Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/Wb3pOF9ARYhOwlgUMII39vdaa8w.roa
File: Wb3pOF9ARYhOwlgUMII39vdaa8w.roa (raw, json)
Hash identifier: yr/oPtRVv4tQY4C9mR4sJbZnnyUypL1gs7wr2mFcc6g=
Subject key identifier: 59:BD:E9:38:5F:40:45:88:4E:C2:58:14:30:82:37:F6:F7:5A:6B:CC
Certificate issuer: /CN=7f65bff64d8a87977e334d89c4e38c0d1095af63
Certificate serial: 018CC64B330F7A5595CE07A8AB9F50BE27B2
Authority key identifier: 7F:65:BF:F6:4D:8A:87:97:7E:33:4D:89:C4:E3:8C:0D:10:95:AF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2W_9k2Kh5d-M02JxOOMDRCVr2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/Wb3pOF9ARYhOwlgUMII39vdaa8w.roa
Signing time: Mon 01 Jan 2024 18:31:06 +0000
ROA not before: Mon 01 Jan 2024 18:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201730
IP address blocks: 37.221.88.0/22 maxlen: 24
194.169.252.0/24 maxlen: 24
185.138.244.0/22 maxlen: 24
185.146.148.0/22 maxlen: 24
185.78.100.0/22 maxlen: 24
185.65.92.0/22 maxlen: 24
2a03:1aa0::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:33:0f:7a:55:95:ce:07:a8:ab:9f:50:be:27:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f65bff64d8a87977e334d89c4e38c0d1095af63
Validity
Not Before: Jan 1 18:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59bde9385f4045884ec25814308237f6f75a6bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:01:19:1c:ca:b2:6d:16:4c:9e:80:4f:ba:
5c:0d:43:29:bd:c8:9c:51:cf:71:ce:3e:79:4f:45:
ba:0c:30:be:df:4a:38:82:b0:97:d6:b1:f8:2c:3b:
1e:9d:1c:7a:ef:3f:f5:6d:d7:fc:13:b8:ea:09:08:
8a:4e:bc:b9:4a:a7:60:c3:f9:74:ee:7b:3d:2f:4a:
87:e1:ab:28:fb:1f:5e:34:cd:33:c6:de:a2:03:0d:
b8:b7:09:47:d2:f8:e8:44:13:50:7c:58:74:eb:2b:
8a:36:9f:72:08:7f:bf:88:d4:19:e1:df:13:72:36:
7a:b4:8d:2a:7d:66:4c:67:fa:2e:ef:dd:6c:cf:50:
c3:a0:5c:54:7a:0a:a0:28:e3:32:8a:d0:4c:dc:66:
1c:5b:72:19:39:54:5d:38:93:70:28:66:0f:b6:1d:
6d:7f:71:5e:8c:34:2e:e5:51:d9:76:31:9f:26:32:
8e:fa:d8:32:93:ee:5e:f6:62:d6:42:4b:df:70:ac:
a5:c0:25:94:65:6a:e3:d6:32:e3:d9:61:d9:30:c7:
a1:92:84:19:4f:c9:1d:29:f1:f2:35:79:af:b3:63:
f3:a2:ad:ad:e5:1d:61:0c:c2:2d:22:af:08:0c:d3:
3b:c1:6c:0c:8e:fe:ac:8a:f2:2a:3c:77:fb:33:6a:
90:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BD:E9:38:5F:40:45:88:4E:C2:58:14:30:82:37:F6:F7:5A:6B:CC
X509v3 Authority Key Identifier:
keyid:7F:65:BF:F6:4D:8A:87:97:7E:33:4D:89:C4:E3:8C:0D:10:95:AF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2W_9k2Kh5d-M02JxOOMDRCVr2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/Wb3pOF9ARYhOwlgUMII39vdaa8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/f2W_9k2Kh5d-M02JxOOMDRCVr2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.88.0/22
185.65.92.0/22
185.78.100.0/22
185.138.244.0/22
185.146.148.0/22
194.169.252.0/24
IPv6:
2a03:1aa0::/32
Signature Algorithm: sha256WithRSAEncryption
48:f2:0d:79:22:7c:e0:f5:eb:e0:14:fb:fc:03:6a:78:5b:f6:
82:96:32:32:53:14:dd:b9:5f:1a:a9:c6:85:fd:06:69:4e:94:
cf:2c:d4:7a:b3:54:0f:e5:5b:7c:fe:89:89:74:0e:ef:52:26:
37:77:a4:96:5a:0d:b2:ca:a3:7e:a6:23:9a:04:8d:34:77:71:
39:d8:f7:4a:55:63:a1:72:0f:47:94:92:13:e0:72:84:31:b2:
b0:0c:3e:45:2a:16:e2:d3:51:97:65:fc:6a:ab:4e:11:62:eb:
30:c3:d4:c7:58:d8:95:26:cc:16:c6:8c:cc:5c:d8:72:b5:70:
e4:97:8b:11:d0:26:b7:d9:85:e4:8d:39:35:18:0e:99:f1:7d:
b8:48:1f:74:3e:ae:9c:5a:f6:5d:e2:aa:94:c2:e2:b7:09:c9:
6a:af:f9:9e:1c:42:c3:1a:62:be:f9:02:b2:11:6c:a3:b6:28:
57:c7:a8:77:1e:ca:f4:a3:b1:26:51:c8:75:93:04:0b:32:8d:
ba:b4:a2:ac:fd:4d:c7:e9:c4:64:40:6d:53:e0:8e:1b:27:d2:
91:c6:8f:03:f6:8f:5e:7b:39:a1:f4:27:f8:9f:a4:0d:39:d1:
c7:4a:06:af:43:5d:5d:c9:e4:54:35:86:30:04:f3:1e:c0:c0:
d4:41:7e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:13 2025 by rpki-client