Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d7d11f-a94e-4262-bf21-dda11a535986/1/wWFF7mnFUxhl0oAwRCIMFXKqUxA.roa
File: wWFF7mnFUxhl0oAwRCIMFXKqUxA.roa (raw, json)
Hash identifier: s6iCTMXU9SSColfi0CatwapboyoCkzd0qHGseiH9As8=
Subject key identifier: C1:61:45:EE:69:C5:53:18:65:D2:80:30:44:22:0C:15:72:AA:53:10
Certificate issuer: /CN=5be23e3934f0b49a0bb965105c21420865a9222b
Certificate serial: 01856D8ACC2235FE0EAADA3C4A684A7EC487
Authority key identifier: 5B:E2:3E:39:34:F0:B4:9A:0B:B9:65:10:5C:21:42:08:65:A9:22:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-I-OTTwtJoLuWUQXCFCCGWpIis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d7d11f-a94e-4262-bf21-dda11a535986/1/wWFF7mnFUxhl0oAwRCIMFXKqUxA.roa
Signing time: Sun 01 Jan 2023 13:34:50 +0000
ROA not before: Sun 01 Jan 2023 13:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.234.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:cc:22:35:fe:0e:aa:da:3c:4a:68:4a:7e:c4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be23e3934f0b49a0bb965105c21420865a9222b
Validity
Not Before: Jan 1 13:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c16145ee69c5531865d2803044220c1572aa5310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:be:43:f4:bd:49:d9:f4:6c:9e:16:1f:1b:
d9:ec:b7:e2:2a:0e:e6:02:cf:09:75:69:85:7c:00:
5a:0b:25:78:89:03:fc:35:9b:92:03:bf:b0:ef:5d:
b3:9c:12:2f:4b:eb:1c:c3:ab:66:24:cc:9f:65:a9:
0f:8c:28:9e:99:5a:69:e2:59:3d:02:a1:d0:08:fa:
ea:75:32:19:ad:6c:61:5b:a9:fa:d0:b1:2d:91:c3:
27:b5:3c:aa:8b:9e:ba:4e:d7:0f:1a:0d:81:b3:9a:
b3:93:d4:0e:dd:ba:f1:cc:a2:e4:45:88:89:da:bc:
18:db:02:a8:cb:ad:42:ec:10:7c:21:3d:81:3d:b5:
2d:58:d1:3e:5d:d6:82:2d:eb:c4:ad:9b:e6:bf:07:
bf:b5:e8:0e:6b:36:30:af:c8:d5:86:3e:e3:6d:9b:
2c:e5:6e:f9:52:74:8c:d2:cf:79:6a:c4:63:94:ab:
3d:43:64:90:e4:82:c2:ef:09:2f:e0:f7:10:b4:38:
c4:71:39:d5:39:83:40:8d:e4:61:9f:d0:64:e7:93:
36:36:fc:6d:2a:d2:e2:10:0e:9b:f9:fb:3e:31:af:
5f:0d:4a:09:f1:57:bf:53:03:f6:80:47:3e:90:81:
24:d7:3f:aa:f7:57:33:77:eb:29:49:d4:9a:6c:63:
75:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:61:45:EE:69:C5:53:18:65:D2:80:30:44:22:0C:15:72:AA:53:10
X509v3 Authority Key Identifier:
keyid:5B:E2:3E:39:34:F0:B4:9A:0B:B9:65:10:5C:21:42:08:65:A9:22:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-I-OTTwtJoLuWUQXCFCCGWpIis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d7d11f-a94e-4262-bf21-dda11a535986/1/wWFF7mnFUxhl0oAwRCIMFXKqUxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d7d11f-a94e-4262-bf21-dda11a535986/1/W-I-OTTwtJoLuWUQXCFCCGWpIis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.192.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:31:ea:01:16:a0:8b:d1:73:15:cb:11:6a:8f:41:38:d8:22:
30:58:19:79:17:b3:16:2f:83:ff:a6:ba:28:54:68:d1:c2:fb:
68:0e:63:4b:28:e5:4a:b9:8f:ef:cc:b4:cc:3b:55:00:43:b1:
a4:e4:9c:57:a7:8f:0e:e5:13:2b:55:19:23:af:5a:c7:7d:88:
4d:1b:46:25:22:44:e1:80:75:5f:4e:71:b6:97:21:79:20:5e:
1e:9c:b8:1b:83:a9:73:cf:80:ff:91:74:0e:c6:4c:13:8e:63:
05:b5:1d:e5:af:49:e2:f9:25:41:09:13:52:80:6b:3c:31:4f:
fc:f4:9e:c7:bd:12:9d:2b:e3:6c:3f:2d:0a:26:85:73:e4:4e:
75:40:ef:5c:d2:10:3c:ae:98:ba:61:ed:94:d4:6b:5a:35:0b:
65:a7:54:2c:ed:9d:2e:6d:b0:6e:7a:bc:1d:da:1a:64:8f:27:
95:e8:ba:5c:9c:b1:29:2e:45:0d:e6:3d:10:40:37:49:3b:0b:
82:70:03:7d:19:09:dd:35:55:a2:97:54:4f:d8:55:6e:2d:ba:
77:80:29:f9:83:22:c1:6b:8a:e8:ee:28:6e:df:a9:90:10:39:
13:d9:fc:4a:a7:fc:b2:55:cf:39:de:27:25:4d:85:c2:76:ac:
aa:90:d6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:15 2024 by rpki-client on console-fra.rpki-client.org