Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/wp8CwnNsQrzmm_wjk7ZKFcioTQE.roa
File: wp8CwnNsQrzmm_wjk7ZKFcioTQE.roa (raw, json)
Hash identifier: wQT3X98aJu6peawpqC7GZXgzBMbbguXRVLWL0QSI9ZA=
Subject key identifier: C2:9F:02:C2:73:6C:42:BC:E6:9B:FC:23:93:B6:4A:15:C8:A8:4D:01
Certificate issuer: /CN=64f3a298f7de920548e8251de76b807387e2d43c
Certificate serial: 018B011DFB8161B0D97684464FE804A56263
Authority key identifier: 64:F3:A2:98:F7:DE:92:05:48:E8:25:1D:E7:6B:80:73:87:E2:D4:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPOimPfekgVI6CUd52uAc4fi1Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/wp8CwnNsQrzmm_wjk7ZKFcioTQE.roa
Signing time: Thu 05 Oct 2023 18:33:43 +0000
ROA not before: Thu 05 Oct 2023 18:33:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49223
IP address blocks: 146.19.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:1d:fb:81:61:b0:d9:76:84:46:4f:e8:04:a5:62:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f3a298f7de920548e8251de76b807387e2d43c
Validity
Not Before: Oct 5 18:33:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c29f02c2736c42bce69bfc2393b64a15c8a84d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a5:37:67:0a:58:19:29:00:36:31:67:2c:ed:
1e:a2:0c:d6:81:cb:d4:df:4b:7f:8c:13:66:b3:70:
69:2a:b5:27:b5:03:f4:35:2d:d5:fa:85:e6:ea:9d:
47:38:cf:15:1d:e1:16:6d:18:bb:7e:01:42:6f:3c:
51:51:12:34:62:6a:55:80:ed:0f:e1:aa:4c:f3:4c:
96:2b:a2:8f:b1:c3:6e:fc:11:dd:ec:89:bc:2b:fe:
2d:dc:7c:92:a6:21:63:64:ee:19:16:9f:ce:8b:9b:
42:22:2d:17:90:f7:c8:24:98:74:dc:db:c8:bd:7d:
cb:82:22:11:ee:61:55:3b:a9:23:ed:9e:46:a0:60:
53:f1:c8:d3:8a:c6:00:10:54:90:e4:1f:73:e5:a4:
71:21:b5:e8:a7:67:29:6b:61:55:ff:08:36:e1:2e:
35:d0:31:ff:e0:27:3f:d8:9e:8e:a0:3b:c9:64:ac:
73:21:41:47:f3:22:09:e4:16:2c:60:c6:e3:22:d4:
47:85:57:43:b9:c4:a9:2d:18:6d:7a:f6:20:ff:a6:
af:be:15:d4:c9:f3:8d:1c:40:06:69:63:01:b7:2e:
eb:dc:ba:2c:52:f4:c1:f3:2a:cf:db:99:64:a5:71:
c1:c2:0d:23:43:ab:25:ff:66:34:c7:65:05:c2:a8:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9F:02:C2:73:6C:42:BC:E6:9B:FC:23:93:B6:4A:15:C8:A8:4D:01
X509v3 Authority Key Identifier:
keyid:64:F3:A2:98:F7:DE:92:05:48:E8:25:1D:E7:6B:80:73:87:E2:D4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPOimPfekgVI6CUd52uAc4fi1Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/wp8CwnNsQrzmm_wjk7ZKFcioTQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/ZPOimPfekgVI6CUd52uAc4fi1Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.186.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:71:a2:57:78:b2:b8:2a:75:eb:98:96:1a:2b:ff:6e:d0:ce:
7f:2c:11:ec:b2:ae:27:1e:80:b4:9a:c7:af:27:40:f7:c4:89:
d2:3a:30:e2:13:61:da:8b:0c:f0:93:5e:ea:43:ae:ac:20:e1:
a5:4d:49:ec:3c:bf:53:f3:cd:e0:d5:23:9e:a0:12:be:cc:2d:
9a:80:5d:39:cd:a8:2b:38:bf:f3:fd:5b:d3:0f:2b:47:c2:5c:
02:50:ab:1c:9d:58:5e:45:c5:40:5a:11:dd:9e:af:7d:d8:d0:
39:1e:86:54:1c:56:86:69:63:d4:d2:17:0c:03:98:52:68:06:
b7:7c:0a:56:ae:fd:4c:a1:fd:72:f9:1a:5a:ef:d3:38:ed:ed:
fc:f8:22:ad:f3:3b:11:51:a9:d4:d8:46:f8:bf:26:ca:fe:06:
b2:0d:90:f3:bd:3f:ef:d5:ac:c7:3d:21:39:f6:89:84:c4:94:
03:84:40:af:e7:e4:db:7a:26:7b:50:f1:55:8f:37:74:9a:34:
55:c5:80:e7:05:ad:83:ca:a9:4a:8e:5a:d1:17:9d:6d:67:3c:
5f:1a:32:db:17:df:88:8a:78:05:96:b4:80:58:8a:90:e2:16:
85:a3:b9:51:69:d6:2b:cd:e7:a2:66:d0:0d:cc:41:76:80:22:
dc:cf:ea:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 15:59:20 2023 by rpki-client on console-ams.rpki-client.org