Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/WfojrGhDx7U9X2RkSXCGf5LJI8g.roa
File: WfojrGhDx7U9X2RkSXCGf5LJI8g.roa (raw, json)
Hash identifier: kidwYh+zZNw7adyecsxosyRaoOIDsODq0nucYRktC/g=
Subject key identifier: 59:FA:23:AC:68:43:C7:B5:3D:5F:64:64:49:70:86:7F:92:C9:23:C8
Certificate issuer: /CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
Certificate serial: 0182AC428DDD056661FFB073E56B98E11C96
Authority key identifier: 26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/WfojrGhDx7U9X2RkSXCGf5LJI8g.roa
Signing time: Wed 17 Aug 2022 14:43:39 +0000
ROA not before: Wed 17 Aug 2022 14:43:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 85.209.132.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ac:42:8d:dd:05:66:61:ff:b0:73:e5:6b:98:e1:1c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
Validity
Not Before: Aug 17 14:43:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59fa23ac6843c7b53d5f64644970867f92c923c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:6d:40:2f:da:21:70:4f:62:d4:e1:a2:23:
7a:cb:82:96:68:df:e8:be:d0:de:96:a7:70:90:2f:
d7:0d:d5:ad:76:aa:9f:c0:37:0d:17:d1:92:7e:34:
9a:74:1d:57:0e:68:ba:7b:a4:4f:1c:bc:65:80:65:
ca:40:c3:76:ba:50:79:e9:38:04:ba:f8:39:6c:a6:
bb:9b:9a:62:f1:bd:f2:fc:01:c9:56:7d:69:c6:84:
d2:b5:4a:0f:9e:5a:23:c9:6f:12:e4:b3:0e:de:ee:
b6:43:ec:a5:04:79:7a:f6:70:f5:4e:99:88:2b:92:
c4:27:0c:9c:4a:26:84:32:f2:a2:64:24:c5:44:cb:
23:d3:e2:1f:ee:5b:fc:3f:c5:50:fa:66:7d:24:10:
8f:ab:76:8b:3c:da:75:79:6a:fb:b0:3c:35:d0:f1:
38:d5:ee:0c:65:99:68:f7:30:b3:de:99:6a:c1:af:
39:d6:a3:af:0d:69:37:9e:0a:f1:b2:d0:d2:72:08:
57:96:63:81:bb:38:4e:cc:1c:c3:34:47:19:a1:b4:
cf:fb:fe:85:7b:18:05:fb:5e:da:9b:32:66:65:94:
e1:e9:ec:19:98:fe:50:13:e0:88:d4:0d:51:2e:10:
70:01:f6:54:d9:f9:67:6b:1f:ed:23:4d:41:59:d5:
ff:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FA:23:AC:68:43:C7:B5:3D:5F:64:64:49:70:86:7F:92:C9:23:C8
X509v3 Authority Key Identifier:
keyid:26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/WfojrGhDx7U9X2RkSXCGf5LJI8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/Jic4wNLa4Es8nsVQSFL3rXTOIVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.132.0/23
Signature Algorithm: sha256WithRSAEncryption
28:54:ee:65:62:10:a1:86:5e:75:fa:ba:98:8c:df:0d:26:38:
6a:1c:90:28:64:53:70:04:48:c0:97:48:f1:46:10:af:50:45:
96:2b:be:6a:74:31:f0:10:b5:78:99:ac:f9:1f:82:f5:29:da:
60:86:91:a8:67:51:60:dc:a3:5c:a6:9d:77:da:e2:49:fe:e2:
81:68:d1:4c:4f:15:67:9f:d0:96:6f:db:9e:15:6e:f8:67:0a:
0e:e5:9d:3e:22:51:55:d4:22:d9:9f:43:9c:6b:18:08:4b:c4:
54:50:2f:ce:2a:4e:5e:59:d9:e4:6d:af:23:61:82:f4:04:f7:
60:d5:87:f5:ff:2e:67:8e:df:5d:bb:39:7b:6e:a2:4b:f1:b0:
4e:67:46:ef:95:52:62:29:3f:26:4c:0a:75:79:38:6c:f0:1d:
9b:af:2f:6c:d1:f9:80:9a:7f:5d:ab:0d:6a:cf:6f:3f:54:8a:
16:0c:6f:4c:63:8f:3b:8d:21:32:4c:e9:ca:e2:b9:7c:64:a3:
31:41:5f:8c:cc:1a:9e:66:27:10:89:ca:83:ee:da:ae:f6:c2:
d0:e3:69:31:4e:39:94:fb:93:d1:28:be:5c:ba:90:ea:59:69:
ab:09:e0:0c:93:3b:9d:9d:3a:f7:13:60:41:f6:32:17:60:29:
05:c2:0a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:18 2024 by rpki-client on console-ams.rpki-client.org