Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/540685-0af1-4edd-9221-1dd7b6da85e8/1/wjAkmYj7K-9NqIqpoiNWZh3MJRM.roa
File: wjAkmYj7K-9NqIqpoiNWZh3MJRM.roa (raw, json)
Hash identifier: 1PgrYuBHTrRcYtbZLCZE1HmvDeY5f7OWNTnb5M4Grgo=
Subject key identifier: C2:30:24:99:88:FB:2B:EF:4D:A8:8A:A9:A2:23:56:66:1D:CC:25:13
Certificate issuer: /CN=ae6f136df3e8fc6538a5a0cfe838fe764a416344
Certificate serial: 01856C5CACD6566AA1A6741981806F57D7AF
Authority key identifier: AE:6F:13:6D:F3:E8:FC:65:38:A5:A0:CF:E8:38:FE:76:4A:41:63:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rm8TbfPo_GU4paDP6Dj-dkpBY0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/540685-0af1-4edd-9221-1dd7b6da85e8/1/wjAkmYj7K-9NqIqpoiNWZh3MJRM.roa
Signing time: Sun 01 Jan 2023 08:04:50 +0000
ROA not before: Sun 01 Jan 2023 08:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 185.248.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:ac:d6:56:6a:a1:a6:74:19:81:80:6f:57:d7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6f136df3e8fc6538a5a0cfe838fe764a416344
Validity
Not Before: Jan 1 08:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c230249988fb2bef4da88aa9a22356661dcc2513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c0:c0:72:0e:8c:af:1a:e5:17:98:27:63:cb:
55:3b:64:bd:f6:f2:93:1f:e7:c2:9b:18:cd:83:9f:
f3:f3:65:25:2a:57:c6:f2:48:5b:f0:d6:ba:1e:39:
29:61:37:a5:a1:b5:cc:73:b4:d5:67:6d:4f:cf:93:
62:ca:7f:99:44:fd:7e:de:98:0f:fb:d9:7c:29:c6:
ed:39:69:43:39:24:a5:3a:3c:b9:71:78:fa:9e:e9:
a9:14:3e:ad:28:b4:fc:59:cb:1b:57:03:84:5e:ae:
a3:7c:dc:89:e0:64:ca:c3:83:aa:fb:bd:18:75:f2:
05:c2:5d:d5:8b:40:d2:de:75:7e:d6:89:64:c4:bd:
7d:d3:97:62:7e:88:16:94:fb:f1:27:af:5b:71:bc:
9e:11:1d:ca:37:2c:6c:fc:e6:ca:44:67:a3:d0:61:
53:7b:b1:72:57:b2:f8:36:24:b3:27:47:a4:1a:64:
fb:bd:0e:9f:d0:7b:f7:d4:45:b2:1d:8f:76:eb:59:
e4:48:04:ca:a6:59:22:6a:5d:98:76:5b:e7:9f:41:
79:5a:ef:fc:d8:59:62:6b:66:02:2c:7c:d8:e5:16:
0e:9e:04:4f:f8:3d:60:3f:0d:bc:29:2c:3f:3b:99:
51:da:ac:7f:be:7f:fd:b8:ad:5a:a9:f3:73:84:64:
78:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:30:24:99:88:FB:2B:EF:4D:A8:8A:A9:A2:23:56:66:1D:CC:25:13
X509v3 Authority Key Identifier:
keyid:AE:6F:13:6D:F3:E8:FC:65:38:A5:A0:CF:E8:38:FE:76:4A:41:63:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rm8TbfPo_GU4paDP6Dj-dkpBY0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/540685-0af1-4edd-9221-1dd7b6da85e8/1/wjAkmYj7K-9NqIqpoiNWZh3MJRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/540685-0af1-4edd-9221-1dd7b6da85e8/1/rm8TbfPo_GU4paDP6Dj-dkpBY0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.133.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:fb:00:75:9c:2e:a0:d7:16:3c:f6:6a:5d:55:46:28:9d:7a:
2e:f3:d7:4d:27:2d:eb:a3:88:57:a3:e4:3e:2d:e5:71:56:ad:
17:2a:02:a7:ab:38:5a:20:8a:34:e4:2a:9f:73:d7:e1:75:b2:
8a:cc:10:10:07:2f:1f:2c:57:3e:3d:a2:61:9a:75:f2:d8:07:
10:12:5b:91:c7:b4:01:12:e3:07:c4:7d:dc:35:f2:13:f7:01:
9d:d6:f0:d9:1b:97:48:3a:0a:49:15:db:47:64:4a:c4:c1:5d:
d3:17:b7:7c:ab:3c:5a:67:67:40:47:6b:e0:7c:1e:16:bd:f0:
8a:6b:b4:d9:cf:41:fd:b6:4f:7b:25:8f:b8:79:e8:09:91:c0:
14:9c:db:91:2c:11:c7:ad:6a:ab:c2:a6:e1:c5:cf:89:1a:d6:
13:bf:92:6a:3c:6e:58:2b:94:d8:49:cf:a0:13:6e:d0:67:4d:
c5:f5:63:2a:a2:57:ed:35:15:55:eb:d8:31:93:a1:7a:15:41:
e7:33:e1:8a:5d:f1:93:27:91:3f:2f:9a:5d:a2:76:62:b8:08:
76:a0:d2:90:ed:4c:e0:c3:e8:bb:e4:7a:4d:05:54:e0:7e:5c:
77:a8:38:50:36:96:49:4d:06:85:01:1b:25:d7:16:c7:be:7c:
53:55:55:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:57 2024 by rpki-client on console-ams.rpki-client.org