Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/WbP1_bTS6gzK2XMh_BjQ1yyuhPE.roa
File: WbP1_bTS6gzK2XMh_BjQ1yyuhPE.roa (raw, json)
Hash identifier: FjuqwX15OdNorB67BBIO7KfZ5GBRwiLAzkCWUmjyf8A=
Subject key identifier: 59:B3:F5:FD:B4:D2:EA:0C:CA:D9:73:21:FC:18:D0:D7:2C:AE:84:F1
Certificate issuer: /CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
Certificate serial: 195D69B8
Authority key identifier: 56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/WbP1_bTS6gzK2XMh_BjQ1yyuhPE.roa
Signing time: Thu 12 May 2022 10:18:02 +0000
ROA not before: Thu 12 May 2022 10:18:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28907
IP address blocks: 77.87.192.0/21 maxlen: 21
195.39.197.0/24 maxlen: 24
195.39.196.0/23 maxlen: 23
89.184.64.0/19 maxlen: 24
78.27.192.0/22 maxlen: 22
78.27.192.0/18 maxlen: 24
78.27.199.0/24 maxlen: 24
5.149.120.0/21 maxlen: 24
195.177.118.0/23 maxlen: 23
195.177.116.0/23 maxlen: 23
2a02:2278:215::/48 maxlen: 48
2a02:2278::/32 maxlen: 48
2a02:2278:100::/48 maxlen: 48
2a02:2278:210::/48 maxlen: 48
2a02:2278:209::/48 maxlen: 48
2a02:2278:208::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425552312 (0x195d69b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
Validity
Not Before: May 12 10:18:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59b3f5fdb4d2ea0ccad97321fc18d0d72cae84f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:94:01:c2:6f:a7:6c:cf:ce:88:93:77:fc:7b:
1e:98:fb:f0:15:66:8e:9b:c6:dd:e8:f8:2f:46:09:
bb:84:b7:a1:d9:c5:47:2c:73:8e:99:b9:b6:61:88:
69:ca:bf:00:59:9e:52:ff:67:03:ee:60:13:c2:64:
68:0f:31:76:9e:a9:d1:2d:ad:77:3d:a6:85:65:ae:
70:90:de:4c:01:7a:a3:71:73:b0:c6:95:4c:ec:a5:
70:3a:29:e5:62:45:b2:26:d8:1c:05:e2:3b:d8:bd:
9d:99:02:b7:05:88:23:35:a6:e2:b9:a4:d3:ce:2b:
6b:9c:69:c4:2e:aa:2c:87:e7:ee:fa:4d:fd:4b:28:
d7:20:6c:c4:c3:bc:4e:4c:e2:88:ff:e4:2d:9b:2b:
18:2c:60:61:bd:ec:36:48:c1:1b:31:dd:69:0b:17:
11:c4:29:ed:8e:47:4b:ac:8f:ce:03:d6:e8:a3:03:
f7:2d:f3:47:ea:23:f1:51:dc:f2:55:37:86:a7:1c:
18:17:e8:6f:a5:a7:95:aa:81:1e:0e:1a:0a:0c:17:
00:01:5c:b6:b7:b5:ce:40:2c:8f:8b:96:18:af:6a:
a0:d4:b2:bc:7f:c6:2e:8c:e8:72:74:c9:7d:19:a6:
a3:2f:e9:ca:52:3c:9d:64:98:8e:b3:9e:da:5d:5e:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B3:F5:FD:B4:D2:EA:0C:CA:D9:73:21:FC:18:D0:D7:2C:AE:84:F1
X509v3 Authority Key Identifier:
keyid:56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/WbP1_bTS6gzK2XMh_BjQ1yyuhPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/VtserxeSos1Sidx_xSQuo1JFE04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.120.0/21
77.87.192.0/21
78.27.192.0/18
89.184.64.0/19
195.39.196.0/23
195.177.116.0/22
IPv6:
2a02:2278::/32
Signature Algorithm: sha256WithRSAEncryption
0a:82:a1:69:63:5a:9a:1a:c3:ff:ec:84:06:3f:68:e3:da:b2:
2c:56:4f:11:9f:6a:db:e7:b1:9a:60:59:d3:0d:f6:69:0e:83:
21:da:39:1f:6d:18:0e:f0:85:86:02:a0:17:28:4d:3e:79:50:
4b:41:6f:f2:58:2b:84:97:52:25:16:c0:11:4c:9b:10:3b:e7:
04:2e:27:c8:fb:27:9c:13:32:ae:63:b6:fc:39:d5:47:28:17:
44:b5:e0:07:09:4c:20:9e:57:77:cf:60:6f:79:2e:7a:14:3f:
66:1f:f6:af:95:1a:5e:d0:68:1e:e2:1d:fa:1b:b8:26:a8:fa:
52:bb:b9:ab:a2:45:13:86:21:18:0e:58:4a:ea:9a:72:14:7d:
6a:73:ee:3c:d0:46:64:c0:03:fd:0a:a2:86:fa:5b:d9:0b:e9:
4d:fd:0c:59:a5:ea:1a:b7:68:ee:1e:0a:34:de:07:35:df:08:
dc:fa:b3:45:11:9e:69:74:09:7b:97:e7:52:82:09:8e:c5:c8:
2c:ac:95:68:1a:49:5e:0e:00:20:f4:93:ce:1c:0d:81:37:fd:
db:cb:15:7d:ed:46:75:a3:22:e1:40:62:97:36:34:02:f9:fa:
98:b1:a7:04:a6:a2:cf:66:72:7e:b5:07:bc:a3:fc:84:ce:72:
8c:9f:51:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:24 2025 by rpki-client