Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/W2fugHW-54A1Sy1KS4mJS8pxSTY.roa
File: W2fugHW-54A1Sy1KS4mJS8pxSTY.roa (raw, json)
Hash identifier: 42MKRyBqC1uhylI0bE+ywrDTg9h8t2TtrNceTzhQupQ=
Subject key identifier: 5B:67:EE:80:75:BE:E7:80:35:4B:2D:4A:4B:89:89:4B:CA:71:49:36
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 0193840350E26BE8A3080BDF8E1E3C214D06
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/W2fugHW-54A1Sy1KS4mJS8pxSTY.roa
Signing time: Sun 01 Dec 2024 20:57:10 +0000
ROA not before: Sun 01 Dec 2024 20:57:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216271
IP address blocks: 185.168.28.0/22 maxlen: 22
185.201.136.0/22 maxlen: 22
2a06:b3c0::/29 maxlen: 29
2a06:b440::/29 maxlen: 29
2a06:cac0::/29 maxlen: 29
2a0a:e2c0::/29 maxlen: 29
2a0e:7780::/29 maxlen: 29
2a0f:d480::/29 maxlen: 29
2a0f:e000::/29 maxlen: 29
2a11:1140::/29 maxlen: 29
2a11:2f40::/29 maxlen: 29
2a11:3b40::/29 maxlen: 29
2a11:7240::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
2a11:dcc0::/29 maxlen: 29
2a11:f140::/29 maxlen: 29
2a12:440::/29 maxlen: 29
2a12:ec0::/29 maxlen: 29
2a12:1900::/29 maxlen: 29
2a12:28c0::/29 maxlen: 29
2a12:6640::/29 maxlen: 29
2a12:6740::/29 maxlen: 29
2a12:6b80::/29 maxlen: 29
2a12:6f40::/29 maxlen: 29
2a12:8ec0::/29 maxlen: 29
2a12:ccc0::/29 maxlen: 29
2a12:e240::/29 maxlen: 29
2a12:f0c0::/29 maxlen: 29
2a13:ba00::/29 maxlen: 29
2a13:dac0::/29 maxlen: 29
2a14:c0::/29 maxlen: 29
2a14:140::/29 maxlen: 29
2a14:1c0::/29 maxlen: 29
2a14:800::/29 maxlen: 29
2a14:f40::/29 maxlen: 29
2a14:7e00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:84:03:50:e2:6b:e8:a3:08:0b:df:8e:1e:3c:21:4d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Dec 1 20:57:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b67ee8075bee780354b2d4a4b89894bca714936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:c5:07:c4:41:18:28:8a:e6:3d:06:b4:cb:
a2:49:5e:4b:14:31:9d:95:af:64:36:bd:b9:f0:25:
85:d6:42:38:b4:ea:84:5e:54:73:18:ee:f8:6f:26:
08:03:3e:67:0e:c9:2e:e9:dd:c4:ec:41:55:29:5c:
ba:61:94:87:11:bf:3c:c7:6a:cb:80:df:40:3c:f3:
d0:20:e1:21:c0:7b:d5:04:7b:e4:61:de:3f:3b:37:
2d:de:56:2f:97:9d:24:aa:f1:53:47:58:a8:2c:0a:
2b:13:f8:c6:c5:57:af:28:b3:a1:64:ee:dd:73:c4:
2c:16:bc:0c:d7:8c:13:e1:2e:f3:47:d1:92:a0:f1:
7a:84:7f:47:74:d0:94:b9:cb:1c:6e:5a:fd:1b:5a:
99:4d:6b:36:7a:f9:12:ae:af:cb:5e:1a:ba:ad:7e:
47:25:76:e3:16:b0:f6:7b:19:8a:f9:cd:13:f9:df:
40:c9:50:16:c6:00:8e:b0:e6:99:46:9b:07:e5:17:
52:66:c9:3f:15:1b:ad:96:cd:df:b5:a7:44:05:96:
c0:77:7b:cf:20:87:b5:b5:4c:f0:24:51:f3:97:de:
01:59:29:86:0f:07:15:54:a8:d9:b4:74:d6:44:c8:
5d:76:39:8f:55:bf:ca:11:c4:c4:4c:fa:f9:35:d8:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:67:EE:80:75:BE:E7:80:35:4B:2D:4A:4B:89:89:4B:CA:71:49:36
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/W2fugHW-54A1Sy1KS4mJS8pxSTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.28.0/22
185.201.136.0/22
IPv6:
2a06:b3c0::/29
2a06:b440::/29
2a06:cac0::/29
2a0a:e2c0::/29
2a0e:7780::/29
2a0f:d480::/29
2a0f:e000::/29
2a11:1140::/29
2a11:2f40::/29
2a11:3b40::/29
2a11:7240::/29
2a11:9600::/29
2a11:dcc0::/29
2a11:f140::/29
2a12:440::/29
2a12:ec0::/29
2a12:1900::/29
2a12:28c0::/29
2a12:6640::/29
2a12:6740::/29
2a12:6b80::/29
2a12:6f40::/29
2a12:8ec0::/29
2a12:ccc0::/29
2a12:e240::/29
2a12:f0c0::/29
2a13:ba00::/29
2a13:dac0::/29
2a14:c0::/29
2a14:140::/29
2a14:1c0::/29
2a14:800::/29
2a14:f40::/29
2a14:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
19:98:c5:53:ab:c0:fe:1e:48:3d:b0:40:f4:ee:1a:5a:be:72:
b2:31:79:c7:86:64:f8:91:ac:d4:f4:1f:02:e1:27:d9:c9:c6:
6d:68:04:d1:d7:2a:70:dd:15:1c:0f:32:c0:aa:f0:3d:c5:dd:
0b:2f:18:d6:3d:d6:0e:90:05:8a:cd:3a:07:13:75:ec:26:73:
b9:62:12:50:8b:3c:42:1c:30:b2:3e:a2:f5:76:e3:00:a1:39:
c1:1b:66:2a:04:96:5f:52:3d:2b:6f:61:59:df:13:52:6a:64:
e9:1e:62:bc:bf:82:55:56:9d:c6:13:b7:bf:15:35:48:16:33:
c4:7b:cd:d7:92:9e:a0:0f:74:49:4d:6f:72:12:90:09:d7:78:
ca:cc:8e:83:68:75:01:73:b2:1a:f1:e0:c9:f0:25:4f:2d:30:
7e:cb:0d:89:05:f1:1d:1b:a6:cb:b7:c7:c7:d2:e3:0c:dd:20:
16:34:b8:1f:d4:82:ec:0f:b0:e3:29:e6:0c:3d:5a:7d:bc:2a:
9b:39:c7:b5:46:c8:8b:f0:75:eb:6b:60:b7:bc:33:f7:17:87:
c1:7c:03:d4:36:bd:23:7f:bc:e7:9e:f0:83:49:31:ae:fb:17:
a0:79:0a:86:cb:37:51:77:61:dc:6c:de:f2:92:ec:99:bd:19:
6f:09:dc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:34 2024 by rpki-client on console.sobornost.net