Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/wCFnAYZHgxoZ8m--vTVwUvwVxKM.roa
File: wCFnAYZHgxoZ8m--vTVwUvwVxKM.roa (raw, json)
Hash identifier: zvmT/5Ey1Z5na/1DugDwk4OLEq60E+C8aBMWFSu4/Bo=
Subject key identifier: C0:21:67:01:86:47:83:1A:19:F2:6F:BE:BD:35:70:52:FC:15:C4:A3
Certificate issuer: /CN=ddf048ea02b7551533511bfa9040ddabe11974c6
Certificate serial: 3085032A
Authority key identifier: DD:F0:48:EA:02:B7:55:15:33:51:1B:FA:90:40:DD:AB:E1:19:74:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fBI6gK3VRUzURv6kEDdq-EZdMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/wCFnAYZHgxoZ8m--vTVwUvwVxKM.roa
Signing time: Wed 23 Feb 2022 10:42:13 +0000
ROA not before: Wed 23 Feb 2022 10:42:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35226
IP address blocks: 89.184.56.0/23 maxlen: 23
185.179.40.0/24 maxlen: 24
89.16.64.0/19 maxlen: 19
109.106.96.0/19 maxlen: 19
78.143.128.0/18 maxlen: 18
89.184.32.0/22 maxlen: 22
89.184.40.0/21 maxlen: 21
89.184.48.0/21 maxlen: 21
2a02:2158::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 814023466 (0x3085032a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf048ea02b7551533511bfa9040ddabe11974c6
Validity
Not Before: Feb 23 10:42:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c02167018647831a19f26fbebd357052fc15c4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:f9:5a:bc:de:ad:b4:c0:47:e5:90:94:3a:
6d:67:b9:cc:0b:ab:f6:76:4d:04:c5:91:74:0d:5b:
99:06:2d:11:8a:5d:81:59:18:c4:26:68:11:15:e1:
05:50:dd:e6:08:0a:e1:65:40:37:4e:95:13:2a:97:
a1:18:bc:b0:90:81:ca:38:60:ed:4b:c0:6d:b0:d9:
11:8c:0d:18:0b:51:cc:3f:4b:0d:d2:28:a9:ec:f5:
8c:7d:8d:cd:ab:05:28:9a:f8:6d:6c:dd:59:de:71:
80:8a:a5:e7:69:f6:5f:01:79:77:0b:3a:64:f3:c0:
21:a2:69:c2:02:ab:34:16:32:f6:56:5c:c4:21:d5:
5a:aa:04:31:f2:50:4a:fb:52:43:a8:eb:e3:25:90:
9f:49:c4:b7:d3:49:09:f0:47:25:46:a6:50:19:aa:
cb:69:dd:a6:2e:d0:bc:27:53:33:48:16:c8:79:60:
b0:10:fd:9f:a0:99:f8:da:ab:81:86:50:c2:ce:25:
0b:66:89:01:4c:b9:61:14:96:c2:fc:7c:a3:b9:d9:
71:d2:d5:34:0e:f2:f8:96:50:2e:f4:10:c2:29:e3:
8c:de:dd:25:07:55:b5:c1:f1:91:25:e5:54:84:53:
c4:70:10:10:aa:91:d8:f7:25:43:71:03:9b:14:dd:
9a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:21:67:01:86:47:83:1A:19:F2:6F:BE:BD:35:70:52:FC:15:C4:A3
X509v3 Authority Key Identifier:
keyid:DD:F0:48:EA:02:B7:55:15:33:51:1B:FA:90:40:DD:AB:E1:19:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fBI6gK3VRUzURv6kEDdq-EZdMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/wCFnAYZHgxoZ8m--vTVwUvwVxKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/3fBI6gK3VRUzURv6kEDdq-EZdMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.143.128.0/18
89.16.64.0/19
89.184.32.0/22
89.184.40.0-89.184.57.255
109.106.96.0/19
185.179.40.0/24
IPv6:
2a02:2158::/32
Signature Algorithm: sha256WithRSAEncryption
22:3c:73:bb:6b:4e:d2:a8:12:3f:06:f1:c7:47:76:cd:15:34:
82:46:be:f3:8b:04:c2:69:c9:03:93:18:9c:4c:28:af:28:63:
70:9e:7e:69:25:bb:a2:24:07:f6:71:10:06:a9:66:27:96:e7:
55:a0:ba:7a:32:e5:4d:45:28:ed:1e:24:ec:f4:eb:a9:08:6e:
fc:6a:ea:2a:81:1a:6b:9f:6f:e6:4c:3b:04:41:ab:1e:c8:db:
90:fb:d6:53:50:d4:de:75:8a:10:c2:54:d8:9c:c5:c1:86:24:
bf:73:c6:31:48:a2:5e:34:09:dc:00:f4:c8:5f:71:8a:72:f5:
5d:3f:50:5b:13:91:aa:76:21:5d:bd:09:28:38:8d:e8:53:fb:
27:7f:54:72:35:fa:f9:ff:7e:fe:a6:72:f7:cd:87:6c:09:33:
77:cc:48:10:81:a3:8e:ae:d8:58:20:8c:72:10:5a:1b:e4:b4:
48:ff:0c:14:4e:3c:d6:c7:b1:41:f4:66:ea:c6:26:b5:cc:60:
85:39:08:df:b5:35:a6:5c:bf:b9:0a:68:13:0e:b1:6a:03:2b:
5e:f1:a3:f8:12:5a:8d:b7:7f:6d:40:ba:70:81:63:e6:5d:dd:
36:da:71:94:d6:70:cb:b9:0b:8c:69:1e:4d:a8:0c:6b:b1:5f:
d4:57:ad:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:16 2023 by rpki-client on console-ams.rpki-client.org