Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3eee06-5994-4500-bdd8-32099691158b/1/WlGJbikm2nZoR4c7-3CEDeyCZvo.roa
File: WlGJbikm2nZoR4c7-3CEDeyCZvo.roa (raw, json)
Hash identifier: zaIINI+jHjhO8PNCZiLJGPQyE6QOr0ZMZ9BUgR7XSqQ=
Subject key identifier: 5A:51:89:6E:29:26:DA:76:68:47:87:3B:FB:70:84:0D:EC:82:66:FA
Certificate issuer: /CN=ef4b46ab4b83f5d1a22248b2ac26414388091d33
Certificate serial: 0186787151E1453A7822FA5B30C5CB6D77FE
Authority key identifier: EF:4B:46:AB:4B:83:F5:D1:A2:22:48:B2:AC:26:41:43:88:09:1D:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70tGq0uD9dGiIkiyrCZBQ4gJHTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3eee06-5994-4500-bdd8-32099691158b/1/WlGJbikm2nZoR4c7-3CEDeyCZvo.roa
Signing time: Wed 22 Feb 2023 09:25:37 +0000
ROA not before: Wed 22 Feb 2023 09:25:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58070
IP address blocks: 46.254.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:71:51:e1:45:3a:78:22:fa:5b:30:c5:cb:6d:77:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4b46ab4b83f5d1a22248b2ac26414388091d33
Validity
Not Before: Feb 22 09:25:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a51896e2926da766847873bfb70840dec8266fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:af:6e:a9:06:a9:e9:22:03:61:71:46:a8:
24:84:ef:47:3d:e9:4b:a2:70:22:d1:c8:7f:1d:29:
63:a2:9f:b4:15:6f:26:90:fa:17:74:bf:c2:8c:b9:
34:ae:05:5d:ff:a5:c2:57:9c:84:cc:29:80:0a:a1:
0f:d9:8e:20:a6:e6:8b:dd:63:26:cb:23:44:92:b0:
f7:6c:06:71:d9:2e:93:bb:0a:0f:c9:81:7a:31:06:
03:c6:3e:d1:3d:b3:30:6f:01:8f:1a:34:5b:92:7a:
8b:13:3c:3a:fb:2e:ea:d8:b1:c4:de:de:f2:89:04:
fe:54:70:65:7f:5e:10:b9:4d:ad:20:65:7e:53:0e:
4f:ff:c6:eb:fe:a3:86:25:3c:17:5a:6e:67:d1:9b:
03:00:91:f3:f4:9e:c1:c9:4a:bd:ea:de:2f:87:b3:
d4:1c:97:ea:a6:9f:35:91:28:7a:18:ea:2d:74:63:
b4:3c:49:f8:e4:78:45:bc:f6:14:d5:3d:5c:35:18:
92:de:30:15:c8:38:72:62:31:b1:1d:63:06:aa:47:
f2:d6:dd:c8:5f:ca:21:05:ed:6d:0a:49:b8:12:13:
25:1e:c1:17:a8:50:8f:c2:2f:c9:33:5e:89:fe:81:
09:26:46:fc:b0:91:9a:87:51:3b:2d:ec:10:7f:c1:
24:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:51:89:6E:29:26:DA:76:68:47:87:3B:FB:70:84:0D:EC:82:66:FA
X509v3 Authority Key Identifier:
keyid:EF:4B:46:AB:4B:83:F5:D1:A2:22:48:B2:AC:26:41:43:88:09:1D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70tGq0uD9dGiIkiyrCZBQ4gJHTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3eee06-5994-4500-bdd8-32099691158b/1/WlGJbikm2nZoR4c7-3CEDeyCZvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3eee06-5994-4500-bdd8-32099691158b/1/70tGq0uD9dGiIkiyrCZBQ4gJHTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.109.0/24
Signature Algorithm: sha256WithRSAEncryption
32:bf:22:b3:81:7a:6c:6c:ab:81:64:c7:31:24:93:28:ee:5d:
a7:da:2c:d9:c4:9d:35:90:ec:67:4c:f5:a6:95:60:e7:24:c9:
7b:2e:26:0f:31:1d:6a:16:fe:30:da:dd:6f:36:f8:52:37:8a:
10:0b:bc:23:2b:60:6e:b0:e3:56:c9:77:01:e8:ab:0a:64:85:
5b:f7:53:1b:d0:bb:f8:ba:5b:a2:ed:35:0f:92:8b:a0:ac:8e:
13:52:88:cd:94:67:fc:86:dc:c4:30:89:56:ac:05:45:4e:d9:
7f:ae:69:02:51:07:55:41:be:9e:9c:f4:13:b4:9d:50:f4:fc:
d1:0c:b1:a2:a1:bc:ca:90:ec:1e:b5:16:82:4c:c9:47:97:37:
11:d5:8b:b2:a9:f0:27:cc:b8:54:10:a6:1c:2c:18:0f:a3:b3:
13:96:b0:d9:bd:74:98:d9:5a:f2:31:24:55:b0:54:8d:ce:9b:
8d:c7:e2:e9:b4:5c:b9:5c:72:d2:7d:37:1f:08:4b:3c:4c:83:
8d:fb:86:59:00:01:7a:ca:dc:4e:c2:54:77:43:3b:77:75:ed:
e0:24:1a:84:e0:6c:20:8a:4e:0f:21:26:27:b7:0e:f4:a4:25:
14:46:6d:93:aa:78:4a:d7:f2:63:cd:47:9b:b2:1f:ec:dd:63:
80:0e:91:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:44 2024 by rpki-client on console-fra.rpki-client.org