Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/WgwR5zRB5tbyY3fMAbULArmd1As.roa
File: WgwR5zRB5tbyY3fMAbULArmd1As.roa (raw, json)
Hash identifier: hiVVF/Tn1GcryNvhyF3O7DFor2bkc2eI0GILPI7xNEc=
Subject key identifier: 5A:0C:11:E7:34:41:E6:D6:F2:63:77:CC:01:B5:0B:02:B9:9D:D4:0B
Certificate issuer: /CN=346d4fea47fb39ec8c2e3aa93be60686dceaea45
Certificate serial: 018B273A058A42A4B3A8B6E83FA7ED387F4E
Authority key identifier: 34:6D:4F:EA:47:FB:39:EC:8C:2E:3A:A9:3B:E6:06:86:DC:EA:EA:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NG1P6kf7OeyMLjqpO-YGhtzq6kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/WgwR5zRB5tbyY3fMAbULArmd1As.roa
Signing time: Fri 13 Oct 2023 04:09:55 +0000
ROA not before: Fri 13 Oct 2023 04:09:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 79.110.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:27:3a:05:8a:42:a4:b3:a8:b6:e8:3f:a7:ed:38:7f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346d4fea47fb39ec8c2e3aa93be60686dceaea45
Validity
Not Before: Oct 13 04:09:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a0c11e73441e6d6f26377cc01b50b02b99dd40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:93:10:0e:de:02:4b:21:a6:3f:67:d8:46:
81:88:ba:34:25:5d:45:42:6e:5f:5a:be:14:ed:1b:
17:d7:c6:3f:88:ac:f0:24:2a:2b:27:58:ac:21:33:
a2:9c:4c:6c:72:19:3f:0e:87:bc:6f:50:99:f8:97:
7b:61:45:d8:2a:bf:2a:ea:ae:55:8b:17:96:02:21:
af:71:a2:91:48:2a:fb:bf:26:3c:c1:6a:ec:3d:e0:
e0:02:05:3d:19:19:d6:30:6e:2f:d8:4b:5f:73:a2:
cf:90:d5:bb:b0:8f:0b:f1:6e:fe:b1:25:9e:13:eb:
c7:cf:cc:15:47:a7:33:15:cb:a0:84:de:7f:6b:b8:
ad:0c:79:f6:8e:5d:3d:90:ce:0b:f1:b5:34:93:37:
b1:b1:6c:3e:0e:6b:0f:05:f7:c0:c0:95:b1:8a:8d:
35:9f:10:db:69:40:db:6d:80:87:23:47:0c:af:46:
b2:5d:22:bc:a6:bf:a3:43:04:12:84:dd:3c:62:70:
a5:61:bc:27:77:0e:2c:e2:96:52:74:5b:1c:eb:04:
dd:a7:5d:80:7f:fd:01:00:5c:f6:f5:d1:51:1f:eb:
b2:cd:48:9c:6e:b2:b6:cd:84:57:2d:76:de:9d:b6:
b9:ab:ef:fd:13:cb:69:ab:9c:b4:87:d4:32:c8:cb:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0C:11:E7:34:41:E6:D6:F2:63:77:CC:01:B5:0B:02:B9:9D:D4:0B
X509v3 Authority Key Identifier:
keyid:34:6D:4F:EA:47:FB:39:EC:8C:2E:3A:A9:3B:E6:06:86:DC:EA:EA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NG1P6kf7OeyMLjqpO-YGhtzq6kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/WgwR5zRB5tbyY3fMAbULArmd1As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/NG1P6kf7OeyMLjqpO-YGhtzq6kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.231.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a0:9a:81:2b:0e:ce:97:cc:d0:cb:86:88:c2:e6:07:0a:b8:
f6:f7:be:5d:d8:20:9f:55:28:56:49:4a:8e:c7:15:d7:52:f6:
0a:c1:00:08:a5:9c:7b:73:d3:70:d6:a9:f7:5f:89:7d:ec:e5:
98:1c:4c:a8:64:b9:10:3a:f6:46:77:b1:06:3f:76:67:d7:6a:
82:5e:9e:5d:3f:a7:6a:55:e9:a3:e4:df:73:3d:bd:50:49:c7:
5b:40:2d:24:db:eb:62:a9:e1:c3:74:e2:d5:d9:56:22:d9:f0:
18:fa:6a:91:c6:7c:28:5c:2b:f4:6b:c3:44:3f:b2:ed:22:a3:
25:8d:56:84:14:7c:fa:e3:00:fb:b8:6f:01:b0:27:48:52:1c:
f4:0c:76:66:de:c6:92:97:ab:7b:6f:d9:f7:ba:0d:fa:1c:ec:
09:a7:0a:9f:b1:87:62:f4:3e:a4:d6:d0:e1:0f:20:00:ea:83:
c5:ef:27:f2:7e:f2:0b:79:b3:07:41:03:48:7c:d4:18:13:d8:
be:60:dc:dd:00:56:83:6f:a2:c5:a6:3a:0f:bb:ed:f1:8b:a0:
0a:83:52:7e:14:c3:18:5e:e8:6b:1d:93:2e:da:01:b3:7a:aa:
3d:30:aa:38:74:c5:7c:e5:7e:13:90:4b:88:82:de:83:4a:04:
fe:3f:f7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:50 2024 by rpki-client on console-ams.rpki-client.org