Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/73f6f0-5794-49e0-b4f7-84327227eff0/1/wAX1lx2gu5lC7HPZ-0lc-z2a7EU.roa
File: wAX1lx2gu5lC7HPZ-0lc-z2a7EU.roa (raw, json)
Hash identifier: ZL9vAJ7ZKDurr49b3XjVTc1vx9luIVm9W8hU+1tDYj8=
Subject key identifier: C0:05:F5:97:1D:A0:BB:99:42:EC:73:D9:FB:49:5C:FB:3D:9A:EC:45
Certificate issuer: /CN=e32b7329fa83f3b48bb16560060d71d9b3024b66
Certificate serial: 018CC94E52B090663F8003B513529068ED7C
Authority key identifier: E3:2B:73:29:FA:83:F3:B4:8B:B1:65:60:06:0D:71:D9:B3:02:4B:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ytzKfqD87SLsWVgBg1x2bMCS2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/73f6f0-5794-49e0-b4f7-84327227eff0/1/wAX1lx2gu5lC7HPZ-0lc-z2a7EU.roa
Signing time: Tue 02 Jan 2024 08:33:22 +0000
ROA not before: Tue 02 Jan 2024 08:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205253
IP address blocks: 185.219.39.0/24 maxlen: 24
185.219.37.0/24 maxlen: 24
185.219.36.0/24 maxlen: 24
185.219.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:52:b0:90:66:3f:80:03:b5:13:52:90:68:ed:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32b7329fa83f3b48bb16560060d71d9b3024b66
Validity
Not Before: Jan 2 08:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c005f5971da0bb9942ec73d9fb495cfb3d9aec45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:26:ec:4b:64:37:ae:5d:88:54:c5:30:92:
09:e1:d0:2d:0e:e3:75:e0:c9:50:39:bf:36:9a:96:
15:12:8f:90:ef:30:08:3d:67:9f:4f:fe:b3:db:62:
57:d5:e6:8c:35:ba:73:cc:2d:ca:35:3e:b1:af:40:
90:d7:4d:0b:7d:6f:b1:2e:e2:d5:8d:bb:72:d1:0e:
6c:c0:13:40:d7:6c:bf:3a:83:a4:60:33:d0:7a:51:
f3:b6:16:25:1a:e4:16:3a:5d:c3:9e:50:80:4f:de:
9c:62:a0:1f:a6:82:2d:1d:36:c7:f5:9e:7f:07:13:
2b:b2:6a:52:e3:6e:b8:e1:bb:71:47:4e:51:12:18:
f6:1f:87:aa:29:92:af:be:a5:59:3e:c6:eb:c9:3d:
30:9c:62:91:6f:51:aa:fb:cb:87:0f:ca:82:91:ef:
ca:2e:4a:c5:3f:79:36:0f:34:ca:ef:60:c7:30:c0:
b1:ee:61:3a:ff:10:63:80:f3:6a:24:0d:77:9c:9d:
40:a4:93:67:f5:bd:06:91:db:e1:3c:3d:80:3e:6f:
9b:02:52:74:71:71:d8:a8:9e:be:4f:73:20:ed:d2:
dd:99:9c:01:22:ef:d8:b7:f3:f6:97:76:96:d9:19:
c6:40:50:14:54:72:90:34:d0:0d:8e:93:f2:fc:a4:
f0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:05:F5:97:1D:A0:BB:99:42:EC:73:D9:FB:49:5C:FB:3D:9A:EC:45
X509v3 Authority Key Identifier:
keyid:E3:2B:73:29:FA:83:F3:B4:8B:B1:65:60:06:0D:71:D9:B3:02:4B:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ytzKfqD87SLsWVgBg1x2bMCS2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/73f6f0-5794-49e0-b4f7-84327227eff0/1/wAX1lx2gu5lC7HPZ-0lc-z2a7EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/73f6f0-5794-49e0-b4f7-84327227eff0/1/4ytzKfqD87SLsWVgBg1x2bMCS2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.36.0/22
Signature Algorithm: sha256WithRSAEncryption
62:d4:8d:bc:36:b9:2c:55:e8:1f:69:1d:6f:65:fc:d7:b6:f9:
8d:4c:62:c8:f2:19:96:9f:18:62:6d:ed:84:d7:42:f3:7b:eb:
86:7d:b6:19:33:da:09:a9:12:13:11:02:ae:fd:26:13:d1:3f:
3a:57:e9:16:45:b3:ab:6d:97:da:ac:42:69:6f:46:49:c9:4e:
04:75:66:97:82:1c:f0:ee:9d:8a:58:61:5f:6b:ab:36:ca:28:
30:f7:b7:b7:59:eb:df:e6:1c:f6:e5:e5:bb:af:c9:bc:05:6c:
6b:0b:49:37:f6:ab:d8:3d:15:1c:dd:b2:2e:0f:18:52:24:5f:
93:4b:9c:ef:f1:f0:84:88:5f:10:b6:bb:d2:17:84:4f:a6:7f:
56:7c:a8:13:e5:42:14:6e:36:3d:6b:51:20:b1:d7:5b:b0:2c:
1a:ba:54:55:ea:c5:c6:bc:aa:57:86:8c:13:9c:85:cd:17:f7:
af:47:15:af:b5:6d:26:cd:3d:90:f1:e3:8b:06:91:e1:be:3f:
d8:e7:4f:33:66:ca:df:31:07:8d:83:02:9b:aa:31:5b:ea:1c:
94:b4:3a:f2:ba:40:21:bc:1f:1c:eb:cb:d5:b5:dc:b5:1d:06:
66:61:dd:6f:ba:73:26:04:95:68:49:e0:77:c5:d4:e3:64:43:
c4:22:e4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:52 2024 by rpki-client on console-fra.rpki-client.org