Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/72c406-5fbb-4ba6-8e78-f4a0f175fc25/1/WiSP-4EAkWUeVlidWvg_klf1His.roa
File: WiSP-4EAkWUeVlidWvg_klf1His.roa (raw, json)
Hash identifier: YJF17HYMxeZtUxjL/BhzsyxOGOXfd9jIdQIQdDWmcYc=
Subject key identifier: 5A:24:8F:FB:81:00:91:65:1E:56:58:9D:5A:F8:3F:92:57:F5:1E:2B
Certificate issuer: /CN=9a3df0ed749abcb8ab94a80e6938d08e7f567b23
Certificate serial: 01856C65C3BD323552329DDE89D7E4753A81
Authority key identifier: 9A:3D:F0:ED:74:9A:BC:B8:AB:94:A8:0E:69:38:D0:8E:7F:56:7B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mj3w7XSavLirlKgOaTjQjn9WeyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/72c406-5fbb-4ba6-8e78-f4a0f175fc25/1/WiSP-4EAkWUeVlidWvg_klf1His.roa
Signing time: Sun 01 Jan 2023 08:14:46 +0000
ROA not before: Sun 01 Jan 2023 08:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210876
IP address blocks: 109.107.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:c3:bd:32:35:52:32:9d:de:89:d7:e4:75:3a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a3df0ed749abcb8ab94a80e6938d08e7f567b23
Validity
Not Before: Jan 1 08:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a248ffb810091651e56589d5af83f9257f51e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:50:ce:83:53:8e:86:3d:ef:89:b1:2d:3c:
eb:36:52:fe:be:7f:2a:63:c2:99:f0:a2:41:54:1a:
af:60:a5:0b:40:8a:b4:1f:e5:1d:5d:53:77:0c:0c:
46:ed:7e:ba:fa:42:3e:93:5b:57:e0:94:03:ac:0f:
bf:9a:57:81:38:9b:42:8b:fd:8f:68:7c:5b:d3:a4:
bb:fb:a1:72:c6:4f:ae:0f:a3:ff:e3:d7:d2:37:7f:
5d:dc:82:0c:ce:6f:72:15:f2:90:05:84:ae:92:2f:
f4:62:d1:14:bf:dd:dc:bf:22:1b:ce:56:12:e7:b2:
bd:a2:7a:cd:50:a6:c1:06:e2:fb:8f:12:68:a4:23:
1c:02:c0:23:ce:7f:13:2b:4a:0d:f6:68:33:9d:47:
61:7f:a3:b7:df:fd:7e:c6:f6:5c:44:b9:84:fe:06:
93:27:64:e4:29:17:6a:68:ba:9d:3c:01:10:75:d4:
cf:23:f0:7f:e1:3f:d9:89:b3:97:ea:31:b7:f5:53:
b5:84:b0:28:0f:51:60:06:de:fb:bb:ae:10:c9:5c:
4e:8b:7c:1c:6f:5a:c7:60:a4:36:7a:23:4e:d2:cf:
d1:f0:4b:7e:b6:a0:c0:aa:44:e6:54:a7:e2:84:8e:
48:80:f2:29:b0:96:57:00:ea:8a:1e:d4:bf:a0:7e:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:24:8F:FB:81:00:91:65:1E:56:58:9D:5A:F8:3F:92:57:F5:1E:2B
X509v3 Authority Key Identifier:
keyid:9A:3D:F0:ED:74:9A:BC:B8:AB:94:A8:0E:69:38:D0:8E:7F:56:7B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mj3w7XSavLirlKgOaTjQjn9WeyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/72c406-5fbb-4ba6-8e78-f4a0f175fc25/1/WiSP-4EAkWUeVlidWvg_klf1His.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/72c406-5fbb-4ba6-8e78-f4a0f175fc25/1/mj3w7XSavLirlKgOaTjQjn9WeyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.149.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:f6:29:51:36:46:89:ae:5e:3f:bf:8a:62:c3:7c:5d:2f:35:
0d:70:55:ee:eb:3c:e5:a5:c7:ae:f1:1e:53:da:b8:94:27:89:
e6:2d:63:fb:3b:59:bc:f7:1c:d5:bf:9c:47:de:de:41:84:af:
cc:8c:1f:72:36:6d:78:11:ad:f9:2a:4e:92:5d:76:c6:d0:cd:
bb:8c:bd:18:be:70:69:b1:93:ff:52:1e:5e:71:46:b7:fa:50:
8d:59:72:ca:bf:54:37:77:33:71:ad:87:02:3c:d6:c9:10:22:
a0:c4:98:58:c3:f6:93:ee:89:55:a5:54:70:69:1c:be:97:1a:
7d:d2:ad:45:85:9e:00:c9:14:03:1f:af:df:e2:7d:54:18:12:
a4:58:62:3f:27:0f:a4:3f:be:6e:9a:bc:95:84:38:82:b9:4e:
71:86:45:2d:6f:ba:50:e2:07:32:90:07:ea:4b:d7:ac:6c:0e:
c4:d8:8e:fd:f3:f4:6a:4c:7a:84:ad:cb:f1:aa:17:cf:0a:00:
86:ac:62:b9:be:88:52:0d:a9:f4:c1:e7:ad:4c:6c:0a:0f:e8:
83:9f:ca:0c:cd:e0:87:a4:45:9d:74:0e:3d:da:90:3f:4e:f9:
94:ef:fb:42:aa:1f:5c:c9:ea:71:43:d1:a4:a8:e0:84:5d:cd:
76:5d:9c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:38 2024 by rpki-client on console-ams.rpki-client.org