Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/WF2Q-gp7exyVAEM2be3fl5VIoJc.roa
File: WF2Q-gp7exyVAEM2be3fl5VIoJc.roa (raw, json)
Hash identifier: MjOeqS3VGHYt50K+dJKvulnxKNUyw7dmIlc3eDVk4vQ=
Subject key identifier: 58:5D:90:FA:0A:7B:7B:1C:95:00:43:36:6D:ED:DF:97:95:48:A0:97
Certificate issuer: /CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
Certificate serial: 0183C6DD5133702793AD1F2A7ADCF49AFB4E
Authority key identifier: 26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/WF2Q-gp7exyVAEM2be3fl5VIoJc.roa
Signing time: Tue 11 Oct 2022 11:45:36 +0000
ROA not before: Tue 11 Oct 2022 11:45:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210773
IP address blocks: 85.209.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c6:dd:51:33:70:27:93:ad:1f:2a:7a:dc:f4:9a:fb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
Validity
Not Before: Oct 11 11:45:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=585d90fa0a7b7b1c950043366deddf979548a097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f5:eb:0e:09:0b:99:11:11:2f:3b:92:3c:6e:
46:99:98:dc:4a:d9:ea:4d:22:a7:8d:77:78:35:64:
c3:db:97:e2:0c:6d:05:ae:58:e9:a9:aa:8a:f6:3c:
c4:e6:5a:56:92:13:27:c0:8f:07:ee:3c:6e:47:42:
9c:17:18:e2:74:2d:e6:04:fe:f4:14:19:e3:c5:9d:
62:c2:4f:95:f9:20:8b:03:6f:af:9a:77:99:1d:61:
c0:6d:24:41:a3:3c:34:ac:0a:3f:bc:fa:31:09:f8:
bc:79:85:95:e0:e5:60:a5:c6:5a:fa:83:a8:64:3b:
53:52:fb:0b:fd:d3:7e:3c:73:47:78:68:7e:12:36:
25:e8:50:5a:0e:c0:50:5b:48:d3:1c:f7:6a:70:4a:
e7:05:19:72:74:a6:17:7d:1c:b0:0d:a9:4f:04:a4:
5e:b5:4b:c8:24:dd:e5:12:48:5e:ea:74:a7:3b:23:
38:7b:14:0c:ff:79:53:e5:96:ed:52:13:07:59:45:
2c:08:05:16:b8:69:7d:1f:60:73:89:30:06:eb:25:
a4:0f:19:a2:37:fe:2c:70:ec:9e:11:e2:fc:1f:f6:
f8:76:bf:70:0c:c6:8f:fc:d8:7a:82:83:e7:34:8e:
98:ee:8f:c8:b5:29:2c:0b:60:d3:cc:a4:3f:ce:7e:
c5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5D:90:FA:0A:7B:7B:1C:95:00:43:36:6D:ED:DF:97:95:48:A0:97
X509v3 Authority Key Identifier:
keyid:26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/WF2Q-gp7exyVAEM2be3fl5VIoJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/Jic4wNLa4Es8nsVQSFL3rXTOIVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.133.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a5:eb:b5:e0:ad:a6:ed:45:ae:40:87:95:6f:cb:29:10:d6:
9f:d8:f4:94:82:ba:d2:71:38:bd:53:fe:ac:d6:c0:c0:c6:e2:
0f:10:7c:97:3e:98:b0:d6:95:02:e4:ad:d1:f0:1b:17:42:2e:
41:1c:d7:a6:d2:ce:67:ea:c3:f5:fd:ee:22:4a:fc:67:6f:b1:
8a:5f:cb:90:92:1b:8a:c0:33:6c:e1:65:80:ad:3d:02:04:87:
61:12:45:bd:d4:a0:46:2e:36:0b:a4:8e:00:78:47:44:6d:c1:
89:5f:70:e7:d4:ac:18:44:a8:4b:df:35:8f:25:87:e3:c5:da:
87:66:36:89:2f:db:c3:14:01:f4:bd:b4:96:8c:14:d6:8a:fb:
ed:98:db:35:af:01:24:50:cd:9c:7c:49:2c:79:3d:5a:7c:3b:
2f:89:e7:cc:2a:e4:94:f8:29:86:1a:2c:84:e0:8d:39:8f:e2:
59:8b:49:91:00:e7:c0:f4:bc:e2:3d:92:87:bd:57:79:69:62:
52:cc:4a:57:39:7b:f3:74:dd:71:a9:36:39:87:e9:55:3f:cb:
8f:0c:49:8b:f0:76:be:5d:52:0d:68:ad:6c:94:de:86:2f:33:
ac:93:93:80:7f:d9:2a:f3:45:dc:6b:a0:8f:43:e1:7e:00:9a:
d0:76:a0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:01 2024 by rpki-client on console-fra.rpki-client.org