Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/WGLs5_m3MEKmVYh4BVTQRiTHtKA.roa
File: WGLs5_m3MEKmVYh4BVTQRiTHtKA.roa (raw, json)
Hash identifier: ZWa3WIpnwoVmhMVmc8ihbsCkMoGfTrQlL6NC/9a7+v0=
Subject key identifier: 58:62:EC:E7:F9:B7:30:42:A6:55:88:78:05:54:D0:46:24:C7:B4:A0
Certificate issuer: /CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Certificate serial: 018CC4933D24E4A9A2BDB3B6A31E0F6E8764
Authority key identifier: 86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/WGLs5_m3MEKmVYh4BVTQRiTHtKA.roa
Signing time: Mon 01 Jan 2024 10:30:32 +0000
ROA not before: Mon 01 Jan 2024 10:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48740
IP address blocks: 91.212.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3d:24:e4:a9:a2:bd:b3:b6:a3:1e:0f:6e:87:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Validity
Not Before: Jan 1 10:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5862ece7f9b73042a65588780554d04624c7b4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:d8:51:be:4a:dd:0e:a4:28:2b:56:ad:ae:
07:b4:21:c7:07:c7:e9:3a:4f:25:f5:31:3f:08:26:
ea:6a:2c:4a:f6:c3:32:a8:72:e8:45:e8:a3:68:c7:
30:60:5b:69:8d:c6:c6:c1:85:f9:1a:3d:c4:0e:f3:
ee:5c:ff:59:01:4e:df:f5:f0:bd:2f:10:6b:be:da:
6f:29:79:cf:24:eb:5a:da:37:b4:db:77:7a:18:b6:
98:06:71:02:c3:39:d5:cd:ed:3f:96:75:3d:b0:00:
e8:53:29:62:fc:60:fd:1f:eb:4a:98:66:3f:09:86:
6f:39:c0:73:4c:66:8c:5c:47:cd:63:9a:a4:15:2a:
69:ec:80:9b:cd:f6:ef:24:45:b6:12:8e:ff:b1:8b:
e3:0b:4f:49:29:c5:aa:56:6c:a9:e4:32:33:01:08:
93:21:f5:70:5b:0f:d8:4d:16:1b:9e:b9:6b:65:12:
ff:28:08:32:c0:ee:76:56:7b:57:2a:6a:8e:4b:dd:
e9:82:58:90:05:55:3a:4d:64:81:4e:b3:eb:a6:a1:
31:24:0a:29:d9:72:5a:47:4a:63:e1:83:2e:32:ed:
2c:11:96:fe:41:6a:64:a2:af:6a:d4:bc:56:fe:9a:
aa:79:b8:3f:d7:0c:5c:90:fc:cd:59:4e:46:ae:ea:
e6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:62:EC:E7:F9:B7:30:42:A6:55:88:78:05:54:D0:46:24:C7:B4:A0
X509v3 Authority Key Identifier:
keyid:86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/WGLs5_m3MEKmVYh4BVTQRiTHtKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.1.0/24
Signature Algorithm: sha256WithRSAEncryption
42:6c:d2:77:b7:37:36:55:02:ba:d4:a9:95:d2:a0:26:e6:df:
d6:e3:c4:61:56:e1:fb:2a:71:df:3c:72:6b:78:4d:f2:c3:df:
61:ac:b0:ce:01:5c:d6:e9:9e:02:fb:89:0f:38:b0:13:12:77:
b9:6e:31:98:68:29:a0:d9:29:a2:13:a8:2b:98:57:61:43:b9:
30:5c:68:c0:75:98:56:aa:8b:e9:fc:d3:65:9b:27:26:6f:d5:
07:4a:a1:e1:ee:4d:f6:54:2f:e4:e9:3b:91:40:2d:27:f0:31:
cc:3c:d3:84:4e:ac:1f:d4:35:c1:bc:50:b5:f5:7b:ac:90:d0:
cc:a9:23:e2:cd:b1:7a:7d:99:c7:4b:b7:bd:35:81:f1:23:3e:
ea:8b:eb:33:19:f0:ec:46:51:7f:2e:9c:56:13:63:ba:ab:71:
39:3b:4e:58:57:28:a4:88:67:8d:51:65:61:b3:67:b6:f7:1f:
61:71:c3:ed:70:05:a5:b6:96:3f:3c:e7:21:9c:28:53:1c:8e:
ca:a4:50:8e:1e:77:5f:3a:59:03:21:78:8a:02:91:7b:83:f7:
85:5f:07:bb:87:aa:ca:b5:b0:35:4e:01:c6:d0:c1:21:9e:a9:
39:66:9e:b7:30:1b:7a:44:46:9f:23:d8:c7:3a:c0:2d:5a:54:
82:89:8b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:10 2024 by rpki-client on console.sobornost.net