Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/pvFg9lX6ghJZCEyMTz056gojFgY.roa
File: pvFg9lX6ghJZCEyMTz056gojFgY.roa (raw, json)
Hash identifier: K8u86H5QJJDa74penll6nYEHrbf824+fTzOg7NKxexk=
Subject key identifier: A6:F1:60:F6:55:FA:82:12:59:08:4C:8C:4F:3D:39:EA:0A:23:16:06
Certificate issuer: /CN=5bea2b884c7067f58fff040a1f06e0df1e80ab3e
Certificate serial: 01900C98BB7EE97CFBA24DFFEF9BFE08D936
Authority key identifier: 5B:EA:2B:88:4C:70:67:F5:8F:FF:04:0A:1F:06:E0:DF:1E:80:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oriExwZ_WP_wQKHwbg3x6Aqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/pvFg9lX6ghJZCEyMTz056gojFgY.roa
Signing time: Wed 12 Jun 2024 13:17:34 +0000
ROA not before: Wed 12 Jun 2024 13:17:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8953
IP address blocks: 92.82.176.0/20 maxlen: 20
185.133.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0c:98:bb:7e:e9:7c:fb:a2:4d:ff:ef:9b:fe:08:d9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea2b884c7067f58fff040a1f06e0df1e80ab3e
Validity
Not Before: Jun 12 13:17:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6f160f655fa821259084c8c4f3d39ea0a231606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f8:a4:c7:39:a7:68:62:f7:ce:57:12:4c:bf:
b3:48:d8:87:07:7a:61:eb:9c:42:37:47:4b:ad:21:
93:3d:d9:5e:c6:ab:2a:f7:e1:fd:16:59:be:0c:02:
cf:ad:5c:5c:d2:8d:e6:73:c0:fd:ee:c9:92:00:a6:
a4:5e:c3:a0:c5:98:b3:61:99:b4:36:f9:ba:e7:04:
28:2b:02:4e:1e:82:4a:26:8e:72:09:4a:71:f7:93:
1d:cd:f1:4f:58:36:be:f0:d8:c1:3f:42:45:54:95:
91:8e:b5:bc:04:0f:63:b6:05:f2:a9:17:dd:75:62:
ed:c3:5a:bc:5c:75:8e:53:bc:ce:fb:bf:bd:3f:18:
a8:c2:74:e5:c4:88:1d:ef:8d:1f:a9:62:05:f7:b3:
e0:ee:9a:13:44:63:71:bf:df:f7:ef:fb:a3:16:b5:
7e:e7:cc:d9:bb:76:d2:69:58:b0:45:97:d8:48:7d:
ad:78:b4:e9:a9:2b:16:7d:60:3c:7c:be:d2:69:41:
fe:ed:64:71:af:cb:10:a5:79:fd:d9:33:8b:fe:03:
d7:96:f2:ad:95:c8:07:08:6c:66:33:01:8a:e3:ce:
18:f4:0f:a1:4d:25:64:7d:64:28:a1:49:e4:1b:9d:
d1:ef:88:a6:1c:29:1d:b2:f7:44:80:8f:88:e4:6c:
99:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F1:60:F6:55:FA:82:12:59:08:4C:8C:4F:3D:39:EA:0A:23:16:06
X509v3 Authority Key Identifier:
keyid:5B:EA:2B:88:4C:70:67:F5:8F:FF:04:0A:1F:06:E0:DF:1E:80:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oriExwZ_WP_wQKHwbg3x6Aqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/pvFg9lX6ghJZCEyMTz056gojFgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/W-oriExwZ_WP_wQKHwbg3x6Aqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.82.176.0/20
185.133.64.0/24
Signature Algorithm: sha256WithRSAEncryption
39:25:81:7c:1c:bf:79:9d:dc:c8:96:e3:a0:44:54:34:b1:d1:
06:86:28:7d:70:9a:7f:e6:f5:49:cf:85:28:54:43:ab:04:dd:
cb:41:e2:b5:09:82:93:ed:53:14:17:be:df:b2:d8:32:fb:43:
d1:b4:af:2e:c3:24:99:64:37:21:8d:8b:da:0b:46:b6:b2:53:
dd:d0:4c:4d:3a:83:68:d9:c0:f4:84:89:59:6e:ee:54:15:41:
8b:e3:76:86:6a:01:bb:c7:54:16:d5:ba:8b:9a:de:7d:b3:d7:
1e:0f:6a:b9:89:ce:df:73:0e:d1:52:ff:e9:97:25:17:01:3c:
f3:f8:b1:a2:c0:cf:18:34:2e:75:8d:22:c5:b0:9c:d8:c6:40:
5c:59:c1:5c:13:ce:99:89:33:b7:3a:3a:1d:ce:01:50:68:0a:
44:10:09:bb:dc:6d:c1:1d:e5:9b:f2:c7:6c:e3:d0:49:8d:34:
c2:c1:74:5f:9c:55:73:f8:50:06:93:c1:96:3c:2a:23:82:c0:
67:80:36:7c:6f:78:05:94:ba:18:3d:5b:6c:7d:68:d5:19:1f:
45:d5:7c:60:e6:2b:18:9f:53:9b:94:40:f8:ab:c4:55:94:88:
66:7b:5a:bd:01:01:eb:4b:f6:42:ab:fe:18:ee:89:9f:87:fc:
c5:c7:22:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 14:22:53 2024 by rpki-client on console-ams.rpki-client.org