Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/WrTNz4wzu4zJMnsPsgr4T8astQU.roa
File: WrTNz4wzu4zJMnsPsgr4T8astQU.roa (raw, json)
Hash identifier: 26o1JsOV3YUOwtZkaOLu6g0GGe7VRqMZUwBzPOqH9VE=
Subject key identifier: 5A:B4:CD:CF:8C:33:BB:8C:C9:32:7B:0F:B2:0A:F8:4F:C6:AC:B5:05
Certificate issuer: /CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
Certificate serial: 073DA719
Authority key identifier: 5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/WrTNz4wzu4zJMnsPsgr4T8astQU.roa
Signing time: Fri 21 Jan 2022 13:19:22 +0000
ROA not before: Fri 21 Jan 2022 13:19:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212144
IP address blocks: 2a05:9a40::/29 maxlen: 29
2a10:3c80::/29 maxlen: 29
2a06:5fc0::/29 maxlen: 29
2a10:3f80::/29 maxlen: 29
2a0f:9ac0::/29 maxlen: 29
2a10:b40::/29 maxlen: 29
2a0d:6f80::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121480985 (0x73da719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
Validity
Not Before: Jan 21 13:19:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ab4cdcf8c33bb8cc9327b0fb20af84fc6acb505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:f5:82:52:ce:a6:42:0b:dd:f8:ca:18:6c:
f3:1d:a9:42:5f:b9:72:da:53:24:c6:16:cc:9f:22:
71:8e:78:b4:86:68:1a:60:c1:17:a6:a5:57:c9:d2:
40:6b:88:7b:28:b2:4f:2a:fc:47:2c:74:e6:f8:11:
91:41:aa:2f:1c:34:89:d5:a5:20:3d:fe:21:0f:8f:
12:c0:88:ac:66:d5:2f:b4:5f:c7:7a:56:cc:34:da:
b4:37:fa:0b:8b:f7:fe:56:0b:99:85:29:b3:57:67:
bf:47:10:14:46:c7:cf:00:df:4f:b9:8a:25:ea:d0:
97:ca:c1:ad:b0:b1:4c:2d:23:2c:35:9b:2a:68:99:
aa:48:c1:73:7d:3c:5a:00:d4:51:42:d2:a1:bb:00:
a3:7a:9a:60:4f:ef:c2:99:d2:d9:c1:44:9b:83:5a:
76:a4:b4:a1:20:61:e4:48:b4:4f:0b:c7:a3:82:b4:
b7:48:75:71:35:39:62:24:b8:7a:d0:9a:28:52:a5:
57:9c:98:f3:6e:af:01:50:e7:04:68:4f:1c:cb:22:
0b:47:39:65:70:ff:6b:1b:ad:90:bf:81:fa:75:26:
15:17:f0:c8:3c:cb:14:d6:48:c3:20:a4:c7:bf:91:
80:e9:f9:18:07:65:f6:8f:c7:e4:54:cb:e6:54:64:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B4:CD:CF:8C:33:BB:8C:C9:32:7B:0F:B2:0A:F8:4F:C6:AC:B5:05
X509v3 Authority Key Identifier:
keyid:5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/WrTNz4wzu4zJMnsPsgr4T8astQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/W2Ya3L9pYu7sglxtTem0SfAuhB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a40::/29
2a06:5fc0::/29
2a0d:6f80::/29
2a0f:9ac0::/29
2a0f:9b40::/29
2a10:b40::/29
2a10:3c80::/29
2a10:3f80::/29
2a10:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:dc:b9:8d:02:bb:19:d8:61:33:40:f1:3b:b0:ae:2a:79:42:
37:5b:3c:26:2d:12:41:46:d8:2c:77:76:61:db:1c:5a:ba:e4:
bd:68:8e:8a:d0:d5:bc:b1:94:10:af:28:8e:79:05:0e:e8:89:
32:03:3c:10:46:2f:67:c9:ba:4a:e6:7d:8f:32:72:10:cc:f0:
d2:ea:22:71:5c:54:68:13:1a:5d:26:20:a3:03:24:fa:3b:43:
33:4e:60:f3:9e:0a:0f:38:eb:47:35:83:7c:e3:e3:7f:58:91:
43:fd:93:32:56:0e:2c:e4:77:3d:26:32:f5:5e:b5:43:d2:52:
6f:31:c1:bf:2e:a4:18:1c:29:b0:34:0d:6a:e5:d4:18:16:d3:
ac:6b:4a:73:af:16:33:80:2b:b1:9a:7c:55:30:8e:f2:63:ca:
ef:ae:6b:11:d9:9b:5a:95:22:52:2d:e3:f3:b5:a2:03:2d:d6:
76:c2:0c:ce:4c:70:be:cb:04:be:0b:cb:2a:fc:7d:66:fe:b6:
21:ac:b6:19:13:a8:5c:3f:1d:56:df:6b:5b:6c:0e:43:1b:ec:
e3:0c:56:3a:e5:a7:fc:60:1e:73:57:8e:b3:b7:24:0d:50:2d:
b3:e2:7c:ad:71:01:b3:43:2d:04:83:26:40:78:a4:49:ed:5c:
34:3c:19:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:46 2024 by rpki-client on console-fra.rpki-client.org