Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/WSKr1lCLXGBCiW2PxPmF_zyy0Bs.roa
File: WSKr1lCLXGBCiW2PxPmF_zyy0Bs.roa (raw, json)
Hash identifier: 1IvjT4e0oR4uV39L+pVoAzOY48GwbcZjn3e08NKpGR8=
Subject key identifier: 59:22:AB:D6:50:8B:5C:60:42:89:6D:8F:C4:F9:85:FF:3C:B2:D0:1B
Certificate issuer: /CN=76c2deff015fa3e8015b1d5fdbbfb779a2c8e617
Certificate serial: 018345BD24DF869C1D2B5039F6382BAE7044
Authority key identifier: 76:C2:DE:FF:01:5F:A3:E8:01:5B:1D:5F:DB:BF:B7:79:A2:C8:E6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dsLe_wFfo-gBWx1f27-3eaLI5hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/WSKr1lCLXGBCiW2PxPmF_zyy0Bs.roa
Signing time: Fri 16 Sep 2022 09:59:27 +0000
ROA not before: Fri 16 Sep 2022 09:59:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 45.8.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:45:bd:24:df:86:9c:1d:2b:50:39:f6:38:2b:ae:70:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76c2deff015fa3e8015b1d5fdbbfb779a2c8e617
Validity
Not Before: Sep 16 09:59:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5922abd6508b5c6042896d8fc4f985ff3cb2d01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cc:42:b6:08:32:a2:ff:8d:d8:59:49:53:28:
b0:a5:3a:5f:ef:a7:2e:c7:df:f3:4b:0a:5e:10:5b:
39:e0:67:9e:48:9c:f3:21:d3:98:19:aa:f4:bb:d0:
56:cd:aa:d1:ef:32:36:e9:d0:b6:b1:4b:ef:37:c2:
34:0e:ee:0b:49:6d:bf:de:b7:09:e8:a4:7f:8f:08:
4d:28:3e:67:03:27:cf:75:16:31:46:78:90:bc:c4:
a0:99:18:a0:83:14:9e:b8:1b:52:ab:5f:4e:50:82:
f3:54:bf:0b:0f:85:2e:95:57:94:88:ab:82:bb:d1:
44:34:ad:94:5d:84:a3:c2:4d:2d:0b:25:38:b1:8f:
23:ca:97:69:6b:90:a1:05:7e:68:9a:27:84:fa:01:
99:7c:e8:d4:cf:9b:70:85:37:7e:59:02:fb:b8:ee:
8b:9a:0e:e2:24:d7:a5:1a:51:ae:86:83:51:c8:6b:
48:51:41:01:4c:7f:c3:d9:1b:ec:88:5f:37:5b:a2:
08:5e:f2:15:c9:55:38:98:c9:0c:20:5a:f2:c9:3d:
ee:0c:b2:70:6b:e0:e2:1d:47:b2:1e:05:79:ae:26:
7c:d8:11:0d:ee:df:01:26:7b:27:30:ed:03:5d:fd:
0d:f6:80:55:1d:e0:11:70:e8:67:00:0a:96:5f:5e:
54:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:22:AB:D6:50:8B:5C:60:42:89:6D:8F:C4:F9:85:FF:3C:B2:D0:1B
X509v3 Authority Key Identifier:
keyid:76:C2:DE:FF:01:5F:A3:E8:01:5B:1D:5F:DB:BF:B7:79:A2:C8:E6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dsLe_wFfo-gBWx1f27-3eaLI5hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/WSKr1lCLXGBCiW2PxPmF_zyy0Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/dsLe_wFfo-gBWx1f27-3eaLI5hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.95.0/24
Signature Algorithm: sha256WithRSAEncryption
32:0f:21:74:13:20:98:fe:0e:8e:41:d5:98:1e:17:2f:0e:7e:
78:1e:55:d9:36:a9:81:7c:99:21:b6:25:7a:6a:85:60:6c:e5:
8e:43:5d:6e:32:d8:b6:8f:c5:46:c8:a9:25:f4:c3:cd:53:95:
93:cb:33:0b:d5:20:f4:d7:4f:e6:85:c3:b8:2a:69:91:78:99:
b2:b6:d9:d0:59:c7:35:56:d7:aa:a8:73:9f:e6:fb:43:5f:17:
31:35:df:39:39:7b:d5:51:4a:7c:0e:31:69:5e:e9:f9:45:07:
d3:52:77:e1:97:36:37:80:48:1b:c1:be:23:17:8f:97:9b:7c:
dd:54:50:c7:5c:c5:50:07:0d:9e:e5:54:33:7a:e1:a7:70:fd:
a4:f3:77:6c:1d:4a:0e:41:5c:ca:c1:d6:f0:87:f0:02:3f:1d:
6e:d8:7a:ee:eb:de:bb:95:ed:ba:f9:58:54:b2:a4:e5:ab:ba:
8b:44:3b:07:15:b1:bb:d8:1d:61:f3:ed:3d:72:72:7d:c4:39:
b2:52:e0:b9:6f:ac:ab:11:99:54:e3:33:49:1f:14:df:94:fb:
f8:43:e3:c1:0c:52:d3:cb:c9:d6:61:d4:f3:6b:52:fa:b6:57:
01:99:f9:c4:fb:0b:1f:01:58:a2:0d:0d:59:8a:76:a2:a2:89:
6e:54:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org