Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/WFyk2Rna9uuDxnz3Ogue9_0Wzck.roa
File: WFyk2Rna9uuDxnz3Ogue9_0Wzck.roa (raw, json)
Hash identifier: PA1Ycdx1tSaujU5CQnW1vocHIUhA9hU8ac4p70v4n7w=
Subject key identifier: 58:5C:A4:D9:19:DA:F6:EB:83:C6:7C:F7:3A:0B:9E:F7:FD:16:CD:C9
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018AC0C5B591E7638BEBB3CCB112C7CF3A25
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/WFyk2Rna9uuDxnz3Ogue9_0Wzck.roa
Signing time: Sat 23 Sep 2023 06:41:37 +0000
ROA not before: Sat 23 Sep 2023 06:41:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 109.203.168.0/21 maxlen: 24
94.74.152.0/22 maxlen: 24
185.34.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c0:c5:b5:91:e7:63:8b:eb:b3:cc:b1:12:c7:cf:3a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Sep 23 06:41:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=585ca4d919daf6eb83c67cf73a0b9ef7fd16cdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:de:82:7d:56:43:33:23:41:c6:7e:fb:30:
66:a6:7b:cc:dd:71:42:a8:49:3e:62:b2:0a:a7:c2:
70:c0:38:1e:79:48:f2:23:80:4a:9b:8f:09:a6:58:
13:21:fa:4f:4c:56:94:7a:16:6b:41:f4:63:7c:4e:
57:7c:4e:f8:da:d2:72:29:a5:62:9f:4d:3a:85:2a:
da:45:d1:50:25:98:e8:8e:50:95:c3:ee:0f:43:d5:
56:78:ab:1f:a4:e8:a3:8b:30:95:48:ad:e1:6c:43:
bc:e9:8d:a8:14:aa:dd:1d:d9:f5:8d:04:ba:61:81:
e4:8b:32:3b:8b:79:78:e7:1c:f2:fe:d6:38:46:0f:
71:7d:3c:ab:3a:23:8f:21:a3:6c:bb:f0:67:80:8d:
56:c6:76:44:61:92:f4:b0:73:6d:4a:b9:69:78:81:
e9:13:f2:18:17:7f:d0:9c:84:37:fc:5c:45:10:5e:
e3:de:dd:1c:a1:0e:66:d8:cc:ac:04:ee:4e:4b:3e:
ec:66:cc:87:c1:d0:bf:26:ec:a7:10:a1:d7:0d:df:
bb:11:f3:6f:70:b4:2d:03:3d:e2:4d:67:b8:0c:0b:
ba:39:08:df:cf:ae:89:58:fd:16:b2:7b:d1:31:e9:
3c:0e:95:df:95:19:d4:98:02:c9:78:da:04:88:d2:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5C:A4:D9:19:DA:F6:EB:83:C6:7C:F7:3A:0B:9E:F7:FD:16:CD:C9
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/WFyk2Rna9uuDxnz3Ogue9_0Wzck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.152.0/22
109.203.168.0/21
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
64:6d:67:13:95:69:ad:34:f8:36:4c:63:7d:24:ee:a0:21:85:
6e:f4:43:56:43:ad:68:84:e3:83:ef:58:38:85:0b:a5:01:44:
56:a4:4f:da:40:88:50:f5:53:70:57:17:f6:c8:61:8a:a8:a0:
a3:fb:9b:d7:ef:cf:8d:03:c7:30:f8:db:cd:bf:80:6d:1e:da:
09:cf:63:62:9d:e9:0b:a3:45:37:a7:68:09:c8:b1:44:cb:c4:
df:90:8e:4b:b4:73:6f:20:79:5e:bc:d0:89:81:60:08:4b:07:
c6:c1:48:a7:ac:dd:5d:76:74:51:b8:84:1b:a9:29:43:a7:05:
20:3e:9e:f0:d3:a1:c0:9b:d9:c7:a1:c5:0f:e8:8a:a8:1e:95:
8f:8d:df:51:a6:7d:d5:7f:97:89:10:b9:65:a7:eb:c5:23:10:
c2:0a:67:37:fc:87:54:0f:8c:ba:f9:3d:72:f0:1b:51:4e:ef:
9b:05:82:a4:f6:eb:cc:56:ce:3d:92:7d:6c:44:19:ce:3d:79:
e6:06:3d:1a:51:0b:56:48:52:3e:93:e4:45:7b:45:47:1a:df:
fa:fc:c1:34:c1:ff:b0:a3:70:e4:b9:7f:0f:1a:90:d2:92:45:
4c:17:1d:fa:70:b3:ab:3f:e3:83:a4:a9:04:22:ba:9b:c2:81:
88:81:01:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:20 2025 by rpki-client