Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/wqjtdg6bwWjGTCytLQ86AriJNLk.roa
File: wqjtdg6bwWjGTCytLQ86AriJNLk.roa (raw, json)
Hash identifier: J7zBzha8nDXT/SJ02jwY0E0xlJuliecUJapMOev3OeU=
Subject key identifier: C2:A8:ED:76:0E:9B:C1:68:C6:4C:2C:AD:2D:0F:3A:02:B8:89:34:B9
Certificate issuer: /CN=2d9f4c904316a6e3672ac071e42324f2198344b5
Certificate serial: 0185E99856EF8A694583E8DA7E7AC430BEB9
Authority key identifier: 2D:9F:4C:90:43:16:A6:E3:67:2A:C0:71:E4:23:24:F2:19:83:44:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ9MkEMWpuNnKsBx5CMk8hmDRLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/wqjtdg6bwWjGTCytLQ86AriJNLk.roa
Signing time: Wed 25 Jan 2023 15:42:33 +0000
ROA not before: Wed 25 Jan 2023 15:42:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21263
IP address blocks: 149.238.32.0/19 maxlen: 24
149.238.160.0/19 maxlen: 24
192.77.114.0/23 maxlen: 24
192.112.208.0/24 maxlen: 24
149.238.192.0/19 maxlen: 24
149.238.0.0/19 maxlen: 24
149.238.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:98:56:ef:8a:69:45:83:e8:da:7e:7a:c4:30:be:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9f4c904316a6e3672ac071e42324f2198344b5
Validity
Not Before: Jan 25 15:42:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2a8ed760e9bc168c64c2cad2d0f3a02b88934b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:b1:f2:50:7e:4c:2a:a6:01:1f:62:1c:db:
4e:97:94:10:61:a4:d6:46:8c:be:ea:35:3f:f0:f0:
96:9f:7c:3c:50:52:ec:cf:05:4c:ab:89:42:10:70:
c2:7f:cb:da:5f:19:63:c5:fe:c5:33:24:fc:4d:36:
91:8e:fe:bd:cf:20:7e:35:1c:30:63:a2:47:f4:ba:
a9:18:0b:25:3e:0a:b0:3d:41:d1:56:2f:cc:98:2c:
60:e7:b6:2b:30:ee:30:c6:84:a5:25:14:8f:64:75:
9c:f2:d1:c1:2a:4d:a0:21:42:72:99:5f:61:a0:b2:
41:c8:dd:3d:e5:34:3c:11:ca:1b:ee:28:b4:0e:20:
d7:15:61:c3:fb:98:d8:92:94:3e:0b:c7:40:45:dd:
52:f1:ac:e0:02:09:17:39:97:35:ba:f2:a9:56:5b:
f4:a5:69:b9:bf:50:99:ba:44:63:fa:a5:e1:9d:b6:
cb:09:c2:c2:f3:72:2a:3e:df:83:55:ca:61:87:91:
2e:0a:70:f4:2b:d7:98:cf:6a:42:13:ea:0b:b0:d9:
24:ec:ab:3c:bc:ea:73:8d:60:1b:35:7f:c4:85:6b:
12:39:18:46:c7:3e:66:b2:31:2a:b4:85:10:b8:2c:
ab:0e:73:5c:23:3b:24:72:71:67:66:c9:7a:54:80:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A8:ED:76:0E:9B:C1:68:C6:4C:2C:AD:2D:0F:3A:02:B8:89:34:B9
X509v3 Authority Key Identifier:
keyid:2D:9F:4C:90:43:16:A6:E3:67:2A:C0:71:E4:23:24:F2:19:83:44:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ9MkEMWpuNnKsBx5CMk8hmDRLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/wqjtdg6bwWjGTCytLQ86AriJNLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/LZ9MkEMWpuNnKsBx5CMk8hmDRLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.238.0.0/18
149.238.160.0-149.238.255.255
192.77.114.0/23
192.112.208.0/24
Signature Algorithm: sha256WithRSAEncryption
52:1b:58:14:c7:a0:97:e4:ed:c1:70:37:e7:c4:c7:e2:67:16:
08:77:30:78:56:dc:c3:71:e0:f0:36:49:ce:ad:19:8f:1b:60:
34:aa:d1:a5:1a:a4:fb:7f:63:0c:b4:72:10:3c:8e:90:35:4f:
cd:86:49:6a:f8:c0:4e:02:ef:2a:c2:7d:fe:10:3f:02:b7:00:
42:28:a6:c8:e8:59:54:a2:1f:ba:c0:6a:99:a8:a3:39:31:d4:
1a:4f:11:bf:e6:e2:e2:12:60:83:59:99:f0:6a:c3:94:b4:d9:
a6:77:29:8f:85:86:36:74:d2:5b:c6:60:61:eb:d2:04:86:37:
c4:18:c9:39:d2:e8:fa:15:9d:4f:26:97:32:92:1c:9d:23:f2:
3c:f4:d5:b9:c4:68:21:58:5d:f5:9c:cd:54:6f:f9:69:10:cc:
b5:b4:3c:97:59:12:90:3d:2d:bf:84:ce:d4:62:59:67:26:a2:
14:6d:44:d3:da:aa:af:18:f8:25:38:34:71:d3:8c:cb:56:0d:
d7:2f:b9:6d:12:6f:7b:ac:94:fc:d4:5a:0e:0d:46:8b:97:cf:
9b:a4:71:24:08:f0:61:b4:82:b5:c1:ad:21:34:0e:a7:64:ad:
20:16:f2:fc:73:c8:a8:01:ff:bb:23:01:6c:71:0a:ee:56:25:
c5:5f:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:04 2024 by rpki-client on console-ams.rpki-client.org