Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/94733d-1bb5-47ff-b405-8a811a86d2e8/1/HbWpr0SmcgyP220WzbhjaMi4-HQ.roa
File: HbWpr0SmcgyP220WzbhjaMi4-HQ.roa (raw, json)
Hash identifier: YhQVcFp9TdJiImdU4AZiLO8tQ6i6Lv67/M3Jg7ryWfo=
Subject key identifier: 1D:B5:A9:AF:44:A6:72:0C:8F:DB:6D:16:CD:B8:63:68:C8:B8:F8:74
Certificate issuer: /CN=2914e77de53b835c0e2150c6153b23f555ff6e64
Certificate serial: 01856F5DE082C006CA51312FC92C7842E977
Authority key identifier: 29:14:E7:7D:E5:3B:83:5C:0E:21:50:C6:15:3B:23:F5:55:FF:6E:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRTnfeU7g1wOIVDGFTsj9VX_bmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/94733d-1bb5-47ff-b405-8a811a86d2e8/1/HbWpr0SmcgyP220WzbhjaMi4-HQ.roa
Signing time: Sun 01 Jan 2023 22:05:01 +0000
ROA not before: Sun 01 Jan 2023 22:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62172
IP address blocks: 185.37.218.0/24 maxlen: 24
185.37.216.0/22 maxlen: 22
2a04:7340:7340::/48 maxlen: 48
2a04:7340::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:e0:82:c0:06:ca:51:31:2f:c9:2c:78:42:e9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2914e77de53b835c0e2150c6153b23f555ff6e64
Validity
Not Before: Jan 1 22:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1db5a9af44a6720c8fdb6d16cdb86368c8b8f874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:12:f9:f0:81:5a:e5:b1:f6:4f:d9:a1:5a:d2:
72:5e:c4:19:00:de:3e:bd:3a:b6:ef:eb:26:96:0e:
f1:1d:ed:74:d0:0b:ac:16:9c:c7:fb:a5:14:3f:4a:
e2:2d:59:29:f2:48:32:d7:98:e5:f8:c1:d2:c0:da:
34:a4:95:e4:a8:62:82:60:69:30:bd:e7:6b:5a:c1:
cc:0a:31:c1:b8:2f:fb:db:be:14:b2:1c:a8:4a:e3:
c8:7a:f3:95:4f:51:cb:cf:a2:67:4f:79:7c:83:49:
43:65:73:02:f7:7e:f6:dc:87:eb:8c:d8:a4:5d:c1:
85:e5:67:9b:1d:70:df:71:d9:18:d8:eb:58:d8:ae:
51:0d:db:97:0b:00:4d:d7:10:9a:97:dc:d1:94:8c:
77:57:52:6b:a9:2f:f4:05:9b:00:5a:71:c7:48:4b:
70:5d:86:44:d3:c1:37:0c:78:1c:a9:f6:c2:7e:d4:
b5:f4:cf:34:b3:0d:48:75:7d:16:a4:59:1f:b3:61:
31:cc:35:fa:1c:8e:f3:fe:b9:f5:b4:b1:a3:56:16:
b2:56:b3:57:ac:9d:9e:4f:d0:30:6b:d9:de:01:1d:
d7:df:7b:67:ce:25:fc:98:be:30:1f:aa:4e:b4:ba:
1c:2c:d1:37:82:61:4b:ec:52:17:06:87:5b:6c:d1:
3b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B5:A9:AF:44:A6:72:0C:8F:DB:6D:16:CD:B8:63:68:C8:B8:F8:74
X509v3 Authority Key Identifier:
keyid:29:14:E7:7D:E5:3B:83:5C:0E:21:50:C6:15:3B:23:F5:55:FF:6E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRTnfeU7g1wOIVDGFTsj9VX_bmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/94733d-1bb5-47ff-b405-8a811a86d2e8/1/HbWpr0SmcgyP220WzbhjaMi4-HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/94733d-1bb5-47ff-b405-8a811a86d2e8/1/KRTnfeU7g1wOIVDGFTsj9VX_bmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.216.0/22
IPv6:
2a04:7340::/29
Signature Algorithm: sha256WithRSAEncryption
50:3e:44:10:80:86:de:14:78:15:a5:13:2e:2f:42:8f:d3:8e:
29:8b:6f:a4:6b:12:9c:e4:4f:7f:47:f2:d1:65:80:a3:3c:39:
60:fe:25:19:18:72:a1:c0:be:f0:4b:ec:19:f7:36:cc:2f:1d:
ab:85:f2:8b:78:7a:dd:7e:98:69:e9:bd:d2:16:2f:af:7c:98:
0e:25:60:3b:63:d3:7a:ea:43:3c:22:31:cf:cc:f7:00:c7:05:
7d:6b:aa:57:38:2d:18:c3:65:82:7a:6f:1c:02:bb:bd:11:4b:
ec:b7:e2:ad:c6:de:8b:53:d7:a5:7b:2b:44:68:21:2a:6a:c9:
47:19:41:91:eb:a5:f8:9a:3d:5e:9b:d7:ba:9a:4e:38:de:87:
21:f9:22:e2:73:93:66:e3:59:59:2b:4c:51:7b:7e:fb:a4:8b:
b9:98:82:4b:60:38:44:93:91:38:9c:77:e8:68:ba:9b:2f:a0:
60:4d:9f:69:38:5e:07:56:9f:55:13:ad:70:0e:f4:d9:f7:b2:
ab:01:79:2d:f3:92:80:e7:e2:22:1d:5c:bc:25:1f:4a:46:c8:
d9:24:62:82:85:9f:e1:87:8b:c8:a7:cf:c4:7f:ac:02:1a:0e:
5c:26:c7:ba:6d:ef:d8:71:0e:f1:d0:e5:6b:99:ac:60:a5:8f:
44:c0:1f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:25 2024 by rpki-client on console-ams.rpki-client.org