Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/W3mTTwPUHnb1WjPPzHLdzlBerQo.roa
File: W3mTTwPUHnb1WjPPzHLdzlBerQo.roa (raw, json)
Hash identifier: T26A2kPbK7TyO14m3AXVIVMWcm0ICq3ZdycYTw5luqE=
Subject key identifier: 5B:79:93:4F:03:D4:1E:76:F5:5A:33:CF:CC:72:DD:CE:50:5E:AD:0A
Certificate issuer: /CN=ffd8609ce7a8c3c128908fc45f3e6d9b67260e4e
Certificate serial: 09E12D00
Authority key identifier: FF:D8:60:9C:E7:A8:C3:C1:28:90:8F:C4:5F:3E:6D:9B:67:26:0E:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9hgnOeow8EokI_EXz5tm2cmDk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/W3mTTwPUHnb1WjPPzHLdzlBerQo.roa
Signing time: Sat 01 Jan 2022 04:58:31 +0000
ROA not before: Sat 01 Jan 2022 04:58:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34177
IP address blocks: 195.200.160.0/19 maxlen: 19
185.132.116.0/22 maxlen: 22
185.18.208.0/22 maxlen: 22
185.213.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165752064 (0x9e12d00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd8609ce7a8c3c128908fc45f3e6d9b67260e4e
Validity
Not Before: Jan 1 04:58:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b79934f03d41e76f55a33cfcc72ddce505ead0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:29:9f:24:44:cb:36:2f:17:99:b0:f6:00:
45:13:45:c3:87:66:40:65:c4:29:43:dd:de:39:59:
7f:3d:2c:7e:ac:bb:03:b5:b3:21:40:9f:08:99:c5:
48:54:68:66:f4:c3:8a:9d:72:15:9c:ad:a0:1d:d0:
31:b7:11:19:ce:94:42:58:7e:f5:2c:31:b0:62:f4:
b3:4c:1b:c0:34:82:ca:e2:28:96:30:ea:f4:1c:30:
5b:a7:9a:fe:88:ed:5e:c1:8e:9d:62:9c:75:d2:15:
f1:a1:16:00:c3:f4:0d:9e:fb:10:3b:fd:65:40:f5:
5b:00:5d:c6:7e:92:43:bf:b8:5c:ef:4f:7c:e7:2c:
e0:5e:aa:b1:d3:ca:80:dc:c4:79:75:18:00:c4:e0:
92:9f:a7:38:ea:66:b1:c3:36:c4:1f:75:f0:16:c6:
3c:b9:44:c4:83:3c:92:75:a9:fe:97:c5:37:50:4b:
a6:38:26:e4:2f:fc:9e:51:ce:67:bf:a7:c5:49:cc:
d8:f6:ba:4a:f9:8d:e3:2c:14:bf:8b:03:37:28:b0:
1c:64:5d:41:2f:55:36:10:63:19:cd:61:a4:a3:37:
84:d7:c6:bb:56:4a:49:3d:d6:68:7f:76:d8:ea:28:
63:12:67:87:1e:d1:76:a2:af:ce:c8:e2:88:08:5e:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:79:93:4F:03:D4:1E:76:F5:5A:33:CF:CC:72:DD:CE:50:5E:AD:0A
X509v3 Authority Key Identifier:
keyid:FF:D8:60:9C:E7:A8:C3:C1:28:90:8F:C4:5F:3E:6D:9B:67:26:0E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9hgnOeow8EokI_EXz5tm2cmDk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/W3mTTwPUHnb1WjPPzHLdzlBerQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/_9hgnOeow8EokI_EXz5tm2cmDk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.208.0/22
185.132.116.0/22
185.213.160.0/22
195.200.160.0/19
Signature Algorithm: sha256WithRSAEncryption
39:33:cf:20:c7:98:fe:f8:ad:9b:05:2c:3a:cc:17:b8:c6:6d:
7a:b3:80:46:64:1f:d4:13:2b:95:bf:7c:90:6e:76:9f:11:e7:
bc:10:a0:32:65:75:ae:46:03:6d:5b:ea:c1:e3:13:5b:9c:29:
15:fc:1d:85:b5:d0:02:ac:df:1e:24:d9:f5:c9:73:c2:f5:3e:
ca:76:ed:14:d7:8b:88:56:b6:0e:46:1c:45:94:55:4f:08:ef:
b0:63:ec:d6:fc:2b:64:ab:6f:6b:6b:36:3c:9d:6c:4a:61:59:
dd:69:59:42:c7:e2:5a:8d:eb:74:44:2b:dc:47:07:39:e5:a8:
e6:c6:2d:b6:e6:dd:15:d6:ad:aa:11:0d:45:a5:1a:dc:54:60:
1a:1c:ba:43:58:98:6b:7c:8b:59:55:0f:78:34:63:27:a4:28:
a9:0b:d6:5f:0c:d5:90:c4:14:a0:02:83:70:20:21:c2:c6:70:
3c:d1:cf:26:2f:01:55:01:11:3d:ec:9a:20:d5:0a:b1:b2:43:
37:b6:e1:f2:16:a6:38:1e:cd:16:a2:13:f1:d1:22:a6:1f:21:
f1:49:29:8b:b9:2d:b1:07:24:34:fd:81:ea:04:31:ad:2d:6e:
66:13:d1:5f:72:30:7a:76:a2:32:27:d9:17:94:33:ae:0e:7a:
ae:1b:38:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:28 2024 by rpki-client on console-ams.rpki-client.org