Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/W2WyD3Yc3Bxi0_IWLcMCDemUhUM.roa
File: W2WyD3Yc3Bxi0_IWLcMCDemUhUM.roa (raw, json)
Hash identifier: 1WJnqEPzl9QbM/x5dNFIycMamNWBF19M1omQlk6hZSQ=
Subject key identifier: 5B:65:B2:0F:76:1C:DC:1C:62:D3:F2:16:2D:C3:02:0D:E9:94:85:43
Certificate issuer: /CN=77d01100407f553f0fb131be72b32e4981237efc
Certificate serial: 0587F5A4
Authority key identifier: 77:D0:11:00:40:7F:55:3F:0F:B1:31:BE:72:B3:2E:49:81:23:7E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9ARAEB_VT8PsTG-crMuSYEjfvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/W2WyD3Yc3Bxi0_IWLcMCDemUhUM.roa
Signing time: Sat 01 Jan 2022 08:54:29 +0000
ROA not before: Sat 01 Jan 2022 08:54:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48655
IP address blocks: 185.226.208.0/22 maxlen: 22
185.224.208.0/22 maxlen: 22
185.226.156.0/22 maxlen: 22
2a0c:6200::/29 maxlen: 29
2a0c:6200::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92796324 (0x587f5a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d01100407f553f0fb131be72b32e4981237efc
Validity
Not Before: Jan 1 08:54:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b65b20f761cdc1c62d3f2162dc3020de9948543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dc:f8:dd:7a:27:66:9c:8c:35:0a:6c:1a:16:
60:af:e0:2b:fc:15:34:cf:7d:f9:40:aa:2e:7b:81:
99:c5:ee:fe:87:d7:4b:41:f6:b9:2c:0d:1c:01:6f:
a4:4b:86:bc:10:94:df:81:48:ce:ea:f4:5e:86:22:
38:61:1b:fc:c7:2d:13:16:0d:5a:81:a9:89:f2:25:
d5:43:8b:97:91:ec:05:4c:8c:a2:0c:20:74:36:29:
5f:05:2e:10:1e:51:5f:c8:55:26:dc:16:69:9f:3d:
38:55:a1:83:c7:71:ba:0f:71:ca:40:4e:b8:2a:87:
a5:5d:8c:c1:c4:20:56:45:ca:da:17:28:d8:2f:fe:
68:d7:c9:00:55:f0:f8:13:11:e1:06:5b:2b:59:2a:
a7:4a:74:c0:b0:4a:37:73:ff:ca:b6:1f:3f:4b:90:
be:8f:44:40:78:f6:e6:75:43:7f:de:d8:18:af:c4:
fe:90:b0:e0:3b:63:88:05:86:6c:d1:f2:14:d8:3a:
f5:1b:ed:22:cf:e4:a8:81:e0:bc:1c:da:55:bb:93:
4a:0a:2a:21:01:d1:10:b3:cc:9d:14:0f:30:ce:fb:
b6:37:63:75:1a:0b:29:5c:c4:91:55:03:8a:78:1f:
8e:03:ac:7b:84:8e:fa:e8:fc:75:ce:fb:af:d0:94:
c3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:65:B2:0F:76:1C:DC:1C:62:D3:F2:16:2D:C3:02:0D:E9:94:85:43
X509v3 Authority Key Identifier:
keyid:77:D0:11:00:40:7F:55:3F:0F:B1:31:BE:72:B3:2E:49:81:23:7E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9ARAEB_VT8PsTG-crMuSYEjfvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/W2WyD3Yc3Bxi0_IWLcMCDemUhUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/d9ARAEB_VT8PsTG-crMuSYEjfvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.208.0/22
185.226.156.0/22
185.226.208.0/22
IPv6:
2a0c:6200::/29
Signature Algorithm: sha256WithRSAEncryption
0d:86:99:67:22:ae:7d:f4:17:9d:f8:38:f9:8d:07:f4:4a:ad:
cb:96:14:0f:38:ec:c4:c9:bc:41:fb:4e:20:98:02:a8:05:6d:
00:86:6e:af:73:73:12:2d:10:04:41:9a:c7:18:d1:7c:09:fc:
23:df:07:64:30:c9:bb:b0:31:14:25:7f:86:f8:b8:9d:b2:40:
f9:0b:e0:a9:1b:b5:f8:fd:3f:5b:a2:56:db:02:37:df:fe:a2:
2d:b6:9b:1c:64:5b:93:39:a2:8d:4d:e4:e1:f0:d2:83:78:dd:
92:ff:5c:8c:f6:2c:8d:38:bb:00:c3:ca:83:96:63:8c:f5:ed:
9d:c0:dd:8d:85:f1:b5:06:e4:64:28:db:f7:a1:c0:3d:51:06:
2d:4c:9a:86:d6:d7:8a:d0:c0:f9:36:d1:1f:75:c9:2c:cd:ab:
6a:9f:9a:33:d6:82:bb:c8:17:cd:3c:31:71:98:5d:6e:26:50:
3f:ac:95:18:a0:18:cb:89:da:33:df:01:bb:ac:20:25:2c:e1:
4b:94:9a:cc:b9:ba:ff:c7:44:bb:c2:4c:e2:a3:6c:0a:d6:c8:
52:09:0d:36:93:5b:64:d2:5b:ff:e5:05:b9:65:d3:db:02:cd:
d4:a5:2e:bb:66:53:20:6b:a0:bc:af:9b:48:57:07:15:58:08:
40:72:a9:5c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:48 2025 by rpki-client