Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/W-T88z1cLJmNvABW1qfGsIOyyHo.roa
File: W-T88z1cLJmNvABW1qfGsIOyyHo.roa (raw, json)
Hash identifier: PJv6exkf0T4WAKo2Hp1JOVZGiMyEos4lp3smWbk+lmk=
Subject key identifier: 5B:E4:FC:F3:3D:5C:2C:99:8D:BC:00:56:D6:A7:C6:B0:83:B2:C8:7A
Certificate issuer: /CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
Certificate serial: 01914A7F4281459D7F27D6C0EB6205DE2548
Authority key identifier: 7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/W-T88z1cLJmNvABW1qfGsIOyyHo.roa
Signing time: Tue 13 Aug 2024 06:48:59 +0000
ROA not before: Tue 13 Aug 2024 06:48:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47402
IP address blocks: 84.238.184.0/21 maxlen: 21
84.238.196.0/22 maxlen: 22
84.238.200.0/22 maxlen: 22
84.238.216.0/22 maxlen: 22
84.238.228.0/22 maxlen: 22
84.238.232.0/21 maxlen: 21
84.238.240.0/20 maxlen: 20
185.7.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4a:7f:42:81:45:9d:7f:27:d6:c0:eb:62:05:de:25:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
Validity
Not Before: Aug 13 06:48:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5be4fcf33d5c2c998dbc0056d6a7c6b083b2c87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0b:c2:1e:79:3d:a8:5d:e6:85:e9:74:b5:d5:
12:a9:cb:be:0f:cc:0b:de:4c:5b:bb:02:02:c5:74:
24:20:b6:f0:e0:41:cd:6d:62:4a:70:22:67:6b:49:
57:52:e0:75:36:27:f8:02:1b:d2:f4:3a:5e:22:00:
7e:5c:44:57:e2:d4:77:4f:d6:e3:85:32:97:c6:6b:
07:0b:40:26:07:2a:32:28:d6:07:10:3f:ff:5c:73:
0c:63:6d:a6:62:51:62:78:c7:7f:5c:e0:79:a9:1b:
69:1b:d8:a8:e4:5e:95:f5:d7:3d:a1:ed:dc:b7:55:
28:57:04:15:5a:af:4c:fc:d4:07:15:6e:d7:ca:c3:
1b:d1:f4:41:0e:9a:86:9a:dd:4d:3b:98:1a:55:a2:
4e:38:94:48:c3:65:e4:f3:cb:49:62:cc:61:f8:31:
d1:1b:14:ef:0c:17:74:3a:40:ab:aa:b4:95:1b:21:
db:5b:f5:82:9b:4a:ef:4e:58:f9:22:78:b2:6a:57:
d6:9f:63:f8:b1:f9:28:90:14:01:1b:00:be:84:9c:
5b:41:dc:fb:bd:a1:72:9f:af:9e:58:8c:67:95:8f:
88:10:7b:99:6c:4c:3e:bb:92:c3:21:29:00:89:c2:
a2:59:09:d7:7c:13:df:82:07:15:8e:66:6b:dd:0b:
5b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E4:FC:F3:3D:5C:2C:99:8D:BC:00:56:D6:A7:C6:B0:83:B2:C8:7A
X509v3 Authority Key Identifier:
keyid:7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/W-T88z1cLJmNvABW1qfGsIOyyHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.238.184.0/21
84.238.196.0-84.238.203.255
84.238.216.0/22
84.238.228.0-84.238.255.255
185.7.204.0/22
Signature Algorithm: sha256WithRSAEncryption
64:8e:df:0b:f3:a4:99:aa:a2:9e:b3:91:67:0b:a5:59:ac:8f:
53:2e:2e:f4:51:f2:21:e8:90:a0:6d:f4:a8:76:f5:32:c9:b9:
1b:0f:8e:ff:e9:a5:5c:92:46:88:db:ac:58:32:a3:14:81:6d:
7d:ce:25:09:3b:44:64:b9:d6:6c:bf:43:ff:80:eb:18:9a:79:
a6:95:a4:89:53:75:a4:ab:0d:0c:33:88:76:69:5e:53:77:e1:
bf:dc:90:91:74:33:02:ce:f2:0f:ea:31:89:e0:80:70:20:98:
37:fd:81:c5:b3:e9:0a:df:17:ea:ba:57:92:fc:52:bb:7a:1c:
ec:93:53:e7:29:b6:f3:d4:4e:77:58:c8:37:bd:9e:af:ac:45:
46:4a:63:84:10:e2:72:f9:8e:b0:85:ae:77:36:31:33:91:bc:
d0:e0:52:72:73:f1:a0:f7:13:74:ab:0d:2a:a9:8e:b6:67:f5:
4b:e9:9c:6d:b4:76:a1:0f:ad:ef:da:7d:47:28:bd:57:55:93:
77:9d:74:b3:a9:4b:2b:98:05:86:60:2d:98:ce:f1:da:eb:98:
0d:e9:8d:d0:ac:2d:de:d6:e5:f3:03:69:65:87:6d:86:b7:1b:
25:52:15:a1:95:d1:5a:68:90:18:82:e7:f9:f4:64:f6:74:b3:
18:39:1d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:23 2024 by rpki-client on console.sobornost.net