Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f9de18-c8c1-48fd-99ab-cfacb83fe8ed/1/WCE-rJVDLeNUNKAikf7FojisWeQ.roa
File: WCE-rJVDLeNUNKAikf7FojisWeQ.roa (raw, json)
Hash identifier: wz7bHVLg7It82UgAbqdECcfTakGkvdekampA3hEcvOA=
Subject key identifier: 58:21:3E:AC:95:43:2D:E3:54:34:A0:22:91:FE:C5:A2:38:AC:59:E4
Certificate issuer: /CN=be9b02bb81f7b5b0fb62a1a4a3dc5a88d1cbe4ff
Certificate serial: 12443E78
Authority key identifier: BE:9B:02:BB:81:F7:B5:B0:FB:62:A1:A4:A3:DC:5A:88:D1:CB:E4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpsCu4H3tbD7YqGko9xaiNHL5P8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f9de18-c8c1-48fd-99ab-cfacb83fe8ed/1/WCE-rJVDLeNUNKAikf7FojisWeQ.roa
Signing time: Sat 01 Jan 2022 14:57:48 +0000
ROA not before: Sat 01 Jan 2022 14:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201508
IP address blocks: 194.126.152.0/22 maxlen: 22
185.4.24.0/22 maxlen: 22
185.182.52.0/22 maxlen: 22
185.42.0.0/22 maxlen: 22
185.245.212.0/22 maxlen: 24
185.65.164.0/22 maxlen: 22
185.208.240.0/22 maxlen: 22
46.36.192.0/21 maxlen: 21
2a05:1c0::/29 maxlen: 29
2a04:8d80::/29 maxlen: 29
2a02:66c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306462328 (0x12443e78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9b02bb81f7b5b0fb62a1a4a3dc5a88d1cbe4ff
Validity
Not Before: Jan 1 14:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58213eac95432de35434a02291fec5a238ac59e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:f4:37:4b:94:ef:f6:e2:7f:10:b3:3e:c7:
43:ac:3a:6f:dc:e3:22:84:86:19:fe:15:9a:bb:17:
d4:50:ae:d5:00:37:3c:c5:1e:80:c2:c2:d7:76:cd:
8e:de:75:73:11:d1:0d:5c:62:f0:cb:ab:60:d8:d7:
62:54:87:e3:ce:0d:5b:51:fa:c6:58:1e:4e:6b:72:
fb:c1:1a:2e:19:46:9e:26:50:79:5c:a4:38:93:d4:
a8:df:60:19:d2:8d:7c:45:9e:f1:8c:88:bf:e8:25:
7a:05:94:a6:92:31:46:3f:96:b0:af:ef:39:bb:84:
d3:61:6a:1a:bb:e8:41:15:14:c0:d9:a8:18:a3:15:
14:17:c1:97:f5:23:48:28:5f:9f:dd:e4:d3:f9:7e:
ff:b7:f9:26:fa:a5:82:8b:a4:29:72:14:15:72:43:
e1:58:13:bd:97:fc:92:2d:0e:d3:5d:99:83:7a:3f:
4e:54:bb:e2:88:b5:ed:36:91:43:fd:e3:5c:ca:3f:
73:67:33:2f:b5:15:78:72:a3:ca:1c:5d:98:57:7d:
a6:e1:a0:73:62:90:33:7a:91:12:e6:20:b5:35:c4:
33:7f:07:d4:10:97:96:6a:de:11:93:98:14:57:4e:
7e:a3:4c:d6:30:21:84:e0:23:0c:e9:f5:1e:30:f4:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:21:3E:AC:95:43:2D:E3:54:34:A0:22:91:FE:C5:A2:38:AC:59:E4
X509v3 Authority Key Identifier:
keyid:BE:9B:02:BB:81:F7:B5:B0:FB:62:A1:A4:A3:DC:5A:88:D1:CB:E4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpsCu4H3tbD7YqGko9xaiNHL5P8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f9de18-c8c1-48fd-99ab-cfacb83fe8ed/1/WCE-rJVDLeNUNKAikf7FojisWeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f9de18-c8c1-48fd-99ab-cfacb83fe8ed/1/vpsCu4H3tbD7YqGko9xaiNHL5P8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.192.0/21
185.4.24.0/22
185.42.0.0/22
185.65.164.0/22
185.182.52.0/22
185.208.240.0/22
185.245.212.0/22
194.126.152.0/22
IPv6:
2a02:66c0::/32
2a04:8d80::/29
2a05:1c0::/29
Signature Algorithm: sha256WithRSAEncryption
5e:6a:ce:52:a6:df:d0:18:9f:58:ef:e8:80:e2:de:70:0a:ff:
0f:3e:f8:3f:09:6d:1b:8b:db:0f:62:d9:af:88:61:09:ca:d9:
5b:f8:ad:b0:60:cc:c1:4d:bb:7d:a3:13:3f:9e:5d:84:bf:bb:
0f:52:13:df:82:3d:ec:6d:2a:fb:35:45:62:86:fa:c6:ac:62:
dd:82:97:5d:7b:03:8f:b0:7e:40:a5:95:7d:9d:d7:e9:2f:96:
17:a2:e4:d5:51:00:1a:96:c0:34:b6:1f:8f:c2:5f:bb:bf:c4:
ae:72:4f:b7:0d:14:d9:3e:9d:f1:c7:d6:38:73:24:f9:84:42:
98:4b:dc:52:b3:22:26:db:7c:d4:30:a6:0a:6f:02:35:d3:f4:
71:07:ef:50:67:c5:e1:82:48:03:d3:f6:5c:25:9f:5a:2d:9b:
0b:66:02:f6:09:1e:c1:49:39:97:88:1f:4d:ea:8b:be:62:28:
ab:aa:94:f3:90:2e:79:9a:cf:7c:d8:d1:ee:08:68:45:14:56:
28:8b:be:cf:2c:6d:bf:06:10:20:eb:b0:05:ba:02:89:bc:fb:
1e:35:28:14:a3:64:a1:09:bb:a1:1f:ee:7d:b2:a1:19:36:d9:
f2:49:f3:9b:8e:25:0f:95:af:37:ef:7e:1c:60:a1:44:74:f6:
29:e3:d2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:37 2024 by rpki-client on console-fra.rpki-client.org