Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/WGecvuGEcd2lai-GJuUylSe39ZE.roa
File: WGecvuGEcd2lai-GJuUylSe39ZE.roa (raw, json)
Hash identifier: IWHoYZwvGBCrtdstDb8fhiHc6sP+nprhwYpQLmj3nkI=
Subject key identifier: 58:67:9C:BE:E1:84:71:DD:A5:6A:2F:86:26:E5:32:95:27:B7:F5:91
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 0181F732CE43074CEB9E1126C253EB852BDC
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/WGecvuGEcd2lai-GJuUylSe39ZE.roa
Signing time: Wed 13 Jul 2022 10:55:10 +0000
ROA not before: Wed 13 Jul 2022 10:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399587
IP address blocks: 185.177.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:32:ce:43:07:4c:eb:9e:11:26:c2:53:eb:85:2b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jul 13 10:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58679cbee18471dda56a2f8626e5329527b7f591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:6e:ef:96:44:9d:d1:9c:f2:17:28:0c:16:
06:53:d9:c1:e9:f1:c5:ea:c1:29:84:a6:d7:b2:aa:
5e:42:07:25:16:88:25:31:db:4d:d1:38:d4:48:f1:
d8:9c:aa:56:73:bb:c4:0c:95:d5:67:6b:f0:32:16:
d4:1b:9d:df:53:79:95:96:92:ac:c9:e1:f2:79:68:
8d:00:eb:ac:27:10:69:04:a0:af:9e:7e:ac:28:32:
a4:fc:24:e6:e3:84:f5:f4:b5:50:33:7c:d5:7e:f3:
75:4d:c4:03:81:82:fc:a4:f2:ed:ff:7b:6a:84:4a:
13:20:b3:07:de:19:bf:38:65:4f:d0:2d:1d:43:08:
67:12:42:7f:93:64:99:e3:36:3f:a3:18:c9:d1:be:
11:7d:c4:cc:4e:a9:37:34:14:ce:ee:68:92:02:6c:
a4:17:5f:72:2e:43:ce:c3:96:a7:f3:a3:ad:bb:3a:
f0:db:5c:6f:86:11:7c:9c:ab:dc:03:8f:40:df:9b:
e0:d4:e3:fd:5c:ab:20:61:d7:2b:61:d6:ae:ea:ff:
97:0f:b7:54:a2:0b:23:3f:0b:23:cf:64:a6:c6:74:
fe:1e:5f:cd:5f:31:0c:28:10:86:38:de:80:1a:1c:
ba:00:ea:a7:05:e7:0a:b4:82:27:90:0e:cc:2c:80:
01:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:67:9C:BE:E1:84:71:DD:A5:6A:2F:86:26:E5:32:95:27:B7:F5:91
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/WGecvuGEcd2lai-GJuUylSe39ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.78.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:22:0a:d0:df:8a:67:17:9a:e8:0a:98:61:1a:cf:d3:56:28:
39:d9:3b:68:10:ef:75:f0:f0:ea:51:b4:ba:20:8a:d2:6b:ad:
d0:ba:50:9f:3a:0e:72:57:ac:ae:5a:dc:4c:35:0f:06:bb:08:
63:a4:64:e1:39:d3:7e:5e:ad:d2:f8:f9:4e:e8:96:90:18:99:
4d:db:b8:b0:e0:51:1e:40:06:f8:63:02:dc:70:c7:00:b1:9f:
32:9c:35:fa:12:ab:7b:db:a0:be:8b:6f:f6:21:b5:96:d2:f7:
1c:9e:f7:a8:2c:9c:6b:35:8e:94:c2:41:81:a9:11:d4:b6:78:
76:76:17:08:f3:6f:65:b9:10:34:f7:76:f1:5f:67:fe:aa:ca:
69:03:20:4c:ba:2c:fc:34:0a:ee:a2:34:6c:e2:78:f6:85:46:
de:ba:32:5d:d2:40:98:7a:c5:fa:10:6e:19:fe:2b:1e:d0:80:
05:06:cb:72:45:ae:62:09:4a:a2:83:a3:01:93:14:b6:6e:d0:
76:d2:46:05:bd:a4:fc:40:17:3d:5c:3f:de:1c:d6:97:01:76:
b9:9f:ad:dd:6b:96:9b:45:b8:8c:b2:27:d1:b4:7d:04:f4:c2:
40:2a:69:92:97:9b:1e:25:f9:60:f4:69:dc:a0:c3:23:41:bc:
0c:45:ab:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:19 2025 by rpki-client