Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/wJjHTJEJawm-mvGQWlnZdjE__mo.roa
File: wJjHTJEJawm-mvGQWlnZdjE__mo.roa (raw, json)
Hash identifier: y4ayogeYLOt2A8TfWyXAfJ5RrWGX6kT7e3miXhkIm/o=
Subject key identifier: C0:98:C7:4C:91:09:6B:09:BE:9A:F1:90:5A:59:D9:76:31:3F:FE:6A
Certificate issuer: /CN=f650854368bd3aa0bee49bf7edc0311b90df3717
Certificate serial: 015FE918
Authority key identifier: F6:50:85:43:68:BD:3A:A0:BE:E4:9B:F7:ED:C0:31:1B:90:DF:37:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/wJjHTJEJawm-mvGQWlnZdjE__mo.roa
Signing time: Sat 01 Jan 2022 16:01:33 +0000
ROA not before: Sat 01 Jan 2022 16:01:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211195
IP address blocks: 185.65.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23062808 (0x15fe918)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f650854368bd3aa0bee49bf7edc0311b90df3717
Validity
Not Before: Jan 1 16:01:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c098c74c91096b09be9af1905a59d976313ffe6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:a6:90:99:82:7c:5a:a6:e4:c9:f6:c2:23:
b0:f4:81:7a:72:98:60:c0:ea:7d:d8:40:3a:db:0b:
51:08:df:f1:fc:94:40:75:a6:2f:b3:29:20:34:d4:
eb:c5:89:2e:ae:36:d8:dd:5e:99:f2:00:3b:57:d5:
64:5b:68:c5:d5:98:96:c0:1d:a2:3a:ce:ca:6f:59:
d9:36:29:a1:25:da:19:a4:12:c8:31:fa:6a:20:98:
cf:4a:3d:a2:11:66:8b:26:3a:3c:f3:c4:26:a7:cf:
39:7d:d0:4e:b1:8b:1b:44:2f:6d:c5:29:7e:df:22:
3d:35:df:37:9f:4c:aa:54:37:64:76:4c:79:6b:a7:
61:a2:91:1d:cb:48:0d:f7:a7:3a:0c:45:67:7d:6b:
30:07:cd:96:c1:be:cc:94:21:01:bb:87:d8:73:8c:
bf:e9:2b:9d:b3:ff:5e:99:dd:90:1f:ab:b4:21:92:
26:3b:0f:3b:80:ce:fa:69:99:cd:df:03:f4:88:a4:
0c:9b:82:0b:c1:ea:bf:06:db:e4:1d:8b:fb:dc:8f:
a6:cb:7a:b0:c8:27:e2:96:f3:f0:db:7c:fa:ab:a0:
ff:14:6c:e2:12:be:0e:59:86:fd:71:96:15:e2:fc:
0b:c9:f6:2b:36:0d:ad:ec:5b:3f:c9:98:c8:72:fd:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:98:C7:4C:91:09:6B:09:BE:9A:F1:90:5A:59:D9:76:31:3F:FE:6A
X509v3 Authority Key Identifier:
keyid:F6:50:85:43:68:BD:3A:A0:BE:E4:9B:F7:ED:C0:31:1B:90:DF:37:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/wJjHTJEJawm-mvGQWlnZdjE__mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.71.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:b9:e0:be:07:8c:f3:67:3b:c9:2f:48:c1:8d:aa:be:f2:1f:
9d:bc:91:bf:44:e1:e1:c0:49:e3:42:1a:3d:29:0b:4f:63:0f:
c1:89:d8:42:f6:71:90:62:85:f1:2d:0a:53:c9:4c:d7:be:8e:
88:e0:31:cd:4f:7d:d6:9b:1f:1d:ce:0d:92:6b:51:15:54:a5:
26:c7:7e:eb:db:d3:25:9e:3f:8d:bb:f1:c0:8a:fe:8b:a3:af:
f7:68:7f:32:8e:85:eb:b8:d0:95:1e:e5:87:d9:09:09:7e:8d:
fa:b9:5c:50:b0:b6:9f:00:ff:09:19:3f:3d:f2:cf:d1:72:10:
fc:b3:6d:e8:e3:98:75:56:c0:07:90:c2:6d:b9:9c:61:0e:a7:
86:b7:73:9b:a8:e4:d0:a1:7e:e2:20:e3:21:07:bd:42:f8:cd:
2c:eb:4a:e4:ca:95:0d:f9:a4:d4:d5:dd:31:cc:c0:7a:a2:03:
72:57:b4:b7:35:87:f0:ae:c8:fb:df:79:ae:ca:39:2d:35:85:
d9:e5:e7:bc:9f:df:3d:0f:a8:36:2c:2f:81:ca:1b:6d:70:91:
1b:6c:fe:3e:96:c9:6f:0f:2a:06:e7:a3:c6:5c:fb:b2:d9:3e:
0b:c3:f5:58:15:96:d4:d8:00:8d:a0:d0:6e:61:a0:2b:b4:b4:
93:53:4e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:48 2024 by rpki-client on console-fra.rpki-client.org