Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e0f3db-47f5-4907-b4ae-3b0b32248e5e/1/W3k_gU6iB3xlR53egHjY8cXeaiU.roa
File: W3k_gU6iB3xlR53egHjY8cXeaiU.roa (raw, json)
Hash identifier: +++2S7xwQSu/wqyFiv4psE2dygmdrfGDHtwzS+xWho8=
Subject key identifier: 5B:79:3F:81:4E:A2:07:7C:65:47:9D:DE:80:78:D8:F1:C5:DE:6A:25
Certificate issuer: /CN=4a751782fa4cd1425443d1efa12d6676213f44ec
Certificate serial: 018570397189B638CABDDCC4001FF85A99A0
Authority key identifier: 4A:75:17:82:FA:4C:D1:42:54:43:D1:EF:A1:2D:66:76:21:3F:44:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnUXgvpM0UJUQ9HvoS1mdiE_ROw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e0f3db-47f5-4907-b4ae-3b0b32248e5e/1/W3k_gU6iB3xlR53egHjY8cXeaiU.roa
Signing time: Mon 02 Jan 2023 02:04:50 +0000
ROA not before: Mon 02 Jan 2023 02:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200097
IP address blocks: 185.37.101.0/24 maxlen: 24
185.37.102.0/24 maxlen: 24
185.37.103.0/24 maxlen: 24
185.37.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:71:89:b6:38:ca:bd:dc:c4:00:1f:f8:5a:99:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a751782fa4cd1425443d1efa12d6676213f44ec
Validity
Not Before: Jan 2 02:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b793f814ea2077c65479dde8078d8f1c5de6a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:48:af:3e:95:e4:95:3f:12:fc:66:4d:b6:
e6:b6:04:72:c0:6b:92:4d:67:ef:ad:3d:24:4f:d5:
a7:8f:ad:51:d1:1d:e8:23:a9:04:06:f5:29:a5:2f:
6e:e6:f6:a0:6e:8b:05:5a:79:ef:de:a6:55:14:62:
e9:4f:e7:c8:ce:1f:4a:5c:8a:7c:b7:76:f9:4d:ed:
94:7a:3b:9c:b5:ae:63:af:49:a6:00:0e:bc:61:9a:
2e:8a:08:4c:e5:fd:40:9e:00:e0:c5:07:e7:79:58:
aa:bd:b2:49:52:fd:db:69:1e:f0:cc:9c:32:ad:cf:
6f:99:30:35:fa:64:b5:ab:3a:fe:38:dd:f6:ae:af:
62:74:2f:6e:90:9b:04:2a:76:12:55:86:50:a1:8c:
5d:97:cf:9a:e2:b7:29:29:80:5f:e2:a5:ce:df:53:
98:e2:10:90:9b:f0:44:ad:cf:45:57:42:8e:7b:58:
27:37:ec:fb:7d:4c:69:bd:70:d1:b2:71:88:4b:a4:
9d:96:94:65:fd:11:32:82:db:d1:ec:e7:f9:61:22:
b3:dc:ea:a4:5f:9e:83:dd:2f:35:ae:e4:9c:9c:ed:
5e:b5:ef:83:a5:9e:cc:f0:0a:7f:c9:fb:a3:30:12:
4c:df:03:4c:55:52:2e:5d:25:df:6d:31:99:47:4f:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:79:3F:81:4E:A2:07:7C:65:47:9D:DE:80:78:D8:F1:C5:DE:6A:25
X509v3 Authority Key Identifier:
keyid:4A:75:17:82:FA:4C:D1:42:54:43:D1:EF:A1:2D:66:76:21:3F:44:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnUXgvpM0UJUQ9HvoS1mdiE_ROw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e0f3db-47f5-4907-b4ae-3b0b32248e5e/1/W3k_gU6iB3xlR53egHjY8cXeaiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e0f3db-47f5-4907-b4ae-3b0b32248e5e/1/SnUXgvpM0UJUQ9HvoS1mdiE_ROw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.100.0/22
Signature Algorithm: sha256WithRSAEncryption
14:94:7d:5a:b7:e7:5a:2f:22:b9:9a:3c:9d:14:ff:fe:3f:08:
1a:82:90:74:2d:e8:6e:47:e8:05:4f:d3:7e:d4:43:13:84:cc:
c3:e8:61:2a:16:5f:80:a4:ba:05:b4:1a:bb:69:ae:13:de:f5:
f3:5b:68:7a:00:67:84:8b:d5:7c:89:8d:88:a7:c7:8a:cd:23:
fd:a3:88:28:e7:d6:33:c6:d3:6d:06:a4:be:52:5f:b8:15:18:
8e:39:83:14:97:9b:89:f1:9c:59:9b:51:e8:42:33:99:97:11:
a5:30:b6:70:e7:e5:8a:6e:a4:97:f5:1b:6e:ab:b6:6e:9e:74:
1d:b6:56:dc:c6:a4:90:8e:c0:9c:67:91:13:74:86:31:6a:40:
29:3c:23:aa:1e:c7:95:1b:41:ff:40:e8:9d:76:2f:69:5e:ba:
0e:20:69:19:ef:59:4b:5a:df:dc:a3:01:5e:49:26:30:9c:ae:
70:2a:57:39:51:48:5c:a0:48:e5:9d:3c:55:b0:43:6f:f9:7d:
eb:f1:9e:79:aa:23:93:ac:e8:3c:83:f3:cc:be:6a:fb:ad:8f:
c2:ed:37:e2:8c:d0:45:ed:97:ff:91:01:c7:2a:8c:ff:a8:07:
e5:2e:d6:70:e5:a1:82:cb:9f:5c:e1:10:b4:89:f7:92:81:1c:
99:19:b2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:01 2025 by rpki-client