Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/372143-5dba-4dc3-a04b-9fa1e69103b0/1/Wt8pIFjFnmlF9x0qWBXfK3rGb78.roa
File: Wt8pIFjFnmlF9x0qWBXfK3rGb78.roa (raw, json)
Hash identifier: rhLnZriB/zPOBN9k3alQBFUQ2GAUKFx3Jrjtn/Ti1r0=
Subject key identifier: 5A:DF:29:20:58:C5:9E:69:45:F7:1D:2A:58:15:DF:2B:7A:C6:6F:BF
Certificate issuer: /CN=2f2ac25de2d9ba70c463fa95ef3aa5a412c87498
Certificate serial: 8C4A8D
Authority key identifier: 2F:2A:C2:5D:E2:D9:BA:70:C4:63:FA:95:EF:3A:A5:A4:12:C8:74:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyrCXeLZunDEY_qV7zqlpBLIdJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/372143-5dba-4dc3-a04b-9fa1e69103b0/1/Wt8pIFjFnmlF9x0qWBXfK3rGb78.roa
Signing time: Sat 01 Jan 2022 02:55:13 +0000
ROA not before: Sat 01 Jan 2022 02:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 94.154.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9194125 (0x8c4a8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2ac25de2d9ba70c463fa95ef3aa5a412c87498
Validity
Not Before: Jan 1 02:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5adf292058c59e6945f71d2a5815df2b7ac66fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:71:a7:f2:d5:b0:20:d0:21:77:2e:b7:88:35:
7b:8c:69:65:86:a9:54:eb:9e:b5:07:25:79:58:96:
e6:41:4d:6b:ac:43:de:42:f6:e7:09:26:9f:1a:65:
bc:3f:96:69:ee:61:ce:03:69:28:6f:db:1d:2a:c2:
1c:cb:9d:3e:cb:dd:1e:02:0b:3d:67:5c:92:2d:2f:
89:89:68:81:61:28:a9:a2:19:ea:40:2d:9f:d8:a1:
85:f4:44:bb:51:86:30:bf:18:08:96:7c:97:c1:d5:
15:8f:b2:6e:b3:fc:0c:e5:a5:85:15:9f:1c:5f:1b:
ea:bf:38:a8:af:d5:02:cb:40:84:fe:4c:d3:ad:c8:
fd:ec:ce:24:0d:59:72:b3:72:d3:81:34:40:e6:bc:
87:24:3c:79:ed:cc:af:68:3a:4a:3b:03:63:ec:31:
14:47:a9:f4:d0:78:42:62:9f:19:74:46:c3:7d:17:
40:3c:7a:c9:64:4f:1b:f7:27:d2:ef:91:16:e9:08:
ea:f8:16:6f:48:66:b8:55:77:a8:dd:83:fe:83:8b:
fe:ba:21:30:e8:2f:a6:59:5e:dc:4a:77:70:e1:9a:
b9:5b:71:da:c3:d2:e0:5e:e6:9d:eb:df:66:5f:b6:
ce:21:07:b4:b5:4d:75:e4:44:e4:f6:62:53:7e:82:
f7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DF:29:20:58:C5:9E:69:45:F7:1D:2A:58:15:DF:2B:7A:C6:6F:BF
X509v3 Authority Key Identifier:
keyid:2F:2A:C2:5D:E2:D9:BA:70:C4:63:FA:95:EF:3A:A5:A4:12:C8:74:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyrCXeLZunDEY_qV7zqlpBLIdJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/372143-5dba-4dc3-a04b-9fa1e69103b0/1/Wt8pIFjFnmlF9x0qWBXfK3rGb78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/372143-5dba-4dc3-a04b-9fa1e69103b0/1/LyrCXeLZunDEY_qV7zqlpBLIdJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.127.0/24
Signature Algorithm: sha256WithRSAEncryption
51:80:8f:f7:08:ce:be:03:d4:df:a7:52:5e:8a:9f:06:2b:b1:
ba:9d:cf:e0:1b:f2:72:f4:e6:db:01:f0:8e:3b:d3:65:46:bc:
51:b6:84:a9:4d:74:4b:d6:0d:02:a6:6d:09:b1:25:39:bd:3a:
a2:6a:1e:87:73:72:aa:49:29:28:5f:6b:a9:04:fd:2b:cd:2f:
a0:54:68:84:63:a7:7c:5a:e0:7a:50:26:68:3b:05:6e:d8:52:
fc:c7:80:f2:14:f2:98:cc:0e:fa:f5:7c:ca:22:51:40:e3:76:
98:07:47:f3:4d:b3:f0:aa:a3:fa:4b:e5:b0:15:05:4c:a5:bf:
30:6b:6a:42:c5:f0:eb:e0:80:f7:f5:70:4f:7f:c7:94:40:75:
ba:ea:bd:b9:9e:74:46:7a:93:43:ab:7c:7a:82:d5:f4:59:d9:
d8:73:7c:30:da:10:ac:89:38:7e:ea:57:8c:8e:40:77:14:d6:
76:91:71:47:ae:63:25:f7:40:b3:19:5a:ca:db:89:9a:29:79:
57:fe:52:e5:57:64:a0:18:84:ea:cc:3b:3c:33:1a:ad:86:69:
8f:bd:a2:b7:56:b5:b7:73:8b:04:e7:d5:7f:e3:75:bf:ff:d2:
49:0c:51:0b:84:53:9c:14:d3:75:99:f7:81:92:69:ff:d4:a8:
54:88:a4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:16 2023 by rpki-client on console.sobornost.net