Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/WZovCE7yIV_yXiYNdBzJBdDh_8A.roa
File: WZovCE7yIV_yXiYNdBzJBdDh_8A.roa (raw, json)
Hash identifier: Y8cxlwB2cHflKTE7nwym8MrTFqUyii0ToNUi63xKIiU=
Subject key identifier: 59:9A:2F:08:4E:F2:21:5F:F2:5E:26:0D:74:1C:C9:05:D0:E1:FF:C0
Certificate issuer: /CN=1fe8ee87853406cd8d04ba8e39bf7a51ffb8a3bc
Certificate serial: 018CC424DF0022FE17B5BAD94D03D2DCC86F
Authority key identifier: 1F:E8:EE:87:85:34:06:CD:8D:04:BA:8E:39:BF:7A:51:FF:B8:A3:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-juh4U0Bs2NBLqOOb96Uf-4o7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/WZovCE7yIV_yXiYNdBzJBdDh_8A.roa
Signing time: Mon 01 Jan 2024 08:29:59 +0000
ROA not before: Mon 01 Jan 2024 08:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50033
IP address blocks: 185.161.124.0/22 maxlen: 22
185.211.52.0/22 maxlen: 22
185.60.162.0/24 maxlen: 24
2a07:c3c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:df:00:22:fe:17:b5:ba:d9:4d:03:d2:dc:c8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe8ee87853406cd8d04ba8e39bf7a51ffb8a3bc
Validity
Not Before: Jan 1 08:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=599a2f084ef2215ff25e260d741cc905d0e1ffc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:1a:e8:46:9a:23:d6:1e:c9:72:70:02:38:
fa:1b:b9:13:f7:35:ee:19:2d:61:f6:80:7b:82:90:
c7:16:ba:be:68:2e:13:12:0e:1c:7c:46:60:aa:22:
ac:2e:1e:20:11:72:4c:4e:f6:db:a8:9c:55:43:cb:
9c:9f:5b:74:c6:62:76:4c:49:74:7c:b4:7f:08:af:
bb:9d:f1:b5:60:fa:71:a2:94:5b:ba:63:7b:40:b0:
07:a8:e0:c5:6e:50:64:1b:70:44:70:95:3c:94:21:
32:54:d7:ef:18:66:c7:9d:e0:ad:08:67:18:b0:68:
53:9e:1a:61:8d:a1:96:08:13:d2:5f:1b:5e:1b:1c:
61:67:34:ed:58:0a:0d:77:cb:01:5d:fe:ad:bc:9c:
f9:ed:93:72:d2:ad:e0:50:fe:d8:e4:4a:87:83:5a:
51:43:97:9e:8a:c6:65:43:17:ae:fc:f9:dd:58:3d:
d4:dc:e4:89:0e:74:ba:27:9d:af:a8:96:80:2a:3b:
aa:a3:14:18:9b:0d:8d:c1:6c:41:f4:ad:59:c4:23:
ec:85:e2:92:27:46:e5:c3:87:c6:87:6b:df:5b:98:
94:64:b7:b7:f3:33:f3:97:be:67:c0:a4:07:09:2c:
7f:52:40:1c:eb:dc:a5:fc:be:b0:27:03:42:ed:2d:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9A:2F:08:4E:F2:21:5F:F2:5E:26:0D:74:1C:C9:05:D0:E1:FF:C0
X509v3 Authority Key Identifier:
keyid:1F:E8:EE:87:85:34:06:CD:8D:04:BA:8E:39:BF:7A:51:FF:B8:A3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-juh4U0Bs2NBLqOOb96Uf-4o7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/WZovCE7yIV_yXiYNdBzJBdDh_8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/H-juh4U0Bs2NBLqOOb96Uf-4o7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.162.0/24
185.161.124.0/22
185.211.52.0/22
IPv6:
2a07:c3c0::/29
Signature Algorithm: sha256WithRSAEncryption
b7:84:9c:25:91:1c:c7:ed:93:ff:62:63:2b:17:af:2f:a6:bc:
ac:c8:a7:c8:e1:34:e7:b2:ef:4c:5c:bf:a6:f1:6f:99:25:0a:
e2:46:0b:a9:89:b8:84:27:3f:cb:f9:68:aa:7b:d1:a3:87:6b:
e2:db:29:5d:ee:a8:95:3d:01:45:7e:34:fa:4c:af:12:97:00:
d0:2f:30:cb:5b:6b:0b:b3:e5:fa:3d:1c:9d:21:a6:1c:5a:d5:
ef:c3:c6:59:09:4f:7c:f6:06:1c:7f:a9:06:e7:c8:db:92:ab:
ce:85:8a:16:30:a2:9c:de:d1:e0:cd:d4:57:fe:f2:89:be:ac:
99:38:16:9c:be:3d:36:f8:8b:b7:76:96:c4:29:44:b8:72:eb:
b1:c8:83:51:f7:4d:c1:ae:56:50:f2:74:b4:6a:95:05:13:43:
b3:de:a4:5a:0e:4b:0b:66:c1:47:bf:4c:d2:6a:c3:de:86:14:
d1:29:a9:d9:7a:63:8d:8b:3d:6a:9c:32:f6:da:93:b1:e7:fb:
ab:ce:9c:9a:ee:c9:45:ee:95:07:d7:2d:07:74:66:c5:9f:52:
07:00:e2:7f:d0:6b:36:8b:d2:fd:c7:83:d6:0d:01:a6:3b:e0:
58:d6:70:7a:47:cf:c3:28:59:39:68:bd:b5:41:fd:57:c9:ca:
55:96:e7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 13:24:41 2024 by rpki-client on console-fra.rpki-client.org