Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/wgZLcDRX1C8Xb8Nkc-rWwEckbAo.roa
File: wgZLcDRX1C8Xb8Nkc-rWwEckbAo.roa (raw, json)
Hash identifier: NLJI9RLpRn+0OZb84Np/U/yFWaKTcbA4XwzMJ3Hcwkw=
Subject key identifier: C2:06:4B:70:34:57:D4:2F:17:6F:C3:64:73:EA:D6:C0:47:24:6C:0A
Certificate issuer: /CN=e5eb273e0443e57ffca2860b0c20613f0e427c62
Certificate serial: 019D09
Authority key identifier: E5:EB:27:3E:04:43:E5:7F:FC:A2:86:0B:0C:20:61:3F:0E:42:7C:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5esnPgRD5X_8ooYLDCBhPw5CfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/wgZLcDRX1C8Xb8Nkc-rWwEckbAo.roa
Signing time: Wed 26 Jan 2022 13:00:27 +0000
ROA not before: Wed 26 Jan 2022 13:00:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207067
IP address blocks: 185.130.208.0/24 maxlen: 24
185.130.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105737 (0x19d09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5eb273e0443e57ffca2860b0c20613f0e427c62
Validity
Not Before: Jan 26 13:00:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2064b703457d42f176fc36473ead6c047246c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:be:72:05:78:c6:2b:4a:c4:0d:94:77:03:
9b:46:43:f7:e0:9f:c7:61:f8:14:40:92:b0:b4:06:
4f:99:89:5e:14:df:3c:ef:25:43:d7:75:1d:fd:2c:
ed:52:34:34:22:c7:9d:1a:07:15:f4:6d:b4:82:a7:
04:1a:ee:35:6f:6a:00:27:30:73:b2:ff:9c:fb:bc:
82:51:e0:68:14:59:bd:54:89:c8:60:45:0d:f3:db:
2b:4d:b1:f3:f0:7d:0b:1f:a0:47:b0:07:72:4c:d2:
d4:16:92:f9:2a:a6:19:ad:b2:8c:45:63:9e:59:39:
df:10:3c:b2:05:88:64:68:50:1f:73:a8:63:a0:fc:
69:c2:d4:5f:de:eb:b2:05:1d:63:61:9f:74:6e:5a:
fd:33:53:f3:da:4d:e0:8f:8f:87:4b:1d:ca:bf:9b:
0d:fe:33:94:52:3e:e8:68:62:9c:89:2d:35:0c:22:
35:93:fd:da:56:44:e6:76:c0:0a:fd:da:a9:57:eb:
38:76:6f:81:a6:12:d3:9f:66:56:11:ce:14:21:cb:
33:66:c9:91:f9:cb:f2:d4:68:19:8a:da:32:f6:9f:
3e:ef:1f:c5:67:2c:1f:9e:89:96:f8:f8:2f:b3:dd:
f9:b1:63:34:d8:40:f6:31:49:3c:ad:4f:ff:b7:8e:
6a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:06:4B:70:34:57:D4:2F:17:6F:C3:64:73:EA:D6:C0:47:24:6C:0A
X509v3 Authority Key Identifier:
keyid:E5:EB:27:3E:04:43:E5:7F:FC:A2:86:0B:0C:20:61:3F:0E:42:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5esnPgRD5X_8ooYLDCBhPw5CfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/wgZLcDRX1C8Xb8Nkc-rWwEckbAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/5esnPgRD5X_8ooYLDCBhPw5CfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.208.0/22
Signature Algorithm: sha256WithRSAEncryption
31:e2:4c:0b:b6:8d:53:fe:1c:5c:fa:13:dc:26:34:82:31:13:
72:c4:13:65:04:9d:01:3a:88:08:dd:2b:3c:fe:ae:71:f7:b4:
25:5d:34:e2:c9:a0:51:d3:55:e6:3a:cb:7c:b0:94:96:e6:27:
d8:3a:c8:1b:56:7d:ce:d6:c4:f3:bf:73:e1:41:97:05:72:89:
ee:f7:44:60:52:86:31:c2:fd:a1:35:1d:ce:ec:d3:7d:be:f3:
99:58:12:43:ce:f7:9f:e3:0c:a4:8d:d7:ee:2e:20:d9:af:f8:
cf:fb:9d:81:a2:1a:f7:be:f7:3e:54:4d:b4:2f:83:a7:21:a6:
97:95:62:f5:c4:44:04:03:3c:b7:c3:7b:22:87:f5:0a:ce:6d:
5e:ed:63:9d:f9:7a:a4:bf:db:66:4c:fd:4c:05:03:15:20:b9:
98:5a:bb:b7:70:7c:01:c6:f7:0e:55:a3:2f:82:c7:fa:04:05:
38:5b:5a:2b:d3:bc:ae:f2:1b:4d:90:8c:46:4c:d4:8a:9e:89:
0b:26:8d:bc:c8:f4:ae:7d:6b:bc:29:cd:d6:b6:d1:87:ca:0b:
8d:e6:55:10:ef:a9:f9:ea:a1:01:20:08:ef:ec:9b:d9:5d:3f:
c5:a4:b4:77:fd:62:6e:47:6a:4c:96:e6:b6:ea:b9:73:2a:c0:
91:8b:d7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-fra.rpki-client.org