Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/Wy7keIn7R753Vnla3Kwr_b3C_as.roa
File: Wy7keIn7R753Vnla3Kwr_b3C_as.roa (raw, json)
Hash identifier: +a2JoaxA2plHi7ydJf3KCaa1Gh7Pgha+Lo1gb4v3Qmw=
Subject key identifier: 5B:2E:E4:78:89:FB:47:BE:77:56:79:5A:DC:AC:2B:FD:BD:C2:FD:AB
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 01857270F679EACF3CDA8D431A840B620E72
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/Wy7keIn7R753Vnla3Kwr_b3C_as.roa
Signing time: Mon 02 Jan 2023 12:24:43 +0000
ROA not before: Mon 02 Jan 2023 12:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62380
IP address blocks: 185.232.64.0/24 maxlen: 24
185.232.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:70:f6:79:ea:cf:3c:da:8d:43:1a:84:0b:62:0e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jan 2 12:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b2ee47889fb47be7756795adcac2bfdbdc2fdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a4:91:37:31:07:e9:12:28:0e:b1:e0:e7:30:
d5:84:91:8b:17:00:c2:e9:71:dc:a6:a4:b1:06:4e:
dd:9d:e0:75:71:89:6a:d1:aa:bb:02:0c:4d:66:e8:
da:d3:12:1a:20:de:9f:e4:cd:e5:2b:33:59:1b:e7:
d1:10:b0:82:24:8b:5f:f8:ba:d1:51:2a:ab:81:20:
c6:54:e1:5f:b8:a5:49:e2:59:aa:31:bc:ce:c5:b7:
b1:23:8e:35:78:5f:28:5f:f9:93:d0:40:a8:d5:3f:
ca:85:37:70:f1:7e:0d:17:ab:e1:41:88:4b:ae:d0:
00:d3:33:f4:77:1c:45:3d:49:34:3d:3c:21:4d:dd:
e5:ad:5e:de:9f:e4:64:48:34:a2:12:77:f2:97:9b:
80:e5:eb:58:9b:f4:c6:d5:77:16:e9:2a:08:1f:1e:
8c:6b:65:8b:f0:24:0a:8c:ca:a7:af:c2:15:4a:bb:
33:e7:22:a9:00:b8:e2:b1:0b:60:16:38:a2:13:04:
cc:a8:22:fe:7e:b1:af:c9:f4:f4:b9:34:83:15:7c:
43:c6:06:4a:03:e0:66:e4:b9:41:55:f9:d7:2f:1b:
e2:df:8e:66:6d:cf:65:75:bd:40:2a:88:ea:2c:51:
cc:c1:6b:6a:98:bb:f8:a9:46:d8:f8:8a:b6:67:4b:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2E:E4:78:89:FB:47:BE:77:56:79:5A:DC:AC:2B:FD:BD:C2:FD:AB
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/Wy7keIn7R753Vnla3Kwr_b3C_as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.64.0/24
185.232.66.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f3:86:29:11:e6:9b:bb:8c:8a:c1:39:16:4a:7b:79:9f:7f:
3c:6b:c5:55:96:1c:a1:ca:ce:d9:00:a4:c9:4f:63:00:41:90:
15:a4:39:16:23:57:de:88:ba:30:91:f3:32:e7:4a:6f:94:9c:
5c:e6:ef:3f:e0:db:bc:c4:dd:23:24:37:93:68:c8:1f:19:c9:
1d:7e:14:79:8c:4e:d3:67:01:cc:26:24:59:bc:e5:95:f9:21:
b6:0a:6b:3c:7f:c3:02:76:2c:fa:8d:18:fc:89:0b:d5:39:5a:
bc:1c:97:35:80:f5:57:16:84:41:93:c0:c3:18:62:11:0c:50:
c3:21:c1:5d:7c:9f:3c:da:53:da:2d:81:fc:28:e8:21:9f:80:
ae:e5:00:0f:d9:3e:15:b5:d4:90:34:0a:6e:fc:9d:18:ff:fc:
e6:e2:9d:7f:d3:e7:fc:ad:2c:f3:c6:2e:4a:5b:4b:70:e0:d1:
9f:46:48:c3:bc:c6:2b:0c:81:95:81:c2:ed:65:51:e1:fc:b9:
7c:cb:c6:a1:e3:3e:b8:fe:b5:cc:12:c2:f1:75:80:4c:6b:3a:
24:ea:36:9f:7a:d5:31:37:3d:9b:0c:47:7d:6d:81:57:00:72:
b3:03:22:cf:b1:e2:85:8d:a6:b8:51:ed:9f:3e:99:38:87:91:
bf:3d:82:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:29 2025 by rpki-client