Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/wkoXSuCS-gyUYQAI_3JePEAKvd4.roa
File: wkoXSuCS-gyUYQAI_3JePEAKvd4.roa (raw, json)
Hash identifier: ZXQIBbQ0WT5xoGm2ZSZnZiKG4zq8Icmc5T3s5hOhKNE=
Subject key identifier: C2:4A:17:4A:E0:92:FA:0C:94:61:00:08:FF:72:5E:3C:40:0A:BD:DE
Certificate issuer: /CN=d7cc56a1f20d5a603296619635786fde26458d12
Certificate serial: 01878AA59A6B47CB5A0C60966A4C5955DBCD
Authority key identifier: D7:CC:56:A1:F2:0D:5A:60:32:96:61:96:35:78:6F:DE:26:45:8D:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18xWofINWmAylmGWNXhv3iZFjRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/wkoXSuCS-gyUYQAI_3JePEAKvd4.roa
Signing time: Sun 16 Apr 2023 15:18:41 +0000
ROA not before: Sun 16 Apr 2023 15:18:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29037
IP address blocks: 217.17.16.0/20 maxlen: 24
77.236.112.0/21 maxlen: 24
79.171.176.0/21 maxlen: 24
192.54.68.0/22 maxlen: 24
192.54.67.0/24 maxlen: 24
178.248.216.0/21 maxlen: 24
77.236.104.0/21 maxlen: 24
185.5.168.0/22 maxlen: 24
2a01:5580::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8a:a5:9a:6b:47:cb:5a:0c:60:96:6a:4c:59:55:db:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cc56a1f20d5a603296619635786fde26458d12
Validity
Not Before: Apr 16 15:18:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c24a174ae092fa0c94610008ff725e3c400abdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:88:bc:a9:22:d8:47:c4:c0:2f:72:77:d7:
44:a7:b9:db:30:c3:c2:c9:9d:c9:31:34:55:da:0e:
a9:57:ab:ea:96:c2:37:b6:bf:65:fc:86:95:54:10:
12:de:74:4b:41:4d:50:e2:7c:c2:e2:76:5e:0c:af:
92:f0:ef:b3:2f:a6:47:a4:51:99:42:a0:96:11:12:
e5:eb:a7:c7:b7:96:94:78:d7:81:6a:c2:9c:9b:6f:
a2:ef:9a:1e:75:bb:93:94:cc:3b:78:bd:56:49:cc:
7b:58:1c:5d:de:22:bf:67:7d:36:be:f1:0a:72:5e:
2f:5c:94:31:c1:a2:90:54:ca:fb:6d:c8:c3:4b:59:
fd:dc:49:4b:fd:3c:05:9a:f0:29:75:46:e6:a6:f5:
b1:d2:e3:36:11:46:9a:1e:f9:3c:80:40:30:9b:42:
05:4c:ff:f4:28:4b:5d:0a:39:da:43:99:cf:74:0a:
ec:15:0e:a1:8f:28:93:18:52:11:2b:16:12:f5:eb:
bc:3c:1f:4b:75:6e:f2:b4:f2:b0:99:41:ca:2c:c4:
f8:d3:64:c5:27:f4:32:a0:4a:e8:f6:5e:c9:e7:ac:
f9:6b:8c:d8:1f:bb:9b:1c:a8:c8:ee:6b:19:89:f0:
2c:74:9b:e8:17:9f:95:4a:9f:c2:c5:3c:c1:9c:78:
c8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4A:17:4A:E0:92:FA:0C:94:61:00:08:FF:72:5E:3C:40:0A:BD:DE
X509v3 Authority Key Identifier:
keyid:D7:CC:56:A1:F2:0D:5A:60:32:96:61:96:35:78:6F:DE:26:45:8D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18xWofINWmAylmGWNXhv3iZFjRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/wkoXSuCS-gyUYQAI_3JePEAKvd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/18xWofINWmAylmGWNXhv3iZFjRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.236.104.0-77.236.119.255
79.171.176.0/21
178.248.216.0/21
185.5.168.0/22
192.54.67.0-192.54.71.255
217.17.16.0/20
IPv6:
2a01:5580::/32
Signature Algorithm: sha256WithRSAEncryption
ab:ba:5a:c1:22:3e:5c:d0:3f:66:2b:1b:1d:e8:d8:46:8f:d5:
e6:d2:e7:12:9f:0b:23:b6:82:87:47:10:7a:0a:d5:93:de:da:
be:5f:a2:33:9a:e6:c6:05:af:8b:de:7a:72:01:9d:3d:0d:bd:
ac:41:43:a0:dd:41:45:12:2e:99:79:a7:ca:af:3f:2a:75:78:
03:f1:fd:d2:53:36:ba:04:01:4c:a1:66:d4:65:4f:d9:39:27:
72:c7:bd:35:bc:67:d6:3e:8d:3a:df:f3:e8:bc:bf:f9:a8:47:
e6:2a:1d:47:50:0b:52:a0:3a:ca:15:c8:b1:33:8e:ca:78:41:
8d:68:1e:6b:36:eb:53:5b:83:8b:cb:8b:33:ee:b4:d0:9a:f1:
57:39:16:7e:44:93:9d:04:6d:80:70:55:fc:6e:a1:09:ea:e7:
32:ab:19:13:44:33:ec:97:ff:6a:70:79:25:0b:39:09:dc:1f:
43:37:dc:4a:ff:f5:da:0e:26:58:d6:9e:53:bd:44:d7:db:db:
dc:6f:8f:db:f0:32:11:33:8b:97:75:c6:85:aa:31:9d:45:7d:
3c:e5:cc:77:64:4b:0a:81:d9:18:a9:cb:84:0e:3a:a5:a6:71:
e5:ca:03:b5:53:5f:39:ea:46:46:24:99:99:2b:b0:b4:7b:bb:
c8:ab:4f:02
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:28 2024 by rpki-client on console-ams.rpki-client.org