Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/6ycU5Rr5ddwDSBBMFDslgrjDe98.roa
File: 6ycU5Rr5ddwDSBBMFDslgrjDe98.roa (raw, json)
Hash identifier: l3mMD7F3UVzyxvqSHh4knXL/7/DGmoHPW5OCEpPo42Y=
Subject key identifier: EB:27:14:E5:1A:F9:75:DC:03:48:10:4C:14:3B:25:82:B8:C3:7B:DF
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 032A7744
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/6ycU5Rr5ddwDSBBMFDslgrjDe98.roa
Signing time: Sat 01 Jan 2022 11:04:27 +0000
ROA not before: Sat 01 Jan 2022 11:04:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.139.24.0/24 maxlen: 24
185.139.25.0/24 maxlen: 24
185.139.26.0/24 maxlen: 24
185.139.27.0/24 maxlen: 24
185.235.32.0/24 maxlen: 24
185.100.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53114692 (0x32a7744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jan 1 11:04:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb2714e51af975dc0348104c143b2582b8c37bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:79:86:be:42:07:56:e5:8f:2a:39:e8:f0:
7a:f4:ae:35:b2:29:c0:6c:c6:74:33:35:2c:ce:84:
6a:ef:a3:91:c4:1e:ef:8e:01:ab:51:d1:d2:b8:6d:
2c:79:04:16:f4:94:ac:48:82:36:89:b9:dd:b1:bd:
f7:b1:05:16:b0:4a:fe:5d:3c:53:ea:02:49:88:fa:
07:a7:a6:ef:d3:11:04:a8:1c:9b:0d:af:6f:6f:52:
80:8f:21:d7:20:af:2f:33:d9:2e:8a:8e:63:32:e6:
05:c6:3c:76:f4:4b:b2:2e:b3:d2:ff:66:ea:a4:38:
83:bf:1a:dc:cd:99:a8:a1:97:24:e1:d6:21:ca:47:
ed:3e:64:53:c4:0a:cc:15:b8:48:69:a8:53:8b:c5:
38:e3:f9:64:a5:ba:fd:a6:f3:19:49:16:d1:18:d5:
71:72:89:c5:de:06:d9:b4:4b:bc:51:b4:ba:c3:78:
5c:22:8d:8e:2c:e1:fb:ce:c4:38:17:af:15:a9:35:
58:44:39:7b:f4:04:9c:67:30:00:f4:59:73:32:e8:
35:e8:af:2d:a0:d1:25:66:ec:d7:47:6a:a8:af:4e:
d2:89:4b:d0:0a:94:98:80:fc:a7:f7:c7:78:d5:e4:
5e:88:ba:bf:d7:c7:44:fe:18:8a:d4:b2:93:87:99:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:27:14:E5:1A:F9:75:DC:03:48:10:4C:14:3B:25:82:B8:C3:7B:DF
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/6ycU5Rr5ddwDSBBMFDslgrjDe98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.212.0/22
185.139.24.0/22
185.235.32.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c3:f5:d3:5c:7c:b4:f7:92:53:61:1b:f9:72:df:dc:99:ea:
63:01:b1:65:59:bb:8b:73:b1:14:93:8d:07:4a:61:eb:f8:2d:
8e:7e:46:cc:16:a1:8c:2f:12:b5:be:71:48:b4:94:65:df:08:
19:bf:bb:26:14:b3:7a:fa:e0:00:77:7b:cd:8e:60:be:f1:1a:
43:91:2e:e0:8e:20:2c:33:b7:59:c1:b4:52:2b:a8:72:4a:27:
f7:26:79:4f:01:82:88:55:a1:8c:6c:7c:f7:ff:a4:c7:4b:4c:
32:a5:e9:50:63:06:10:42:11:30:f1:40:fe:35:03:58:aa:a2:
b8:da:c6:04:c2:26:4e:bb:7f:fd:a2:75:82:f6:3e:d4:1b:20:
31:05:64:00:da:6f:17:bf:15:0d:71:f5:8a:b1:85:7f:85:e1:
97:5f:bb:c3:59:43:83:18:23:85:22:02:e8:93:ab:51:4b:08:
7f:7d:50:e4:99:e2:ba:31:79:a7:fe:5a:f7:9c:8e:17:a1:cd:
23:51:ac:92:07:ef:5f:9e:c1:6c:55:b5:f4:3c:76:cc:66:3e:
4e:df:50:ad:85:c3:80:d5:8b:2b:eb:14:0c:2d:f7:bd:8b:f9:
bb:7f:9d:83:97:bf:74:1d:7d:fc:89:59:fb:87:7d:58:84:9e:
b9:8b:ce:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:14 2024 by rpki-client on console-ams.rpki-client.org