Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/WjJZaL5GKlPZUkcZdvbg_xgFsrg.roa
File: WjJZaL5GKlPZUkcZdvbg_xgFsrg.roa (raw, json)
Hash identifier: qAh0S6quSY7SvDHzaA1YDdCLUJzf6vPHBq95c3834Zk=
Subject key identifier: 5A:32:59:68:BE:46:2A:53:D9:52:47:19:76:F6:E0:FF:18:05:B2:B8
Certificate issuer: /CN=9b2f900c943f5856add0a0ec69d9e86f005da6f3
Certificate serial: 679F29
Authority key identifier: 9B:2F:90:0C:94:3F:58:56:AD:D0:A0:EC:69:D9:E8:6F:00:5D:A6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my-QDJQ_WFat0KDsadnobwBdpvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/WjJZaL5GKlPZUkcZdvbg_xgFsrg.roa
Signing time: Sat 02 Jul 2022 13:52:25 +0000
ROA not before: Sat 02 Jul 2022 13:52:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39767
IP address blocks: 78.158.72.0/21 maxlen: 22
78.158.80.0/20 maxlen: 21
185.90.140.0/22 maxlen: 22
2a05:e200::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6790953 (0x679f29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2f900c943f5856add0a0ec69d9e86f005da6f3
Validity
Not Before: Jul 2 13:52:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a325968be462a53d952471976f6e0ff1805b2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:71:9c:34:83:81:d6:f1:41:43:d5:34:cf:
91:91:7a:b8:1e:d2:37:68:22:6b:42:ea:8a:79:f1:
a7:f9:b9:22:f6:97:af:8d:cd:b9:81:fb:65:57:37:
af:f6:1a:bf:38:5f:ce:a6:01:db:66:56:85:d7:86:
af:c8:e6:e2:4c:14:aa:47:8d:86:0c:54:6a:cc:5e:
fc:f1:2a:7a:79:7e:63:ce:75:ad:75:4c:51:06:22:
c0:10:e8:dd:95:16:e4:cf:62:4f:a1:4c:27:55:83:
85:3e:c2:0d:ce:96:88:00:d7:23:74:76:25:87:21:
62:61:8b:f7:2e:df:2d:7b:07:a9:c9:c3:bd:22:a5:
45:71:9a:12:4c:77:0a:25:1b:e0:00:66:ea:c4:ed:
06:ba:03:d5:bf:0e:5c:33:91:25:7d:44:57:70:ae:
ea:82:51:fa:d8:4a:e4:09:b8:d8:bd:6b:9c:48:ce:
53:c8:e9:2f:39:e5:64:c4:bc:2a:63:b9:bf:b8:6e:
e8:80:94:b1:07:83:c9:ac:64:e6:70:67:f2:5c:6c:
94:0a:56:92:6d:e4:e1:e0:cb:4a:b7:df:ba:6d:3a:
5f:da:d0:e2:b9:d1:e1:19:64:d1:60:9b:86:67:cd:
67:a3:8e:9f:17:1d:80:3b:b9:ae:fa:91:8f:0e:06:
bb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:32:59:68:BE:46:2A:53:D9:52:47:19:76:F6:E0:FF:18:05:B2:B8
X509v3 Authority Key Identifier:
keyid:9B:2F:90:0C:94:3F:58:56:AD:D0:A0:EC:69:D9:E8:6F:00:5D:A6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my-QDJQ_WFat0KDsadnobwBdpvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/WjJZaL5GKlPZUkcZdvbg_xgFsrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/my-QDJQ_WFat0KDsadnobwBdpvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.158.72.0-78.158.95.255
185.90.140.0/22
IPv6:
2a05:e200::/29
Signature Algorithm: sha256WithRSAEncryption
25:a6:2e:41:2f:bc:07:93:a6:b7:32:1a:15:2f:5e:3b:bb:3f:
38:c8:6e:f4:fd:17:af:f2:4d:f5:aa:23:0e:75:22:e7:c9:df:
5d:7e:f3:fe:66:38:d4:b6:85:40:81:92:74:43:ae:45:81:f2:
c8:b9:97:84:0f:8e:62:d0:52:fa:16:8f:78:51:8f:ad:56:99:
88:f4:15:c5:05:d7:8c:15:d5:9b:b2:09:c4:5b:c9:45:70:94:
5b:f5:a2:48:b6:46:9e:ad:d4:f4:29:9a:0c:13:55:37:df:93:
c6:28:91:a8:c3:ef:4a:55:7c:1d:74:1d:72:15:b1:62:22:26:
1b:76:7d:15:5e:0d:14:34:d6:56:02:68:46:39:61:ac:a0:2e:
41:85:4a:b5:35:26:65:60:8e:53:a4:9c:4b:6e:7e:c7:55:f2:
07:11:f7:e1:f3:60:1d:c5:c1:53:94:96:21:1c:2d:45:29:87:
56:f5:4a:8c:5b:ef:3f:de:cb:02:aa:18:b5:4e:74:f0:b6:51:
37:58:15:6d:c8:6a:73:3c:76:24:72:8a:7a:c5:ca:2f:16:3e:
b2:f5:2c:4c:14:c6:4a:0f:fd:0d:57:1c:1c:eb:33:2b:70:6e:
e9:57:5e:0f:4e:10:1e:d0:f3:0b:d5:3b:6f:a5:d7:29:8e:9c:
d1:cd:8b:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:15 2025 by rpki-client