Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d13eb2-46fd-416a-b661-9f9374fcdb06/1/WFg-HXIDmEmCxtSBgXkImxAjaag.roa
File: WFg-HXIDmEmCxtSBgXkImxAjaag.roa (raw, json)
Hash identifier: q6AS5XADPn8wZ/ezW7AL9zMi0aPNEwEOj9wD7igeErM=
Subject key identifier: 58:58:3E:1D:72:03:98:49:82:C6:D4:81:81:79:08:9B:10:23:69:A8
Certificate issuer: /CN=7b57e4599f2fb11f40ea85a8cc568d8a70f427ba
Certificate serial: 197723D4
Authority key identifier: 7B:57:E4:59:9F:2F:B1:1F:40:EA:85:A8:CC:56:8D:8A:70:F4:27:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1fkWZ8vsR9A6oWozFaNinD0J7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d13eb2-46fd-416a-b661-9f9374fcdb06/1/WFg-HXIDmEmCxtSBgXkImxAjaag.roa
Signing time: Sat 01 Jan 2022 01:02:00 +0000
ROA not before: Sat 01 Jan 2022 01:02:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13272
IP address blocks: 85.253.0.0/16 maxlen: 22
82.131.0.0/17 maxlen: 19
185.125.136.0/22 maxlen: 22
62.65.192.0/18 maxlen: 22
2001:1bf0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427238356 (0x197723d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b57e4599f2fb11f40ea85a8cc568d8a70f427ba
Validity
Not Before: Jan 1 01:02:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58583e1d7203984982c6d4818179089b102369a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:e8:8a:7d:da:12:51:6e:4e:27:86:d6:cd:
75:c7:4e:ad:92:63:ed:7a:75:56:1d:5d:c1:92:87:
ba:97:38:a0:d8:6e:31:40:7b:ab:7e:c5:c6:ab:fa:
48:2c:37:22:95:58:6d:ed:d8:5c:76:85:43:92:eb:
f4:b6:86:04:cd:c1:89:9e:48:c4:85:4d:22:33:26:
d3:ee:38:44:e9:36:95:a9:67:50:44:a0:47:74:99:
a9:88:32:70:d3:2a:d2:47:17:cb:1b:02:7d:7c:ce:
52:38:7b:c7:ac:7d:0a:3e:ed:8b:aa:b5:f1:62:f2:
45:d5:87:88:ee:2d:e7:79:8c:14:f2:5c:03:ba:c3:
17:96:19:5b:fb:b0:7d:26:5d:6b:2d:c9:4f:61:ec:
f9:8a:9f:81:ed:05:a3:25:23:17:d5:f4:2d:f3:6b:
c1:2d:bd:7a:40:d6:2d:a2:5f:69:d9:36:eb:30:b5:
e8:04:f7:52:9b:00:05:ab:00:7c:24:3c:9f:07:9b:
ef:d7:bb:b8:d9:e6:aa:d7:66:cd:5f:4a:83:81:8b:
5f:06:b2:ac:e5:55:f3:79:c0:78:00:1d:c4:3a:30:
d3:b4:8c:ea:0d:3b:42:c6:3b:27:09:93:3d:55:4c:
73:ee:5c:a4:8d:c0:85:d1:3f:b2:ab:a7:a5:64:60:
dd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:58:3E:1D:72:03:98:49:82:C6:D4:81:81:79:08:9B:10:23:69:A8
X509v3 Authority Key Identifier:
keyid:7B:57:E4:59:9F:2F:B1:1F:40:EA:85:A8:CC:56:8D:8A:70:F4:27:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1fkWZ8vsR9A6oWozFaNinD0J7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d13eb2-46fd-416a-b661-9f9374fcdb06/1/WFg-HXIDmEmCxtSBgXkImxAjaag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d13eb2-46fd-416a-b661-9f9374fcdb06/1/e1fkWZ8vsR9A6oWozFaNinD0J7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.192.0/18
82.131.0.0/17
85.253.0.0/16
185.125.136.0/22
IPv6:
2001:1bf0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:59:8f:de:bf:d9:60:44:be:cb:b4:a7:19:e6:c8:3d:a2:39:
39:67:f7:e9:5d:4c:87:4b:60:48:5b:cb:d1:ef:9f:61:0a:7d:
87:2d:ee:f3:54:17:62:ee:89:19:d7:c4:45:92:79:fe:d9:92:
91:6b:a5:d4:5a:54:cb:02:4e:48:74:8a:f4:10:10:fc:73:14:
0d:b9:88:30:61:e6:f3:bc:e3:3a:af:6b:bb:73:cd:4a:fd:05:
97:5f:cc:42:5e:62:07:eb:10:fd:e3:62:39:d3:08:4a:32:46:
b1:7c:6c:aa:8c:9c:f5:0d:63:94:fd:3d:d5:65:63:1b:4c:1d:
ca:1e:01:12:a9:ea:3e:d7:1d:69:60:a8:4b:ac:eb:26:0d:d9:
5e:fb:63:fe:9b:22:19:26:d7:9a:29:38:65:b9:5d:9b:55:e0:
89:ba:36:f6:26:56:b7:c1:6c:86:0f:1a:6b:21:a3:8e:bc:22:
92:a4:07:e5:06:27:bd:af:76:09:69:0f:90:17:d6:49:93:90:
e8:b1:08:8d:c8:0f:7c:84:d7:fa:d9:7e:21:67:c7:ad:bf:29:
51:f2:a5:9d:f3:c5:19:e2:32:1b:db:e4:03:bd:7c:15:b1:d6:
7a:f7:e1:fb:1e:df:2b:19:b2:a2:48:10:b4:d5:ca:45:c8:2b:
5b:c4:4a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:03 2024 by rpki-client on console-fra.rpki-client.org