Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/WWlYEA_Rg2FmgfY2ODXHOWAauFc.roa
File: WWlYEA_Rg2FmgfY2ODXHOWAauFc.roa (raw, json)
Hash identifier: X9fZSUeDQo4jhZgPjF5rGIEOyqvijrpxHeUBEDFmO/8=
Subject key identifier: 59:69:58:10:0F:D1:83:61:66:81:F6:36:38:35:C7:39:60:1A:B8:57
Certificate issuer: /CN=cc0e008fdca5f88df7dc71bbf5999b013d5fdd12
Certificate serial: 018CC56EDC127E706E9A0B903DDB3944087C
Authority key identifier: CC:0E:00:8F:DC:A5:F8:8D:F7:DC:71:BB:F5:99:9B:01:3D:5F:DD:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zA4Aj9yl-I333HG79ZmbAT1f3RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/WWlYEA_Rg2FmgfY2ODXHOWAauFc.roa
Signing time: Mon 01 Jan 2024 14:30:25 +0000
ROA not before: Mon 01 Jan 2024 14:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203744
IP address blocks: 185.125.123.0/24 maxlen: 24
185.125.122.0/24 maxlen: 24
185.125.121.0/24 maxlen: 24
185.125.120.0/22 maxlen: 22
185.125.120.0/24 maxlen: 24
2a0e:8ac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:dc:12:7e:70:6e:9a:0b:90:3d:db:39:44:08:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0e008fdca5f88df7dc71bbf5999b013d5fdd12
Validity
Not Before: Jan 1 14:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=596958100fd183616681f6363835c739601ab857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b1:54:63:7d:61:71:97:08:c5:41:18:3f:8c:
ef:d8:7d:a5:82:04:0d:f9:a1:30:95:22:29:b9:87:
2d:63:32:75:64:d9:ba:48:30:b5:87:92:b3:62:c3:
4c:b9:37:bc:32:72:07:52:23:fe:d6:f8:bd:53:57:
8b:b5:1a:0c:2f:3c:c7:08:3b:7a:09:84:ed:1e:11:
42:3c:92:99:53:ff:56:4b:26:5e:93:cb:0c:1e:65:
84:17:04:cd:f4:52:25:42:0f:97:f7:b9:56:f0:85:
9a:e1:5b:58:e5:32:94:00:e6:4e:f3:dd:bd:c4:c0:
bb:4f:6c:0c:5c:f3:49:c0:7e:6e:58:4e:6e:48:6f:
58:6b:38:81:26:95:14:b8:3d:fa:83:f6:b7:ee:c0:
75:3e:57:29:d3:e9:3b:94:16:b3:eb:07:96:81:59:
70:f6:21:ee:9f:08:3b:44:27:b4:9f:e5:98:91:46:
39:04:c7:16:e0:e9:4d:69:41:40:3b:96:af:39:6b:
7d:4b:82:df:90:48:27:ff:d6:a8:39:8b:85:4f:47:
6d:2b:7c:dc:88:c9:f0:31:08:83:25:7d:80:c6:05:
3f:e0:fe:8e:dd:83:cd:8d:32:a3:26:42:e9:e2:ad:
7c:f0:52:cd:fc:d4:51:25:f4:08:2a:b5:1d:ff:a8:
1b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:69:58:10:0F:D1:83:61:66:81:F6:36:38:35:C7:39:60:1A:B8:57
X509v3 Authority Key Identifier:
keyid:CC:0E:00:8F:DC:A5:F8:8D:F7:DC:71:BB:F5:99:9B:01:3D:5F:DD:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zA4Aj9yl-I333HG79ZmbAT1f3RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/WWlYEA_Rg2FmgfY2ODXHOWAauFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/zA4Aj9yl-I333HG79ZmbAT1f3RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.120.0/22
IPv6:
2a0e:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
b7:ff:35:ea:2d:34:19:b0:07:cd:44:4b:0b:ad:f7:da:a2:d1:
06:d8:dd:11:08:52:32:ea:01:97:20:1e:b3:ca:a7:15:1e:22:
b9:dc:74:e8:b3:ef:6f:a7:e2:6c:4f:ac:b4:aa:8a:3a:22:fd:
bf:13:d4:2e:8b:cf:0d:8e:69:ce:31:1f:17:54:20:ef:3b:4a:
a7:24:72:c4:67:05:3d:46:36:fe:81:01:23:90:c5:97:ad:8e:
23:7b:44:e2:cf:9c:ef:4b:83:55:57:c8:c5:eb:81:96:10:24:
14:a4:16:23:ba:8e:19:37:5d:36:88:d0:60:c2:30:53:f0:68:
bc:1f:d7:00:c2:c4:e1:e5:5d:2b:b3:a6:a1:52:b2:c6:dd:26:
7e:1c:b2:c1:f4:05:6b:e7:60:52:a5:2a:18:92:a4:7a:ad:10:
01:70:ee:c6:80:a2:25:07:b6:fd:b8:b1:30:a2:39:7c:76:96:
25:2f:76:0d:7c:34:f5:ea:87:59:67:73:17:94:77:8e:4c:73:
58:fc:6b:d2:d2:a0:d9:06:f9:bd:13:f0:02:8e:26:21:a6:b5:
71:44:35:ce:c5:f5:54:68:58:9d:14:bc:d1:c6:94:46:0c:c6:
1b:de:34:72:45:f3:0e:f6:29:23:ed:fe:36:77:7a:f0:81:61:
02:12:df:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:24 2024 by rpki-client on console-ams.rpki-client.org