Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a4163d-dfce-4be0-96e9-adf2bac1f02c/1/WH5ZjyUkeelPGdXUJ2SH5L8Cn7Y.roa
File: WH5ZjyUkeelPGdXUJ2SH5L8Cn7Y.roa (raw, json)
Hash identifier: hsvVhAyHb04+u9xKyD0pa6tf10PkX1CDGyVayzVaGGk=
Subject key identifier: 58:7E:59:8F:25:24:79:E9:4F:19:D5:D4:27:64:87:E4:BF:02:9F:B6
Certificate issuer: /CN=84536fc4c2f44ba70e420bd3bb21ccbd60b4a4a1
Certificate serial: 24EC0F
Authority key identifier: 84:53:6F:C4:C2:F4:4B:A7:0E:42:0B:D3:BB:21:CC:BD:60:B4:A4:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFNvxML0S6cOQgvTuyHMvWC0pKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a4163d-dfce-4be0-96e9-adf2bac1f02c/1/WH5ZjyUkeelPGdXUJ2SH5L8Cn7Y.roa
Signing time: Sat 19 Feb 2022 10:57:34 +0000
ROA not before: Sat 19 Feb 2022 10:57:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6898
IP address blocks: 185.155.176.0/22 maxlen: 22
77.220.64.0/19 maxlen: 19
2a02:210::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2419727 (0x24ec0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84536fc4c2f44ba70e420bd3bb21ccbd60b4a4a1
Validity
Not Before: Feb 19 10:57:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=587e598f252479e94f19d5d4276487e4bf029fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:60:56:29:91:e9:bb:40:92:72:8e:15:c6:
0c:97:b8:bf:91:22:9e:12:bf:3f:5f:5c:00:cd:8f:
b5:b1:e4:7c:40:ee:11:3b:49:c8:ca:0d:82:38:29:
f1:bd:28:e5:90:3a:6c:eb:bb:60:92:ba:5d:bc:dd:
64:8a:72:fa:1c:f8:24:f2:e7:7a:f5:9c:69:55:ed:
10:7c:76:ba:51:80:8a:6b:8c:4c:47:1d:75:3e:2b:
12:ca:af:6b:ce:ad:f8:55:ff:18:04:97:64:a0:c7:
84:f0:5d:87:ca:ea:43:10:97:f4:66:3f:c5:fd:9e:
b3:06:57:8c:f2:73:bf:b7:07:f7:a0:84:fd:38:9b:
0b:6a:4c:09:f2:bf:20:49:53:53:4b:ce:96:a4:74:
aa:32:f2:d4:17:1f:59:c0:32:76:13:c1:44:4e:eb:
e3:a0:56:82:e6:5f:98:2b:f9:d0:4a:07:f0:9c:e3:
64:d0:b3:f6:5c:8e:bf:ad:af:5a:ee:ea:4b:f3:65:
bf:a0:4d:92:4f:cc:05:b8:d0:dd:10:c8:14:59:2c:
ae:4d:0a:a5:f3:ec:50:e6:99:b4:aa:97:3b:ac:9b:
fd:f3:1a:3d:97:d2:ae:df:8f:9c:37:92:c6:17:c3:
e3:e2:c2:e8:24:e7:cc:5a:21:f3:6b:fb:19:45:ad:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7E:59:8F:25:24:79:E9:4F:19:D5:D4:27:64:87:E4:BF:02:9F:B6
X509v3 Authority Key Identifier:
keyid:84:53:6F:C4:C2:F4:4B:A7:0E:42:0B:D3:BB:21:CC:BD:60:B4:A4:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFNvxML0S6cOQgvTuyHMvWC0pKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a4163d-dfce-4be0-96e9-adf2bac1f02c/1/WH5ZjyUkeelPGdXUJ2SH5L8Cn7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a4163d-dfce-4be0-96e9-adf2bac1f02c/1/hFNvxML0S6cOQgvTuyHMvWC0pKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.64.0/19
185.155.176.0/22
IPv6:
2a02:210::/32
Signature Algorithm: sha256WithRSAEncryption
83:a5:07:cc:f5:1b:16:7c:1f:d4:c1:86:df:b3:a9:3c:ac:1a:
7c:26:53:7c:63:e6:10:81:bf:77:8e:a2:df:63:34:2f:09:26:
25:b8:10:2c:12:cf:cb:39:05:de:00:24:5a:5d:1a:02:8e:20:
6b:31:83:f2:3b:b3:ac:d6:88:2e:5a:54:2d:8f:38:4f:7d:73:
0a:0a:3d:53:c8:a8:cc:09:ff:ce:13:86:72:ac:75:f3:26:a9:
dd:d5:b0:99:b2:3e:25:58:f8:7b:30:f5:3a:98:a1:08:af:ed:
76:d7:64:91:47:e1:7e:f4:c2:3a:c8:0c:9d:03:9b:95:be:01:
81:da:9f:41:8c:a7:51:ad:b4:e1:04:91:3a:88:39:0d:84:9c:
0e:35:43:59:f9:58:a5:fb:08:95:6c:5a:a9:52:da:e4:4e:75:
16:47:87:ab:69:2b:03:8b:a7:2a:9b:f1:c4:92:d6:84:fb:39:
c4:ee:ef:82:cd:b6:fc:c6:a5:02:9a:d7:8a:09:74:e5:0e:71:
15:f9:eb:38:a2:49:37:c8:2d:eb:ca:87:54:4c:bc:a1:c1:16:
a6:28:bc:41:1f:0f:d2:f0:bb:14:05:59:52:c2:70:b6:07:b5:
de:89:1c:9a:44:18:9d:18:8b:13:40:3f:8b:7e:a7:c3:d6:67:
3b:80:0a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:31 2024 by rpki-client on console-ams.rpki-client.org