Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/WNqdc-JSxtJp_GRquPx0p-1zh84.roa
File: WNqdc-JSxtJp_GRquPx0p-1zh84.roa (raw, json)
Hash identifier: yF6UGJmhKG+tHRY1nZrpRKSIZCNwg+IKrCsd4f/ySUg=
Subject key identifier: 58:DA:9D:73:E2:52:C6:D2:69:FC:64:6A:B8:FC:74:A7:ED:73:87:CE
Certificate issuer: /CN=a91f1e577ca1dbb8e05c0f56a6f678b1ea40d8ce
Certificate serial: 0187BA0CEBBAACA0275EB1ACA0391FE63F64
Authority key identifier: A9:1F:1E:57:7C:A1:DB:B8:E0:5C:0F:56:A6:F6:78:B1:EA:40:D8:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qR8eV3yh27jgXA9WpvZ4sepA2M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/WNqdc-JSxtJp_GRquPx0p-1zh84.roa
Signing time: Tue 25 Apr 2023 20:13:41 +0000
ROA not before: Tue 25 Apr 2023 20:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 178.212.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ba:0c:eb:ba:ac:a0:27:5e:b1:ac:a0:39:1f:e6:3f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91f1e577ca1dbb8e05c0f56a6f678b1ea40d8ce
Validity
Not Before: Apr 25 20:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58da9d73e252c6d269fc646ab8fc74a7ed7387ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e0:00:fa:1e:09:eb:3c:6d:92:bb:a8:85:f2:
18:65:a8:85:df:77:2d:6f:dd:89:31:bb:8e:31:10:
cd:95:66:5a:c7:07:a3:4d:c1:41:56:c9:f8:02:1a:
65:cd:80:b8:e7:01:35:d4:ba:45:e0:bf:c6:b8:f9:
4d:26:5e:6b:83:30:d5:5d:14:86:3c:14:5c:ce:c3:
ff:be:54:66:11:8a:3d:44:c2:25:b5:5d:ee:79:dd:
6e:31:91:c3:86:d1:ec:a8:4e:2e:06:0e:be:b1:20:
a7:77:f8:af:f1:f9:af:d8:dd:e9:2b:a2:75:ec:66:
af:70:2b:44:77:79:9e:31:e9:9c:0b:c8:59:9e:fa:
36:f1:de:d3:35:f5:c8:63:91:48:49:e5:49:12:b7:
82:62:f1:b8:20:f7:51:96:12:b9:73:04:d7:93:94:
91:22:22:0e:14:0e:f7:fe:b0:dd:76:47:01:e1:2c:
5f:fb:a4:5c:24:4f:e3:45:0c:ac:97:91:24:8d:81:
f2:23:e1:9b:5e:d7:43:fb:b5:d3:44:5d:3e:55:02:
71:f9:03:57:bc:c0:c0:97:c2:95:d1:1d:5a:3d:3b:
91:85:e5:bd:09:3e:32:ef:50:4b:bd:bb:f2:d8:4e:
d7:3d:eb:48:4d:86:1e:f2:2f:fa:45:94:e2:c5:d5:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DA:9D:73:E2:52:C6:D2:69:FC:64:6A:B8:FC:74:A7:ED:73:87:CE
X509v3 Authority Key Identifier:
keyid:A9:1F:1E:57:7C:A1:DB:B8:E0:5C:0F:56:A6:F6:78:B1:EA:40:D8:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR8eV3yh27jgXA9WpvZ4sepA2M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/WNqdc-JSxtJp_GRquPx0p-1zh84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/qR8eV3yh27jgXA9WpvZ4sepA2M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.224.0/24
Signature Algorithm: sha256WithRSAEncryption
46:54:6d:87:31:88:80:6e:c1:55:98:4d:97:78:15:6c:5f:a6:
56:0b:ac:5b:32:71:8e:3b:1b:e9:46:bf:cc:a0:27:d3:61:a5:
58:f4:c6:f5:7e:d5:ed:e1:f4:e9:29:ab:5f:8c:ec:19:6e:5a:
aa:1a:96:a2:e8:f0:dd:65:7b:80:da:04:3f:6e:20:6d:a4:98:
82:53:a8:04:b7:2b:29:29:2c:f3:16:3d:f4:8f:58:77:77:86:
33:79:5f:dd:31:1f:3b:69:87:a7:60:fb:c8:61:62:1f:31:fa:
16:b7:6b:ba:ba:8c:9d:d9:4e:16:ff:c8:14:d3:e7:28:64:b0:
21:74:ab:da:7f:ad:3c:b4:29:52:f3:2c:57:ff:60:d2:64:7d:
51:71:ea:f8:1b:0f:67:ce:a3:79:22:08:45:f9:18:0e:44:f4:
96:30:01:4c:39:45:a9:06:44:c2:83:1e:4a:03:e6:fa:74:0f:
cd:1d:fc:7e:72:96:23:93:45:1e:ef:86:f2:97:07:ed:a8:93:
f4:91:c7:be:2b:97:70:b0:36:9f:bd:e6:5d:a0:73:ab:c1:d4:
66:90:9a:cb:3b:a5:36:b2:be:08:04:74:ac:81:ca:30:11:25:
0f:7e:24:9d:32:6c:6e:a0:43:a3:f1:6d:66:4f:7e:93:df:f6:
ff:41:66:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:31 2024 by rpki-client on console-ams.rpki-client.org