Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Wl-DcpfTiNzgbbCFZ-ORtVWOtDI.roa
File: Wl-DcpfTiNzgbbCFZ-ORtVWOtDI.roa (raw, json)
Hash identifier: rMwfv1ZErQ74aUOWnqC/cOVoacFAaPOGNGcYiYx2fyM=
Subject key identifier: 5A:5F:83:72:97:D3:88:DC:E0:6D:B0:85:67:E3:91:B5:55:8E:B4:32
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01849F5F0BEC39997D3CD4DBA52B4517C00B
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Wl-DcpfTiNzgbbCFZ-ORtVWOtDI.roa
Signing time: Tue 22 Nov 2022 12:45:17 +0000
ROA not before: Tue 22 Nov 2022 12:45:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 85.237.199.0/24 maxlen: 24
85.237.195.0/24 maxlen: 24
185.93.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:5f:0b:ec:39:99:7d:3c:d4:db:a5:2b:45:17:c0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Nov 22 12:45:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a5f837297d388dce06db08567e391b5558eb432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:35:7c:05:d1:a7:5b:fc:84:ef:7a:2a:07:
90:f6:ca:3f:5b:04:b3:d9:ec:05:aa:4c:bc:6c:17:
f6:eb:da:2a:0f:e5:31:4f:a2:5a:eb:8d:ce:47:5c:
2b:23:e7:e6:1e:c1:e3:06:a0:f7:28:38:90:4c:d8:
52:90:53:49:ba:15:0c:c6:23:e8:26:3d:1f:c1:7a:
f0:23:f4:87:a6:14:e9:42:f7:be:02:ad:40:44:a8:
13:b1:0b:21:04:9a:ac:52:75:90:9b:4b:12:45:09:
26:d9:8d:f5:c2:f8:46:ff:1b:18:68:b8:7a:0d:f2:
c7:22:8f:0b:9c:87:58:ef:a5:c1:b8:4c:f0:b8:5a:
04:6b:dd:6d:da:0e:b9:3f:ab:e4:6e:2a:5e:5f:d8:
6c:c8:89:83:ce:30:b6:ff:de:3b:2d:59:97:f8:9b:
13:a9:3e:6c:54:95:ec:22:3a:c5:d3:9a:03:75:9a:
ca:27:5a:fe:f8:6d:b8:96:35:e3:da:07:56:12:08:
d0:83:fd:00:3f:48:6d:9c:37:60:80:de:51:8c:95:
55:fc:10:58:36:22:09:f1:43:45:76:89:0f:15:c0:
fd:96:3f:f6:d9:56:26:69:b2:3b:d3:c6:a7:11:e9:
d0:a7:3d:19:65:3b:fd:10:b2:26:f6:7d:9e:97:a9:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5F:83:72:97:D3:88:DC:E0:6D:B0:85:67:E3:91:B5:55:8E:B4:32
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Wl-DcpfTiNzgbbCFZ-ORtVWOtDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.195.0/24
85.237.199.0/24
185.93.34.0/23
Signature Algorithm: sha256WithRSAEncryption
67:c9:0b:d9:c6:aa:c5:fa:0f:b4:19:ab:8d:c7:4d:dc:27:a2:
b2:f5:f3:88:80:dc:dc:0d:2a:56:e0:01:65:08:9a:41:61:16:
29:49:11:a6:64:15:c3:73:72:0a:20:b8:5b:19:36:c9:a7:15:
2a:73:df:03:ed:81:24:33:79:41:6b:f6:c5:04:5d:e4:75:9f:
54:f3:9f:38:e5:ca:37:e2:c9:e7:35:da:ed:bb:53:84:fe:a3:
59:c6:b2:a5:0e:fe:5e:f7:db:98:b0:de:84:1a:1c:6b:81:fd:
ad:f8:51:80:0c:08:4f:d9:99:ab:df:0f:8b:43:78:25:c7:da:
cb:fb:56:17:f1:f7:3a:06:16:4f:64:fd:da:58:8a:86:b9:04:
c9:13:ab:9a:85:7b:5b:95:61:0e:6c:e1:b9:8e:bc:6c:47:fb:
02:10:2f:a8:d4:92:2f:75:e6:6b:df:ee:3e:48:a7:d0:78:5b:
da:60:4c:d1:87:c6:e5:6b:41:06:1b:e8:84:a3:29:db:e2:1c:
54:86:24:29:ee:63:d9:c2:d3:90:90:f6:3f:17:8d:de:ac:fc:
60:6c:ef:d3:06:25:0b:a5:ff:11:af:73:aa:a4:33:44:b5:b5:
5d:a6:1a:d9:03:3b:16:64:7e:f5:fc:cc:ce:c3:92:f9:00:73:
46:ab:38:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org