn2dUpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/974238-01fa-4c15-b942-52d50b75d70c/1/WWm20MVbP-r5rj03hVH9yZ4y8_M.roa
Signing time: Sun 01 Jan 2023 18:44:53 +0000
ROA not before: Sun 01 Jan 2023 18:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136744
IP address blocks: 195.96.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:a8:59:d8:be:2b:4c:a9:f6:89:c4:e2:59:28:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2f2e4b664d3edba236a8768dc9541e7d9d529c
Validity
Not Before: Jan 1 18:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5969b6d0c55b3feaf9ae3d378551fdc99e32f3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:c0:59:09:8d:47:5d:8b:39:1f:50:35:0e:
9b:11:b4:2d:77:5d:52:2b:a6:59:fa:07:c4:82:cc:
21:38:8c:2a:73:32:88:bb:dd:26:43:e8:58:7f:be:
2b:ab:e3:70:4b:95:4e:b2:d8:b0:39:9a:a7:9f:4e:
3c:ba:eb:d0:77:c3:ab:37:eb:31:c6:2c:e5:43:ba:
01:96:42:4d:55:7f:44:bb:5c:df:87:16:b6:f7:bd:
75:20:ad:6f:7e:70:69:04:e8:74:2f:0b:f5:7b:b6:
ea:de:8a:c8:fc:da:60:25:07:eb:80:b2:04:5f:a5:
e3:6e:dd:cc:c1:79:ad:f0:84:1b:97:f8:3b:d5:da:
29:85:6c:c0:b2:35:63:79:f2:4a:fe:64:10:e9:2c:
54:d3:99:e6:26:bc:03:69:c5:83:57:88:01:0d:c9:
5d:d0:2e:10:2c:f2:e0:e4:44:41:bf:31:72:50:fe:
91:be:b6:cd:dd:b7:c5:8b:48:3d:b9:ba:9c:c9:ef:
e9:36:79:77:8d:fd:49:26:61:5b:15:60:3b:e5:a1:
1c:df:75:66:14:2d:f0:79:bd:61:40:69:d0:20:55:
a5:d2:da:45:b8:8b:8c:5e:3e:d9:53:33:a6:ea:89:
ab:16:8d:9f:9b:56:bc:db:ad:11:4b:ba:d4:51:50:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:69:B6:D0:C5:5B:3F:EA:F9:AE:3D:37:85:51:FD:C9:9E:32:F3:F3
X509v3 Authority Key Identifier:
keyid:5E:2F:2E:4B:66:4D:3E:DB:A2:36:A8:76:8D:C9:54:1E:7D:9D:52:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xi8uS2ZNPtuiNqh2jclUHn2dUpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/974238-01fa-4c15-b942-52d50b75d70c/1/WWm20MVbP-r5rj03hVH9yZ4y8_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/974238-01fa-4c15-b942-52d50b75d70c/1/Xi8uS2ZNPtuiNqh2jclUHn2dUpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.132.0/24
Signature Algorithm: sha256WithRSAEncryption
71:08:55:d1:1e:76:86:84:f7:b4:2a:6e:1d:62:d4:62:66:9d:
1d:c9:6f:3b:50:8d:37:b9:a9:4c:57:2c:52:9d:e5:0e:78:31:
f9:04:13:d2:9d:ff:cf:ea:1f:c3:4d:11:81:64:bb:00:4a:8d:
d6:f6:2d:8a:18:45:ce:01:e9:eb:17:35:2f:71:40:48:6e:d6:
5c:bb:ba:b2:2d:63:a1:f9:da:9b:f5:4b:b8:7b:dc:d9:de:7f:
97:3a:2d:8a:08:12:c9:fe:fc:b3:d1:46:d5:a1:c4:95:13:a9:
9a:cc:9f:4d:40:f1:0b:8c:be:a6:64:29:36:d2:d8:bd:ff:45:
1b:bb:30:f2:4b:ee:a6:1d:d3:51:b8:e6:92:55:31:9b:1a:aa:
91:e6:e3:23:ca:3a:71:36:15:7f:4c:2f:6f:77:0e:24:45:ef:
05:6b:46:63:6e:c1:b5:4f:43:bf:2f:b4:66:b7:f5:86:f4:fe:
73:15:67:34:1c:32:d7:08:26:9e:96:f6:67:ee:c3:dd:e9:a6:
8a:bb:19:f3:a1:fa:2e:89:a3:55:a8:67:48:2a:a6:fb:dd:68:
04:e4:d7:63:f2:e8:04:95:d6:f2:dd:dc:a2:89:ba:72:81:53:
38:b9:94:84:82:b7:3f:e4:73:fc:8a:f4:68:04:35:93:0b:da:
6a:b9:be:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 09:34:20 2023 by rpki-client on console-fra.rpki-client.org