Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/wWieKEglYRh2suL9T0EugNvP9uE.roa
File: wWieKEglYRh2suL9T0EugNvP9uE.roa (raw, json)
Hash identifier: g0rgKRrFsElQMy3sw4yEWCvMagXKV9BvyyLCGhYLlSY=
Subject key identifier: C1:68:9E:28:48:25:61:18:76:B2:E2:FD:4F:41:2E:80:DB:CF:F6:E1
Certificate issuer: /CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
Certificate serial: 01882A60E956D18CBE68301FD8C125A27C6C
Authority key identifier: 85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/wWieKEglYRh2suL9T0EugNvP9uE.roa
Signing time: Wed 17 May 2023 15:42:54 +0000
ROA not before: Wed 17 May 2023 15:42:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.40.84.0/24 maxlen: 24
185.40.85.0/24 maxlen: 24
185.40.86.0/24 maxlen: 24
185.40.87.0/24 maxlen: 24
185.123.103.0/24 maxlen: 24
2a04:8340::/48 maxlen: 48
2a04:8340:2a04::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2a:60:e9:56:d1:8c:be:68:30:1f:d8:c1:25:a2:7c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
Validity
Not Before: May 17 15:42:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1689e284825611876b2e2fd4f412e80dbcff6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d1:2e:bc:65:0c:89:33:e3:b9:0e:77:4c:d9:
de:24:bd:a4:0b:98:af:e6:1d:22:18:8f:ba:0f:0b:
bf:cc:4c:a1:74:51:68:75:5f:09:ab:11:e0:70:33:
fe:43:f5:b7:c5:41:04:9f:59:0b:63:70:71:45:85:
a9:a6:8a:b3:6c:2d:16:43:c1:e5:ac:bf:96:92:a9:
55:9c:3b:c5:ed:d5:12:e4:38:86:db:86:87:f8:1e:
0b:e5:aa:61:ab:f1:9a:26:e3:ed:7a:18:d1:ab:b1:
69:3c:4d:a8:4a:99:07:30:7c:fa:75:27:53:b3:e0:
db:03:f5:23:87:f3:1e:d0:5e:5d:09:d9:02:0e:95:
cd:42:a5:23:82:bd:d1:a1:0b:3a:84:be:c4:8f:3d:
bb:99:26:f3:07:30:a0:07:75:f0:08:12:59:fb:04:
ec:6c:b2:71:fc:d8:2f:7f:7e:c8:d2:bd:f6:8d:66:
11:2f:af:52:7a:c9:51:75:a1:a8:51:12:00:47:c0:
f9:a4:70:61:17:d7:d3:a4:56:9e:04:fd:87:a7:b5:
62:5c:6e:8f:2d:42:60:52:f1:6c:52:e8:c1:80:24:
8f:78:81:3a:f4:06:4f:1c:83:c2:5d:06:de:ab:d7:
6f:fb:76:d3:00:6e:53:11:16:b9:ea:97:69:8a:1a:
22:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:68:9E:28:48:25:61:18:76:B2:E2:FD:4F:41:2E:80:DB:CF:F6:E1
X509v3 Authority Key Identifier:
keyid:85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/wWieKEglYRh2suL9T0EugNvP9uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/hcMT6ZZeqns66b1cvzVm1EpRCX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.84.0/22
185.123.103.0/24
IPv6:
2a04:8340::/48
2a04:8340:2a04::/48
Signature Algorithm: sha256WithRSAEncryption
9a:9f:51:a2:b7:f3:9f:a2:6d:6c:d3:9e:51:57:c4:83:90:3a:
54:1a:4b:94:72:6b:1e:41:15:62:45:5f:14:92:19:c9:d0:06:
c1:f5:59:38:f4:52:4c:3d:21:8d:32:be:90:ac:d4:ba:71:ef:
c4:e2:50:8b:d4:14:0a:2d:9d:59:1d:2d:57:39:92:d4:e1:46:
73:a5:dd:26:d6:53:8a:e0:18:70:90:90:6d:f1:79:70:ef:60:
af:bc:23:c7:ae:f1:9e:75:98:bf:f0:38:53:63:c8:73:a8:08:
66:0b:91:51:a7:d2:0f:5a:e1:cc:76:b0:ec:da:e8:01:f1:b8:
89:a3:90:c7:76:ff:0f:64:bc:75:2f:b0:d1:f5:57:45:9a:e7:
07:0a:f4:8c:52:0c:80:9f:93:bc:ff:4f:99:d1:a7:25:43:45:
7e:64:3f:6c:25:e2:13:4e:4b:b2:b5:96:97:8f:42:87:f6:c8:
d5:ff:ab:7b:26:56:96:08:af:8b:fb:24:cc:c0:1c:44:f2:a8:
79:ce:04:51:cf:60:93:08:1c:f3:9a:f2:66:65:f7:a4:12:ed:
cb:c8:76:b3:ce:d5:ec:2d:4a:80:22:fd:e6:98:24:77:f7:7f:
58:45:46:f8:22:17:ef:21:95:a7:66:22:43:c3:24:21:05:de:
be:da:f4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:09 2024 by rpki-client on console-ams.rpki-client.org