Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/18e9c2-bd1f-43a2-8660-384c541a59e1/1/wNpue2OEiHlU7N3vCXyA0WjcimQ.roa
File: wNpue2OEiHlU7N3vCXyA0WjcimQ.roa (raw, json)
Hash identifier: tUDZjNemJYGGBdi7A6up0MOA7yJgUpzBME0jWBrFYuc=
Subject key identifier: C0:DA:6E:7B:63:84:88:79:54:EC:DD:EF:09:7C:80:D1:68:DC:8A:64
Certificate issuer: /CN=175e203932401abb457968db37075a17c68f09f6
Certificate serial: 01856FC251313625D014E0AC700BBB703EE4
Authority key identifier: 17:5E:20:39:32:40:1A:BB:45:79:68:DB:37:07:5A:17:C6:8F:09:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F14gOTJAGrtFeWjbNwdaF8aPCfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/18e9c2-bd1f-43a2-8660-384c541a59e1/1/wNpue2OEiHlU7N3vCXyA0WjcimQ.roa
Signing time: Sun 01 Jan 2023 23:54:43 +0000
ROA not before: Sun 01 Jan 2023 23:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206592
IP address blocks: 176.105.152.0/22 maxlen: 22
185.82.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:51:31:36:25:d0:14:e0:ac:70:0b:bb:70:3e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175e203932401abb457968db37075a17c68f09f6
Validity
Not Before: Jan 1 23:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0da6e7b6384887954ecddef097c80d168dc8a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b9:6b:a9:64:01:11:16:80:1d:94:64:5d:48:
6d:26:fb:f1:54:06:6f:25:91:99:80:ea:07:e2:89:
6e:ea:4b:f7:8d:da:95:27:1b:d5:1a:3b:f0:ce:8a:
48:66:45:01:c8:9d:fa:8a:58:48:e0:23:b7:df:c2:
d8:4d:f1:93:30:b2:f3:30:f3:ec:0c:7f:f1:de:80:
ac:ea:ce:e1:28:e2:f9:f3:1f:69:dd:e4:c7:e7:35:
47:6e:b4:1e:3d:a4:a9:d0:33:ac:fe:d2:8d:80:d9:
17:0b:d2:db:cc:bf:08:45:23:d1:c7:f8:04:6a:1a:
91:fd:ad:d7:f0:a9:69:22:5c:0f:88:a2:1e:8b:d4:
19:95:37:98:b6:22:61:15:92:f4:7e:f1:1e:b5:f8:
86:a1:2e:3f:68:83:9e:0e:8e:78:c9:c5:66:02:0e:
99:d7:41:b6:0d:d5:32:5f:33:f2:48:18:cc:bd:f3:
b2:ea:12:9d:f7:e1:6d:46:29:65:17:63:fe:e5:66:
e6:32:14:73:e1:d5:8b:e4:cb:5a:d3:39:32:62:43:
b4:4d:1f:f2:83:14:f6:31:13:da:33:66:3a:3b:5f:
49:5e:e4:19:b8:27:9a:ef:e9:9f:8b:7b:1e:f5:d0:
d6:b7:4e:ec:08:df:e8:1a:1e:ac:9f:b9:4c:36:86:
6d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DA:6E:7B:63:84:88:79:54:EC:DD:EF:09:7C:80:D1:68:DC:8A:64
X509v3 Authority Key Identifier:
keyid:17:5E:20:39:32:40:1A:BB:45:79:68:DB:37:07:5A:17:C6:8F:09:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F14gOTJAGrtFeWjbNwdaF8aPCfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/18e9c2-bd1f-43a2-8660-384c541a59e1/1/wNpue2OEiHlU7N3vCXyA0WjcimQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/18e9c2-bd1f-43a2-8660-384c541a59e1/1/F14gOTJAGrtFeWjbNwdaF8aPCfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.152.0/22
185.82.56.0/22
Signature Algorithm: sha256WithRSAEncryption
33:ce:a1:3e:fb:81:dc:38:00:5b:ff:b3:26:50:36:26:91:dd:
c0:9a:18:64:5c:2c:b9:4e:9d:6a:0d:64:33:76:4d:80:d5:39:
a3:3c:dd:18:d9:a1:2f:0b:e4:25:82:e8:f8:99:94:4b:dc:af:
e5:fb:60:a8:1f:0c:21:64:4b:b8:36:59:21:8c:08:57:0f:11:
25:6a:3e:28:97:ef:5a:74:77:40:95:e2:a0:1a:ea:e4:d0:1d:
f5:3b:91:de:2c:07:60:0d:9a:15:e5:e3:7c:be:c5:15:2d:e2:
98:74:06:ed:4c:3b:49:34:c0:e2:9c:03:24:18:35:04:19:c9:
a3:f9:c6:9e:70:a8:4d:0b:b2:0b:3c:e9:33:55:ba:6a:87:a3:
ea:f3:fd:ed:24:da:0a:f9:c5:8a:87:88:21:b3:29:91:07:0e:
38:16:5b:61:71:3d:22:70:84:13:3f:a2:e9:3e:7c:a7:21:7a:
e1:20:b8:bd:b0:aa:4a:e7:8e:bf:3a:ff:b1:ff:ab:da:6c:88:
96:44:c5:83:1f:5d:8e:cc:aa:34:1e:9a:ff:4f:28:68:1a:75:
6a:0e:e2:91:dd:5a:56:0c:5c:48:44:12:84:a6:cc:6b:d9:a9:
6d:c8:71:05:61:1c:1d:d3:28:1c:92:7a:ae:8c:8c:16:e4:38:
c2:c5:29:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:52 2024 by rpki-client on console-ams.rpki-client.org