Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7a906c-6e47-4252-9c24-b64e3c7884ca/1/wcH8JsXFhftUvQX0MQUWkm4UxaQ.roa
File: wcH8JsXFhftUvQX0MQUWkm4UxaQ.roa (raw, json)
Hash identifier: R9PJiXL1gaUY10ZkfGwLY7KqRGh84pmfj2DMqn7tBpQ=
Subject key identifier: C1:C1:FC:26:C5:C5:85:FB:54:BD:05:F4:31:05:16:92:6E:14:C5:A4
Certificate issuer: /CN=177842e619e5e31527ca0e51fceb3145f21ee914
Certificate serial: 048A6948
Authority key identifier: 17:78:42:E6:19:E5:E3:15:27:CA:0E:51:FC:EB:31:45:F2:1E:E9:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3hC5hnl4xUnyg5R_OsxRfIe6RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7a906c-6e47-4252-9c24-b64e3c7884ca/1/wcH8JsXFhftUvQX0MQUWkm4UxaQ.roa
Signing time: Sat 01 Jan 2022 02:01:59 +0000
ROA not before: Sat 01 Jan 2022 02:01:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41622
IP address blocks: 185.244.112.0/22 maxlen: 22
77.245.176.0/20 maxlen: 20
217.194.48.0/20 maxlen: 20
2a01:760::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76179784 (0x48a6948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177842e619e5e31527ca0e51fceb3145f21ee914
Validity
Not Before: Jan 1 02:01:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1c1fc26c5c585fb54bd05f4310516926e14c5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:d7:65:e6:91:53:a4:9e:ec:2c:22:ac:e8:
7a:ca:de:fb:b3:59:6d:d0:8f:6b:82:7b:9f:5c:c0:
db:1d:47:28:27:51:24:e7:6b:9c:f6:3d:9c:3a:2f:
60:7d:c1:73:ef:ae:e2:e9:e4:a4:0c:bf:68:d9:08:
86:ab:fe:37:e1:08:33:0a:52:ec:c3:55:f3:6b:4e:
a6:bf:a4:0c:ea:a4:c8:7f:8f:ac:19:45:c7:24:d6:
12:c8:cb:92:d0:0d:16:aa:b1:d5:54:fd:85:50:48:
e2:1f:3d:72:b4:94:35:f7:ff:3f:3d:8a:68:db:d1:
0f:38:c9:1b:7e:75:64:b7:eb:ee:4c:ac:c7:79:04:
bb:1b:26:97:df:26:a9:ca:b8:22:69:58:25:38:90:
ef:cd:a5:2d:97:32:7e:06:9f:2f:b0:ca:3b:c3:36:
94:0b:0c:ad:2c:1b:84:e6:aa:93:83:47:ec:6d:96:
af:77:c1:b1:3c:4a:6b:48:09:36:72:02:9c:a2:b3:
58:d7:1b:8a:10:b7:88:8a:9f:7f:59:c5:f8:c5:0f:
ab:c1:ba:d2:4a:1a:5f:c3:c7:ae:e0:d5:aa:16:95:
33:8a:3a:b6:da:b7:c3:9a:39:f5:01:32:63:2c:0c:
3d:e6:b3:de:9b:ac:37:b4:4b:36:eb:12:70:09:1a:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C1:FC:26:C5:C5:85:FB:54:BD:05:F4:31:05:16:92:6E:14:C5:A4
X509v3 Authority Key Identifier:
keyid:17:78:42:E6:19:E5:E3:15:27:CA:0E:51:FC:EB:31:45:F2:1E:E9:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3hC5hnl4xUnyg5R_OsxRfIe6RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7a906c-6e47-4252-9c24-b64e3c7884ca/1/wcH8JsXFhftUvQX0MQUWkm4UxaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7a906c-6e47-4252-9c24-b64e3c7884ca/1/F3hC5hnl4xUnyg5R_OsxRfIe6RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.176.0/20
185.244.112.0/22
217.194.48.0/20
IPv6:
2a01:760::/32
Signature Algorithm: sha256WithRSAEncryption
96:d5:a6:d6:8b:53:5a:4c:e6:6d:cb:0a:cf:8d:10:55:16:d9:
e5:66:be:ba:25:3c:6c:5a:cd:46:20:3f:db:ef:82:96:32:d4:
f7:c9:a2:ac:91:5a:db:9c:58:b8:54:fd:42:b7:53:7c:e4:2f:
15:18:a0:74:61:be:17:d6:4a:7c:22:c3:13:a8:58:86:4d:4c:
5c:1b:e3:8b:74:e2:46:68:01:72:8c:40:c1:f0:ce:f3:76:83:
cd:75:92:c0:68:c3:9a:c0:3f:53:cf:ea:2f:06:3e:c6:0c:e6:
9c:00:a0:03:46:4e:78:47:a1:f7:b7:68:cb:bb:75:8a:d2:b1:
1b:3a:92:40:df:08:10:83:ee:2b:40:c8:a2:31:ff:d5:ee:20:
7e:5b:31:0c:93:a3:f6:1b:6b:25:4f:7c:89:fa:9d:92:8d:d0:
d4:9c:36:71:1c:8d:c2:65:58:37:f3:cd:ca:e9:60:7b:74:01:
97:19:c2:d8:46:e8:45:d5:45:9f:ad:ed:56:b2:14:b8:60:90:
28:cc:91:58:6d:0b:9b:59:b3:c1:17:18:52:c1:2e:53:20:8f:
07:c0:bc:11:5a:8e:11:ea:88:69:f8:27:6d:0b:49:26:dd:e9:
c4:6c:a2:34:5e:54:4a:5d:a7:bc:0d:07:4e:92:40:30:3f:6c:
06:99:c9:b3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:39 2025 by rpki-client