Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/wBs_wtHaDjRmcng8gMVbEOUAZLk.roa
File: wBs_wtHaDjRmcng8gMVbEOUAZLk.roa (raw, json)
Hash identifier: 400rs6ETlZk0SBnYd62Ct4MgtZhif300d5rc/3KUFmY=
Subject key identifier: C0:1B:3F:C2:D1:DA:0E:34:66:72:78:3C:80:C5:5B:10:E5:00:64:B9
Certificate issuer: /CN=d4b2721932903f98313cdc1a6fd4b7f2edaa4355
Certificate serial: 380A0264
Authority key identifier: D4:B2:72:19:32:90:3F:98:31:3C:DC:1A:6F:D4:B7:F2:ED:AA:43:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LJyGTKQP5gxPNwab9S38u2qQ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/wBs_wtHaDjRmcng8gMVbEOUAZLk.roa
Signing time: Sat 01 Jan 2022 14:57:37 +0000
ROA not before: Sat 01 Jan 2022 14:57:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202038
IP address blocks: 94.199.232.0/21 maxlen: 24
94.199.234.0/23 maxlen: 24
94.199.239.0/24 maxlen: 24
94.199.238.0/24 maxlen: 24
185.108.94.0/24 maxlen: 24
185.108.92.0/22 maxlen: 24
2a02:8d1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940180068 (0x380a0264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b2721932903f98313cdc1a6fd4b7f2edaa4355
Validity
Not Before: Jan 1 14:57:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c01b3fc2d1da0e346672783c80c55b10e50064b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:32:26:a8:90:80:7c:11:7f:82:27:66:d6:fd:
43:86:60:72:a4:0b:5e:1b:9b:52:27:7b:57:2c:6c:
55:15:ee:79:e5:6b:c3:f7:53:38:a0:2f:0b:63:b6:
fb:b8:d1:da:65:ff:c8:ab:e9:a4:70:54:b5:f5:a0:
eb:6f:cc:b0:5a:b1:e8:9d:f1:44:e7:99:de:bd:70:
da:b0:bd:72:73:04:17:a5:71:cd:d4:6f:b2:11:bc:
71:73:e8:dc:fb:ee:6c:b6:7b:40:d3:09:56:12:73:
e8:73:26:f4:d6:db:3b:69:22:97:02:db:57:98:d8:
fa:e7:6c:d3:bb:54:cd:51:94:e2:98:e3:66:a6:cd:
55:3d:cc:50:62:b3:d5:7a:b6:7a:11:dd:3f:e2:ab:
a6:00:a9:44:ca:69:61:cb:f3:e6:cb:a5:ca:f8:41:
ee:88:bc:e3:10:15:92:0b:95:fe:b5:43:0c:ff:bf:
24:06:b9:7d:c0:0f:02:f6:08:59:3e:1f:f6:37:d2:
8e:e7:52:e0:40:d3:41:69:64:37:ec:6a:63:62:f9:
43:e7:df:07:b3:a5:3c:3a:0c:67:9f:3c:30:79:76:
c8:09:9b:aa:aa:5f:a9:4a:72:7b:8c:3c:e6:a7:43:
dd:b7:d4:6a:7d:29:f7:e2:f7:1e:4e:fc:17:f4:8e:
3b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1B:3F:C2:D1:DA:0E:34:66:72:78:3C:80:C5:5B:10:E5:00:64:B9
X509v3 Authority Key Identifier:
keyid:D4:B2:72:19:32:90:3F:98:31:3C:DC:1A:6F:D4:B7:F2:ED:AA:43:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LJyGTKQP5gxPNwab9S38u2qQ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/wBs_wtHaDjRmcng8gMVbEOUAZLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/1LJyGTKQP5gxPNwab9S38u2qQ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.232.0/21
185.108.92.0/22
IPv6:
2a02:8d1::/32
Signature Algorithm: sha256WithRSAEncryption
a3:dc:e1:c6:1a:21:21:3b:d8:81:fb:b9:ef:45:13:45:96:9e:
b2:52:c1:4e:1e:56:84:fb:cb:88:ee:af:0e:94:bc:87:14:b9:
05:63:9d:89:e8:1b:33:fd:06:d4:ae:da:fe:48:22:9e:1d:b9:
77:a0:47:9e:1c:7d:ae:31:6c:c7:4e:4f:65:ae:67:70:af:6f:
01:3e:b6:52:9b:e6:af:d2:70:e4:ee:b6:f3:35:23:e0:5c:98:
3f:37:0b:30:2b:7d:1a:07:43:91:d7:4a:a4:f6:3a:e6:5e:41:
27:5e:99:85:26:02:32:4f:b2:0e:95:89:da:99:0d:f7:0b:d4:
7b:2f:0e:47:e8:7c:7b:c0:f3:b8:3f:55:70:e8:b5:f3:21:66:
c0:54:0e:11:6e:87:1f:97:cd:a1:1e:fa:e2:28:79:3d:5a:47:
98:0d:5f:b4:a7:9d:70:90:55:0e:7a:74:e3:c4:3f:07:72:bb:
2d:2a:39:c2:25:b6:59:4e:be:6a:78:28:9f:12:73:48:c6:53:
56:6b:df:5f:0b:48:19:9d:2a:f1:1b:96:5b:73:ab:02:0f:b8:
fd:e6:81:64:56:54:9b:8d:63:f2:55:53:63:4d:b9:b4:89:33:
e5:d5:9c:f7:d6:22:d8:76:48:73:d3:f0:0b:88:36:1f:cf:07:
cc:a1:5b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:12 2025 by rpki-client