Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a2ef3e-a4c3-4592-9fb7-35820328b556/1/WJz-AHZ9ju2sdGVYkQTBg8rH8Oc.roa
File: WJz-AHZ9ju2sdGVYkQTBg8rH8Oc.roa (raw, json)
Hash identifier: zxc/Sc7ZD94NpBjBmvyMXzGG/zVq+xLNqqhY+dKcgX4=
Subject key identifier: 58:9C:FE:00:76:7D:8E:ED:AC:74:65:58:91:04:C1:83:CA:C7:F0:E7
Certificate issuer: /CN=74faaaf58b347ddf408853d16562aec7adafbd88
Certificate serial: 1024DCB5
Authority key identifier: 74:FA:AA:F5:8B:34:7D:DF:40:88:53:D1:65:62:AE:C7:AD:AF:BD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPqq9Ys0fd9AiFPRZWKux62vvYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a2ef3e-a4c3-4592-9fb7-35820328b556/1/WJz-AHZ9ju2sdGVYkQTBg8rH8Oc.roa
Signing time: Sat 01 Jan 2022 07:53:34 +0000
ROA not before: Sat 01 Jan 2022 07:53:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206446
IP address blocks: 185.185.132.0/24 maxlen: 24
185.185.133.0/24 maxlen: 24
185.185.135.0/24 maxlen: 24
185.185.134.0/24 maxlen: 24
2a0a:a140::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270851253 (0x1024dcb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74faaaf58b347ddf408853d16562aec7adafbd88
Validity
Not Before: Jan 1 07:53:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=589cfe00767d8eedac7465589104c183cac7f0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:20:75:3d:f7:81:37:3d:cc:bd:89:4d:77:59:
43:96:e9:b7:61:5c:d0:96:a2:ec:2f:46:d9:e9:12:
ce:74:0c:05:59:0d:09:80:0c:ea:ee:bc:7c:23:5c:
16:cc:b4:66:33:d9:df:c3:bc:1e:35:e7:f0:10:5b:
f1:d3:40:56:0e:c0:51:dc:03:c1:37:20:5f:23:7d:
a9:81:8b:68:f7:25:53:c7:27:80:b3:2c:a9:b8:7d:
7a:71:58:77:79:ec:5d:20:3b:a5:5c:54:d3:bd:ec:
3f:68:11:4e:5d:15:b6:12:2f:66:3d:88:e7:59:ef:
86:4f:00:d1:fb:f1:af:f9:63:9f:29:e5:9d:94:e3:
27:f6:24:e0:45:a4:38:00:09:79:ab:3c:3f:1c:2b:
0b:ba:c0:63:2a:a6:f2:d4:e4:34:9f:5b:63:fb:2a:
be:bc:23:95:01:36:27:b5:6a:a8:57:eb:b0:fb:99:
de:19:b5:53:5a:d9:c2:c5:89:d1:e2:96:35:08:7b:
05:43:2b:ea:e2:1a:1f:7a:d3:e1:69:12:b3:37:ec:
fb:f2:0e:08:b3:23:cb:85:45:ac:cc:66:5a:f2:dd:
84:ab:1a:c1:30:45:1a:b6:62:df:6f:de:72:82:f5:
99:00:4c:a9:89:6e:f8:5b:8e:5c:af:aa:7c:d9:0c:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9C:FE:00:76:7D:8E:ED:AC:74:65:58:91:04:C1:83:CA:C7:F0:E7
X509v3 Authority Key Identifier:
keyid:74:FA:AA:F5:8B:34:7D:DF:40:88:53:D1:65:62:AE:C7:AD:AF:BD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPqq9Ys0fd9AiFPRZWKux62vvYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a2ef3e-a4c3-4592-9fb7-35820328b556/1/WJz-AHZ9ju2sdGVYkQTBg8rH8Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a2ef3e-a4c3-4592-9fb7-35820328b556/1/dPqq9Ys0fd9AiFPRZWKux62vvYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.132.0/22
IPv6:
2a0a:a140::/48
Signature Algorithm: sha256WithRSAEncryption
41:10:8f:d8:26:4e:ad:a6:d4:f4:59:62:11:f8:77:7b:6a:94:
db:a3:4b:d4:5a:fa:47:0f:20:fc:ef:a4:1f:8f:e2:95:1a:fd:
d2:1e:66:4e:8b:ae:b7:74:33:1c:7d:a4:9f:3c:bd:ee:fd:6f:
7e:ab:5a:9f:6e:ca:5e:5a:9d:f1:7b:c0:bb:4e:8a:29:18:92:
b5:61:98:41:22:99:06:fe:8d:9c:41:46:b8:13:b0:63:f2:82:
70:28:ec:11:09:7b:00:7f:53:de:42:96:bc:63:ad:d9:bc:38:
b2:58:60:a5:3c:4b:48:36:2b:51:dc:57:f3:98:d1:45:da:54:
ab:cb:02:9a:d7:a8:52:cc:4e:c6:f4:b0:1a:b3:b1:3e:5f:61:
9b:fd:ac:3b:a3:5f:eb:61:95:cf:6d:d9:b6:09:d2:78:a1:4f:
75:5b:8d:72:fb:bc:1a:26:fb:bb:49:5d:3d:76:3f:77:93:08:
ae:2c:2d:0d:70:89:64:af:61:52:a4:dd:c3:fd:26:60:08:44:
c5:b6:f7:af:05:3d:35:40:f9:d1:79:d1:5a:c6:04:94:d8:48:
03:b7:87:ea:55:74:28:bb:69:46:cb:4c:6a:59:31:83:7e:d6:
a6:28:3d:ca:3e:4d:d8:4c:fa:b5:bc:ed:ad:eb:c6:c3:a3:7c:
c3:e2:5d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:32 2024 by rpki-client on console-ams.rpki-client.org