Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/wP_zYqqWPbbx_rKAy6hajggoGWk.roa
File: wP_zYqqWPbbx_rKAy6hajggoGWk.roa (raw, json)
Hash identifier: sCj23lWtgVRxPYNSOLXJouRr0NMisiKj/M/gvlosTpk=
Subject key identifier: C0:FF:F3:62:AA:96:3D:B6:F1:FE:B2:80:CB:A8:5A:8E:08:28:19:69
Certificate issuer: /CN=5bea2b884c7067f58fff040a1f06e0df1e80ab3e
Certificate serial: 018CC4930693A561C13DAD0C357E4E25E51A
Authority key identifier: 5B:EA:2B:88:4C:70:67:F5:8F:FF:04:0A:1F:06:E0:DF:1E:80:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oriExwZ_WP_wQKHwbg3x6Aqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/wP_zYqqWPbbx_rKAy6hajggoGWk.roa
Signing time: Mon 01 Jan 2024 10:30:18 +0000
ROA not before: Mon 01 Jan 2024 10:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24745
IP address blocks: 109.99.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:06:93:a5:61:c1:3d:ad:0c:35:7e:4e:25:e5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea2b884c7067f58fff040a1f06e0df1e80ab3e
Validity
Not Before: Jan 1 10:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0fff362aa963db6f1feb280cba85a8e08281969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:0a:8d:3d:3d:9c:99:24:a5:09:a1:76:0e:
42:f2:a1:e4:c3:c7:f3:8e:a1:5e:d5:95:50:7f:48:
76:55:19:86:a9:39:4b:be:4f:16:97:fa:9d:a1:3b:
54:e9:d5:47:e5:8e:ed:fe:90:00:62:e5:ff:6f:58:
37:b1:80:50:e7:89:67:0a:b3:98:c2:05:7a:45:5c:
3e:6f:35:cc:a3:5b:f6:5b:16:ad:35:13:2c:f6:1a:
32:ac:29:ea:f5:98:99:c5:a9:a4:06:e5:2f:ee:8e:
55:f6:b7:60:8e:28:b0:59:59:d9:15:9f:cf:f7:fb:
30:08:62:1d:7c:8e:4a:80:d3:f1:af:f2:60:40:95:
e0:c5:94:92:90:c0:c9:fd:f2:59:c0:72:64:94:1e:
88:4f:92:2f:c4:4e:53:58:30:a1:96:4d:8d:fc:c8:
b5:10:48:23:f1:a9:aa:35:f2:74:c0:e0:33:13:ec:
e4:5d:6b:05:67:d3:41:c6:51:0c:1a:b4:b5:00:10:
d7:b5:de:7c:d1:1f:fa:75:cf:33:a9:c8:e6:89:fc:
e5:4a:1f:19:eb:0b:d4:c6:f1:ec:fc:38:ad:b2:d2:
31:62:dc:08:0f:11:ba:74:42:ca:53:cd:40:70:30:
8f:c5:28:b4:57:43:98:c3:a9:68:3f:d3:d6:9b:c1:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FF:F3:62:AA:96:3D:B6:F1:FE:B2:80:CB:A8:5A:8E:08:28:19:69
X509v3 Authority Key Identifier:
keyid:5B:EA:2B:88:4C:70:67:F5:8F:FF:04:0A:1F:06:E0:DF:1E:80:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oriExwZ_WP_wQKHwbg3x6Aqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/wP_zYqqWPbbx_rKAy6hajggoGWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/W-oriExwZ_WP_wQKHwbg3x6Aqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.99.158.0/24
Signature Algorithm: sha256WithRSAEncryption
87:eb:b2:ed:fb:ff:04:8a:0e:b4:34:bc:06:9c:a7:02:34:bb:
17:05:f6:5e:07:3c:93:8a:06:e5:3f:b8:66:4b:d2:9b:00:f1:
1d:d0:0a:a3:bd:92:de:30:79:00:23:f8:06:2a:e7:df:66:4d:
92:fb:f6:7c:bb:b3:9f:2a:48:96:19:13:e2:96:6d:f4:cb:41:
12:e2:2d:2c:4d:30:c0:78:08:32:2e:ab:0e:e5:c4:f2:32:5e:
60:a8:c5:b4:7f:45:97:8c:58:05:c5:e6:43:14:b8:f8:ce:4c:
2b:ff:75:9a:99:e4:00:68:29:6e:96:a7:12:1d:23:5d:c6:dd:
b1:0d:76:d2:43:c8:c6:73:7b:34:68:0d:4e:9e:cc:74:dd:b1:
63:84:ff:5f:1e:fd:4a:75:a8:2d:6e:b5:d5:6c:8a:de:db:38:
06:a0:67:9d:dd:ba:c7:1c:57:a1:9d:bd:77:d5:6b:30:8c:85:
75:ed:da:2c:d3:c0:bb:81:05:0a:31:ea:10:19:08:39:90:d0:
c1:f9:13:b7:df:89:92:c5:e3:be:e4:e9:b9:34:99:38:59:b5:
fb:13:64:39:08:d4:b3:dc:cb:a0:67:56:58:84:b5:33:84:e8:
08:f1:40:41:9e:c7:35:8a:5f:5c:d1:18:89:47:41:bd:49:34:
ab:1c:c3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 15:27:04 2024 by rpki-client on console-fra.rpki-client.org