Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/WfUIIQ0IzjiRQXmPcxFSjxMjcJ0.roa
File: WfUIIQ0IzjiRQXmPcxFSjxMjcJ0.roa (raw, json)
Hash identifier: 8SBLfGyTobeNmsLC+X+/XiuyUGaLlGXitSMzoZKHThY=
Subject key identifier: 59:F5:08:21:0D:08:CE:38:91:41:79:8F:73:11:52:8F:13:23:70:9D
Certificate issuer: /CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Certificate serial: 018CC7274A31305D81F6053EFC462587254C
Authority key identifier: 73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/WfUIIQ0IzjiRQXmPcxFSjxMjcJ0.roa
Signing time: Mon 01 Jan 2024 22:31:29 +0000
ROA not before: Mon 01 Jan 2024 22:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44547
IP address blocks: 185.136.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4a:31:30:5d:81:f6:05:3e:fc:46:25:87:25:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Validity
Not Before: Jan 1 22:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59f508210d08ce389141798f7311528f1323709d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8f:ca:09:d9:0b:04:85:04:e4:eb:d5:c1:44:
8d:5f:b4:85:bd:e3:27:46:7e:a8:e1:51:40:24:06:
78:1e:7c:e0:24:b6:1b:5e:11:70:30:b7:6c:2e:61:
7e:72:45:de:f1:bc:6e:e9:75:9a:bd:10:84:68:fb:
bb:ff:99:07:88:84:87:2b:63:0c:c6:46:48:34:e7:
32:23:c9:2f:fd:25:84:9f:e4:e5:b0:d6:7b:d5:de:
f0:af:4a:af:a0:47:a4:70:e8:1b:06:23:cf:a0:f5:
1d:ea:7d:89:92:47:60:c1:4d:63:d6:e7:ac:a2:2a:
1e:ae:24:b9:bf:47:9c:80:35:c5:90:2c:9f:c4:db:
4a:c5:65:de:37:f1:c1:5e:ee:ac:d0:eb:8a:8b:53:
19:d0:fc:c3:e3:70:26:3c:12:1e:4d:08:45:e4:ff:
ef:87:34:0e:b1:c6:1a:db:58:d0:4e:e0:b4:9c:38:
5b:f7:17:bd:0b:be:b4:fa:d4:68:d5:6e:8d:4d:36:
07:06:af:95:65:b2:5b:35:d8:21:68:3b:85:13:fa:
75:c9:30:b8:d2:8a:35:32:f5:3c:92:3d:7c:c3:53:
c4:df:70:ab:b1:7e:ef:91:44:34:c1:5e:d4:71:78:
07:00:29:78:b7:2a:c0:2f:e2:4b:53:9f:92:2d:4d:
f3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F5:08:21:0D:08:CE:38:91:41:79:8F:73:11:52:8F:13:23:70:9D
X509v3 Authority Key Identifier:
keyid:73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/WfUIIQ0IzjiRQXmPcxFSjxMjcJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/c1iJNKCw1kja-U3Z5inT3SLtWr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.206.0/24
Signature Algorithm: sha256WithRSAEncryption
28:00:b6:e7:af:d9:66:74:26:85:19:58:30:d5:f5:2f:5a:8e:
52:bf:0f:de:9c:5b:c6:1a:dd:89:fa:94:f0:a1:51:7d:f2:5c:
dc:2d:d1:ee:46:c2:ce:0b:87:b8:4b:2b:32:4f:1f:fa:e2:d7:
be:5e:dc:ea:98:27:22:85:98:6f:f1:85:55:62:81:02:1d:63:
5e:98:85:4c:f7:1c:9d:8a:17:62:74:17:58:d3:48:88:a0:99:
34:e5:4b:3c:8d:83:89:28:d2:ab:2d:b2:68:69:53:8c:75:82:
d1:e5:4e:74:be:54:4b:76:86:cf:2f:2b:38:23:ab:86:0c:17:
14:66:f3:2d:7d:9b:c2:42:cc:22:dd:99:84:a2:ab:ec:2d:2a:
24:1d:80:9f:a6:13:22:c1:ba:e9:4d:53:0c:73:7b:d3:cd:22:
31:66:58:50:7c:06:c7:f4:87:15:ff:22:d4:cd:6d:f0:ee:f3:
8d:29:29:92:73:7b:e8:6d:4b:b5:4c:31:09:1f:a3:40:55:1b:
0a:aa:79:7c:4d:6f:8c:76:8b:36:69:cd:b0:c4:a3:d3:9d:82:
b1:e3:83:91:49:5f:cd:75:e6:e5:a0:43:5f:87:b6:b2:08:0a:
11:17:7e:28:95:98:de:ee:0f:1e:63:c9:60:5e:95:ff:87:18:
6d:2b:a2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:19 2024 by rpki-client on console-fra.rpki-client.org