Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/WW00EN3MrsTzqtLNcacZPoJnrh0.roa
File: WW00EN3MrsTzqtLNcacZPoJnrh0.roa (raw, json)
Hash identifier: j+ELBwy24bd0McE+tNDFFzjcwNY6uxzFX9utCzZ+kV4=
Subject key identifier: 59:6D:34:10:DD:CC:AE:C4:F3:AA:D2:CD:71:A7:19:3E:82:67:AE:1D
Certificate issuer: /CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
Certificate serial: 019427B52872C7FAC82F1DDFFA135BDC74AB
Authority key identifier: 2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/WW00EN3MrsTzqtLNcacZPoJnrh0.roa
Signing time: Thu 02 Jan 2025 15:49:31 +0000
ROA not before: Thu 02 Jan 2025 15:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200509
IP address blocks: 185.66.56.0/22 maxlen: 22
185.66.57.0/24 maxlen: 24
185.66.58.0/24 maxlen: 24
185.66.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:28:72:c7:fa:c8:2f:1d:df:fa:13:5b:dc:74:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
Validity
Not Before: Jan 2 15:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=596d3410ddccaec4f3aad2cd71a7193e8267ae1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:41:e2:f2:12:f5:35:ac:91:e0:9f:27:32:
c0:57:ec:56:99:2d:a4:f8:36:52:97:35:3a:0b:a5:
7a:75:0e:49:70:7d:ec:a8:1b:2b:86:df:bb:b6:d9:
46:e0:71:76:e7:e5:0f:c2:90:9a:fc:18:5d:b0:33:
fb:68:38:ed:c9:3a:c0:02:db:99:09:dd:96:0b:f3:
6a:15:63:85:83:65:71:54:ff:a9:c1:d8:8d:b3:01:
b5:25:2e:42:94:e3:6d:c8:78:0e:59:d5:fd:7a:4d:
47:07:a0:d2:69:b9:37:7d:27:70:00:b7:66:87:6c:
38:ac:97:a5:7d:6a:73:92:dd:d4:fa:70:63:54:98:
86:ea:7b:9e:83:d5:10:84:a5:a7:70:62:ea:a8:6d:
76:28:07:f7:da:b1:2d:ec:53:0e:ab:ba:15:61:46:
3c:52:92:2b:7c:86:7b:48:56:c0:c6:33:d3:50:51:
59:30:e9:46:ef:55:75:8a:54:32:a5:8c:0b:10:bb:
c5:78:31:c6:53:fe:bb:ec:09:9a:0d:5d:b4:f8:58:
a3:b4:00:2e:21:98:be:6d:09:8c:23:ba:e4:74:d1:
5c:a6:de:fb:9d:b9:e9:37:0d:24:6a:47:6a:8e:8b:
45:09:35:06:4e:79:08:52:a1:4c:0d:c4:45:6e:36:
5e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6D:34:10:DD:CC:AE:C4:F3:AA:D2:CD:71:A7:19:3E:82:67:AE:1D
X509v3 Authority Key Identifier:
keyid:2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/WW00EN3MrsTzqtLNcacZPoJnrh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.56.0/22
Signature Algorithm: sha256WithRSAEncryption
22:aa:f3:b5:ba:41:7d:95:bc:2e:b3:0a:67:c1:1a:ec:c4:c2:
0c:dd:a6:00:01:93:14:d5:9f:95:43:99:ba:4e:6c:ff:75:6f:
5b:c1:b4:77:f4:06:29:b0:17:72:ec:3e:b7:17:3e:27:b8:6f:
e5:03:db:2d:1d:1d:87:3f:27:8f:fc:9c:04:fd:e3:96:81:30:
5d:57:10:9b:d9:65:11:a7:c9:5e:c7:cd:e8:93:1e:73:e4:99:
34:a5:c4:6f:98:19:14:dd:c0:84:80:3d:3f:c1:97:b1:f1:54:
8f:ad:d6:bc:d1:6f:86:58:4f:e6:d5:11:0f:6f:30:08:97:02:
d3:d4:bc:e7:dc:62:ff:56:5f:6d:05:f7:69:77:29:1a:1d:c9:
61:c2:91:70:f3:08:35:44:95:58:47:bc:5e:a4:fc:99:bd:a2:
42:c6:1d:02:93:4e:ca:d3:3e:c0:c0:d8:aa:09:d1:18:fb:20:
30:d3:29:39:63:26:cf:b6:e6:50:54:cf:68:d7:ef:71:c3:5c:
5e:94:86:db:bb:20:5b:d6:b7:88:82:a3:af:ca:69:ac:ff:fd:
7f:38:b8:1d:99:7f:83:b0:be:98:20:6b:e7:5e:46:3f:22:ec:
95:1d:f1:58:28:c8:f0:1b:e3:8b:d6:88:dd:70:08:89:69:96:
0a:a0:58:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:36 2025 by rpki-client