Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/wMrh3OZyMGfHA_dg8RWZZIDVzR4.roa
File: wMrh3OZyMGfHA_dg8RWZZIDVzR4.roa (raw, json)
Hash identifier: p1ap8qMAwSN/NS4mLWQu14X2qI2wnZDKb/eeLgQx084=
Subject key identifier: C0:CA:E1:DC:E6:72:30:67:C7:03:F7:60:F1:15:99:64:80:D5:CD:1E
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 0190A354613E0CC1B6A71A9FC47ADA308006
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/wMrh3OZyMGfHA_dg8RWZZIDVzR4.roa
Signing time: Thu 11 Jul 2024 19:45:34 +0000
ROA not before: Thu 11 Jul 2024 19:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12541
IP address blocks: 84.18.0.0/19 maxlen: 19
92.60.160.0/20 maxlen: 20
92.60.170.0/24 maxlen: 24
92.60.173.0/24 maxlen: 24
92.60.174.0/24 maxlen: 24
185.66.60.0/22 maxlen: 22
185.66.60.0/24 maxlen: 24
185.66.61.0/24 maxlen: 24
185.66.62.0/24 maxlen: 24
195.5.64.0/19 maxlen: 24
212.49.128.0/18 maxlen: 18
212.49.129.0/24 maxlen: 24
212.49.189.0/24 maxlen: 24
212.59.192.0/19 maxlen: 19
212.66.161.0/24 maxlen: 24
212.66.162.0/23 maxlen: 23
212.66.163.0/24 maxlen: 24
212.66.164.0/22 maxlen: 22
212.66.168.0/21 maxlen: 21
212.66.176.0/20 maxlen: 20
212.163.0.0/16 maxlen: 16
212.163.1.0/24 maxlen: 24
212.163.5.0/24 maxlen: 24
212.163.31.0/24 maxlen: 24
212.163.48.0/24 maxlen: 24
212.163.91.0/24 maxlen: 24
212.163.92.0/24 maxlen: 24
212.163.94.0/24 maxlen: 24
212.163.130.0/24 maxlen: 24
212.163.185.0/24 maxlen: 24
212.163.193.0/24 maxlen: 24
212.163.216.0/22 maxlen: 22
212.163.220.0/22 maxlen: 22
212.163.225.0/24 maxlen: 24
212.163.226.0/24 maxlen: 24
212.163.227.0/24 maxlen: 24
212.163.235.0/24 maxlen: 24
212.163.240.0/20 maxlen: 20
213.9.128.0/17 maxlen: 17
213.9.142.0/23 maxlen: 23
213.9.144.0/24 maxlen: 24
213.9.162.0/23 maxlen: 23
213.9.182.0/24 maxlen: 24
213.9.185.0/24 maxlen: 24
213.9.186.0/24 maxlen: 24
213.9.190.0/23 maxlen: 23
213.9.217.0/24 maxlen: 24
213.9.224.0/20 maxlen: 20
213.9.240.0/23 maxlen: 23
213.9.244.0/24 maxlen: 24
213.9.245.0/24 maxlen: 24
213.9.246.0/24 maxlen: 24
213.9.247.0/24 maxlen: 24
213.9.248.0/24 maxlen: 24
213.192.192.0/18 maxlen: 18
213.192.193.0/24 maxlen: 24
213.192.200.0/22 maxlen: 22
213.192.203.0/24 maxlen: 24
213.192.206.0/23 maxlen: 23
213.192.212.0/22 maxlen: 22
213.192.213.0/24 maxlen: 24
213.192.216.0/21 maxlen: 21
213.192.224.0/22 maxlen: 22
213.192.228.0/23 maxlen: 23
213.192.232.0/22 maxlen: 22
213.192.238.0/24 maxlen: 24
213.192.239.0/24 maxlen: 24
213.192.240.0/24 maxlen: 24
213.192.241.0/24 maxlen: 24
213.192.242.0/23 maxlen: 23
213.192.244.0/23 maxlen: 23
213.192.246.0/24 maxlen: 24
213.192.247.0/24 maxlen: 24
213.192.248.0/21 maxlen: 21
213.192.249.0/24 maxlen: 24
213.192.251.0/24 maxlen: 24
213.192.252.0/23 maxlen: 23
213.192.253.0/24 maxlen: 24
213.192.254.0/24 maxlen: 24
213.192.255.0/24 maxlen: 24
2001:ac0::/29 maxlen: 29
2001:ac0::/32 maxlen: 32
2001:ac0:30fd::/48 maxlen: 48
2001:ac0:c040::/44 maxlen: 44
2001:ac0:c0c0::/44 maxlen: 44
2001:ac0:c880::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a3:54:61:3e:0c:c1:b6:a7:1a:9f:c4:7a:da:30:80:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Jul 11 19:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0cae1dce6723067c703f760f115996480d5cd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:4c:6c:36:40:51:68:dc:b3:98:4e:c9:d2:
22:db:8f:9a:64:23:f3:06:99:ed:3d:b8:52:7a:27:
c7:56:6d:0a:8a:93:e9:e1:52:7e:63:2b:fe:4a:2a:
f2:cc:82:9d:64:e2:ad:f4:8a:17:5b:f4:d5:c6:2f:
da:69:c7:66:b7:26:a3:60:43:6c:69:1e:be:09:a2:
a8:56:9b:85:b3:76:92:2e:51:0e:91:c2:09:fe:48:
3d:c0:84:43:da:1e:91:9a:f7:e0:8a:04:83:6c:e2:
cd:61:1a:1c:d2:66:f9:61:5f:b4:ef:de:b1:60:6f:
c9:ee:cf:fe:35:68:4b:e4:2c:ab:91:89:c2:0d:d8:
70:4d:26:da:94:e0:75:4c:74:94:e8:fc:b6:c7:00:
de:eb:3a:4d:20:91:05:19:a8:ed:3a:75:43:a5:e0:
b8:ad:01:bc:6e:ce:87:ce:52:36:b3:56:96:ab:be:
8a:1e:ed:f1:40:bf:84:e5:51:7e:5a:74:6c:83:e2:
88:db:27:35:2b:63:82:be:c0:24:b1:91:fa:87:14:
e9:62:fa:6d:ed:29:05:81:ce:a9:44:e7:00:a9:67:
04:c0:7e:60:61:75:7a:61:7c:7d:6e:cd:b2:16:0f:
a7:37:df:d5:13:8b:a4:56:aa:7e:46:ec:af:fa:10:
60:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CA:E1:DC:E6:72:30:67:C7:03:F7:60:F1:15:99:64:80:D5:CD:1E
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/wMrh3OZyMGfHA_dg8RWZZIDVzR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.18.0.0/19
92.60.160.0/20
185.66.60.0/22
195.5.64.0/19
212.49.128.0/18
212.59.192.0/19
212.66.161.0-212.66.191.255
212.163.0.0/16
213.9.128.0/17
213.192.192.0/18
IPv6:
2001:ac0::/29
Signature Algorithm: sha256WithRSAEncryption
01:0a:a4:97:1f:86:ba:16:b7:90:78:43:64:ee:b7:9c:6a:c4:
e8:44:90:e9:46:14:32:90:75:dd:4b:84:bd:cb:d3:8a:1d:f5:
af:27:0f:aa:84:3a:91:bd:59:6a:71:5f:04:1b:ae:f2:0d:ba:
f5:12:f9:09:fd:e3:e5:93:68:13:94:b7:30:46:08:d2:dc:2b:
f6:70:5d:c0:bb:6a:a7:59:56:b8:aa:60:71:06:63:9a:54:13:
50:9c:ef:10:b1:d0:f3:d0:44:50:af:49:83:de:2c:39:ba:c3:
bf:ea:7a:9f:cb:09:18:2e:b5:89:66:1f:48:5b:6e:24:45:ca:
f4:5d:5f:aa:94:0f:a4:27:e7:7e:b3:54:60:e2:e7:41:57:cf:
a4:2c:e4:9c:d0:d3:91:b5:8c:65:9f:e0:cc:2f:df:3f:76:56:
79:16:69:11:05:cc:e9:b4:a7:b5:ec:13:d1:97:4b:93:96:d4:
f5:51:d3:f8:9f:e0:5d:a7:83:bb:65:02:27:9d:d4:a2:3e:6b:
a6:ae:70:f0:e9:3b:62:e4:9d:8b:b8:a3:16:6d:17:8b:d9:68:
68:78:42:84:b1:f7:dd:f4:18:1c:58:dc:2e:2d:a7:a3:61:4d:
f1:3b:10:c9:be:09:35:ef:73:c7:cb:8b:f4:18:69:51:d5:f3:
01:be:ae:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 13:23:57 2024 by rpki-client on console-ams.rpki-client.org