Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/383b38-6786-4c11-aaea-7e70ff214871/1/WMt5rP8rsJa7eggIHmKovMxscG4.roa
File: WMt5rP8rsJa7eggIHmKovMxscG4.roa (raw, json)
Hash identifier: 9CGLDyMM6sLCigo1/4Ubwfucn5yT+R01l6jFNPCNHlQ=
Subject key identifier: 58:CB:79:AC:FF:2B:B0:96:BB:7A:08:08:1E:62:A8:BC:CC:6C:70:6E
Certificate issuer: /CN=af4c5436c9148ab39f3b90970e2c3272b2e0c6c2
Certificate serial: 0183085A0BDADFD540D73C54E834EB0820FC
Authority key identifier: AF:4C:54:36:C9:14:8A:B3:9F:3B:90:97:0E:2C:32:72:B2:E0:C6:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0xUNskUirOfO5CXDiwycrLgxsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/383b38-6786-4c11-aaea-7e70ff214871/1/WMt5rP8rsJa7eggIHmKovMxscG4.roa
Signing time: Sun 04 Sep 2022 11:54:22 +0000
ROA not before: Sun 04 Sep 2022 11:54:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8540
IP address blocks: 195.128.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:08:5a:0b:da:df:d5:40:d7:3c:54:e8:34:eb:08:20:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4c5436c9148ab39f3b90970e2c3272b2e0c6c2
Validity
Not Before: Sep 4 11:54:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58cb79acff2bb096bb7a08081e62a8bccc6c706e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:e2:53:df:95:bf:74:39:92:57:ac:42:be:
b6:76:c7:97:42:58:12:4c:5f:c9:d5:5c:f4:e4:31:
b3:74:51:e2:ff:9c:75:43:12:4e:de:52:f9:78:45:
bb:4b:8c:00:6a:4c:1a:28:3f:bd:28:93:50:20:22:
94:84:43:f6:01:49:b6:35:7e:e1:ef:24:ae:f0:95:
b6:dd:01:bb:94:f0:aa:4c:95:cf:75:a1:28:c4:a4:
80:4e:de:b9:d1:d2:5a:eb:84:2c:e5:b2:8d:bd:6c:
4d:69:9b:12:31:4e:7c:8e:cd:3d:f1:ea:13:12:71:
11:6d:38:df:91:93:4a:be:d7:8b:16:c1:6b:e2:ba:
30:3e:54:df:f9:42:f1:9d:c6:25:15:e0:93:7f:a4:
14:35:6f:b9:bd:3a:56:47:c3:36:ca:30:d0:6b:61:
30:ea:e4:42:ed:33:82:a8:70:7e:77:0c:e1:01:0f:
86:11:e1:5c:af:c4:fc:4d:62:ba:9f:cc:5e:8a:62:
54:23:14:d9:86:1d:03:1d:53:cd:43:66:d5:c4:29:
c0:74:ad:66:82:10:0a:18:25:d0:21:ca:f6:da:52:
97:47:bb:81:c1:42:83:e5:af:23:ee:db:2e:4a:e6:
ad:b3:89:23:af:fb:fd:cd:31:ec:b2:76:7e:f1:fb:
e5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CB:79:AC:FF:2B:B0:96:BB:7A:08:08:1E:62:A8:BC:CC:6C:70:6E
X509v3 Authority Key Identifier:
keyid:AF:4C:54:36:C9:14:8A:B3:9F:3B:90:97:0E:2C:32:72:B2:E0:C6:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0xUNskUirOfO5CXDiwycrLgxsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/383b38-6786-4c11-aaea-7e70ff214871/1/WMt5rP8rsJa7eggIHmKovMxscG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/383b38-6786-4c11-aaea-7e70ff214871/1/r0xUNskUirOfO5CXDiwycrLgxsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.151.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d7:a1:a7:83:80:4e:1d:b5:5f:37:da:02:9d:20:af:92:43:
d5:e1:6b:f3:e4:fd:ea:63:8f:44:a8:0c:35:08:e0:3d:13:71:
c5:00:d5:a3:5d:3c:aa:f8:35:f2:9b:7f:ef:ad:b0:eb:b0:80:
c8:55:ef:11:c9:8f:df:e6:b9:75:c9:b7:b9:7e:e2:7d:eb:ef:
a1:d1:82:db:9d:de:ef:d8:75:da:f1:fc:6c:3b:0b:d1:d9:18:
83:bd:13:3d:f3:db:76:2f:8c:6d:4d:db:64:9a:07:fe:3a:5d:
db:60:ad:f7:88:88:8e:8e:dc:43:80:a2:13:10:24:b9:88:f2:
77:be:1b:bf:75:61:53:88:c6:8d:8c:41:9e:a1:74:ae:98:7e:
f0:cc:f9:8b:60:de:92:f6:34:51:34:75:7e:0d:34:9f:c0:0a:
bb:c8:fe:86:ac:7c:3b:f5:92:7b:40:3d:b7:8f:e2:77:52:26:
3f:da:e3:6a:9f:42:d3:ab:2b:0f:f1:ca:db:62:97:6b:ab:94:
bd:7e:0c:68:21:c5:43:57:75:64:6a:c1:4f:10:ec:e4:7e:15:
fa:e2:a8:bd:e5:f8:70:43:fc:39:fb:0e:93:14:6d:3a:ae:4e:
43:38:31:06:6d:13:e3:46:19:5d:1c:36:c0:88:ca:7f:2d:0c:
25:bd:62:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:02 2024 by rpki-client on console-fra.rpki-client.org