Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/wBPtIQBAAWr81L1dBYt8-0ymg-4.roa
File: wBPtIQBAAWr81L1dBYt8-0ymg-4.roa (raw, json)
Hash identifier: jGDcpscd5UL40we3eIXzYgM0U7tJgwOBhtdDob57Ur4=
Subject key identifier: C0:13:ED:21:00:40:01:6A:FC:D4:BD:5D:05:8B:7C:FB:4C:A6:83:EE
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 018DC0FFBD58491BA1F4D3A48BBA5F15F2FE
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/wBPtIQBAAWr81L1dBYt8-0ymg-4.roa
Signing time: Mon 19 Feb 2024 10:53:22 +0000
ROA not before: Mon 19 Feb 2024 10:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1897
IP address blocks: 88.157.0.0/16 maxlen: 16
193.126.0.0/16 maxlen: 16
194.79.64.0/19 maxlen: 19
195.23.0.0/16 maxlen: 16
212.0.160.0/19 maxlen: 19
213.205.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:ff:bd:58:49:1b:a1:f4:d3:a4:8b:ba:5f:15:f2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Feb 19 10:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c013ed210040016afcd4bd5d058b7cfb4ca683ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f0:ab:f2:ab:df:ba:c6:9c:73:0d:78:00:32:
9a:3f:57:b6:41:b8:3f:29:46:4c:41:3b:45:7d:43:
e3:dc:01:b9:3c:ed:9c:02:7e:2a:f6:a6:ec:7b:53:
c4:ac:d1:16:16:31:e3:16:14:59:22:cb:88:a7:57:
42:c6:0a:57:32:a9:79:5f:25:d0:b1:d8:03:6e:51:
7a:1f:57:a6:3a:e7:04:f5:19:a9:cb:e8:c6:65:c7:
dc:30:f3:bc:60:c6:7a:eb:ea:9c:8b:5d:19:49:dc:
19:15:36:64:73:43:e6:68:77:1a:64:5c:b1:7d:70:
45:3a:82:b0:86:58:1d:31:98:94:5e:6b:a8:30:02:
a7:79:2e:11:93:3a:94:b3:19:24:65:60:72:eb:3b:
b3:1e:76:05:83:6a:1a:5a:c4:9e:8f:5a:b6:a9:02:
8c:38:38:58:a4:91:05:58:6d:d0:50:54:f2:67:a2:
ff:01:a0:d6:e8:d2:e5:f2:01:2e:09:4d:90:73:82:
9b:c8:3d:87:b5:1d:86:5b:60:ad:15:51:36:33:4e:
8f:60:19:ec:2d:41:0b:8e:18:ba:e6:2e:35:5a:64:
7d:3f:91:ee:2d:75:a5:74:ea:de:e4:1f:e7:17:dc:
46:86:95:c1:6e:f2:b7:a7:3a:5e:11:df:12:08:2d:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:13:ED:21:00:40:01:6A:FC:D4:BD:5D:05:8B:7C:FB:4C:A6:83:EE
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/wBPtIQBAAWr81L1dBYt8-0ymg-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.157.0.0/16
193.126.0.0/16
194.79.64.0/19
195.23.0.0/16
212.0.160.0/19
213.205.64.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:38:70:05:5b:a4:69:67:ff:31:9f:07:1b:ef:59:df:5c:5a:
2b:66:d9:13:b8:17:3b:07:7c:b4:f8:69:19:4b:7c:ef:f7:f6:
c4:c0:d8:85:05:3e:e5:f7:d9:64:e6:0a:ac:a1:de:30:e7:73:
4a:27:e4:41:d0:a3:44:d9:17:4c:ca:69:e3:21:b5:38:28:22:
5c:cd:bf:62:91:e2:2d:86:d5:dc:2d:e1:55:2c:0e:08:eb:dd:
2c:84:b4:3a:f4:1b:71:0d:84:44:d6:0c:87:e4:42:84:8e:60:
53:f0:39:6c:93:eb:40:bb:94:ba:85:08:20:90:b6:fc:05:4b:
da:ab:04:d9:35:b3:b8:96:7e:f6:b9:fe:60:c0:67:ab:44:d9:
a6:d9:1f:9b:ce:50:b2:4d:40:4f:92:58:38:2c:cb:f6:ee:d7:
60:d6:0f:93:64:f9:6e:42:ff:6e:f3:44:7f:60:4c:14:d3:81:
24:90:df:3e:83:70:5d:38:7a:9a:7f:19:fe:79:d6:e7:d3:a7:
17:b9:dc:a7:74:c1:6d:56:ae:3d:d0:ac:1e:b2:95:3b:82:f1:
09:cf:58:c8:1e:52:94:a2:1e:16:7c:e0:f5:c2:89:14:3a:87:
04:4d:96:b2:b8:84:97:bc:c0:b1:25:53:37:3c:22:62:68:61:
88:f6:7f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:57 2024 by rpki-client on console.sobornost.net