Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/wpG7xsXc2MZTWJEuV75gX5gk3Ds.roa
File: wpG7xsXc2MZTWJEuV75gX5gk3Ds.roa (raw, json)
Hash identifier: KeT2jV3n5KapHklM/+5In93RBrdIhpkhbaVU9HxQ/q8=
Subject key identifier: C2:91:BB:C6:C5:DC:D8:C6:53:58:91:2E:57:BE:60:5F:98:24:DC:3B
Certificate issuer: /CN=6abafcbb23ab01e5adeccd169a31efb7c5c3c522
Certificate serial: 11AE76C0
Authority key identifier: 6A:BA:FC:BB:23:AB:01:E5:AD:EC:CD:16:9A:31:EF:B7:C5:C3:C5:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arr8uyOrAeWt7M0WmjHvt8XDxSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/wpG7xsXc2MZTWJEuV75gX5gk3Ds.roa
Signing time: Sat 01 Jan 2022 12:54:01 +0000
ROA not before: Sat 01 Jan 2022 12:54:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.151.178.0/24 maxlen: 24
185.151.177.0/24 maxlen: 24
185.151.176.0/24 maxlen: 24
185.151.179.0/24 maxlen: 24
185.151.176.0/22 maxlen: 22
185.126.235.0/24 maxlen: 24
185.126.234.0/24 maxlen: 24
185.126.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296646336 (0x11ae76c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abafcbb23ab01e5adeccd169a31efb7c5c3c522
Validity
Not Before: Jan 1 12:54:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c291bbc6c5dcd8c65358912e57be605f9824dc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:89:45:f6:67:85:fd:91:aa:f2:b5:7a:6a:
40:91:a5:cf:1a:2e:f5:73:03:45:66:32:0e:8a:d5:
82:4e:d0:ea:6c:15:81:e1:d4:cc:63:b7:fd:88:98:
2a:23:ef:91:d6:37:e6:55:68:14:49:2e:dc:8e:65:
85:42:a4:76:bf:d8:4b:fc:84:a9:59:b3:ef:1d:22:
e8:1b:2f:f2:6d:8c:d8:35:78:e7:8f:e0:88:44:80:
ec:ad:0b:e1:66:1a:dc:44:6a:67:ff:66:bd:fa:f5:
d1:03:77:94:c4:6e:34:29:d5:4f:8a:9e:88:85:f8:
c4:e8:d3:f0:8d:e0:d1:fd:e0:3b:40:86:dc:92:7b:
18:3f:69:f6:bf:a5:4a:a4:c6:c4:2b:d8:5c:18:7e:
c3:50:77:7e:91:11:63:42:c8:37:87:9b:3f:cc:b3:
ae:08:24:07:83:eb:e7:c1:c8:a2:68:fa:2a:3b:bd:
fa:bb:a2:d6:e4:53:2b:c5:2a:cd:38:2d:aa:59:ae:
c3:b7:97:2a:ef:ec:e5:c5:48:f7:26:7e:c0:36:13:
f5:c8:3d:4b:8b:98:86:6d:f4:e3:da:6a:2f:c3:3d:
62:ff:10:a4:a0:42:7c:25:18:b9:b8:05:db:1e:61:
4e:61:04:cc:b8:79:ef:aa:e1:e4:a8:9b:98:e9:ef:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:91:BB:C6:C5:DC:D8:C6:53:58:91:2E:57:BE:60:5F:98:24:DC:3B
X509v3 Authority Key Identifier:
keyid:6A:BA:FC:BB:23:AB:01:E5:AD:EC:CD:16:9A:31:EF:B7:C5:C3:C5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arr8uyOrAeWt7M0WmjHvt8XDxSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/wpG7xsXc2MZTWJEuV75gX5gk3Ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/arr8uyOrAeWt7M0WmjHvt8XDxSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.234.0/23
185.151.176.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:7e:00:5b:ce:74:f3:79:be:70:05:18:86:8d:4d:ee:43:e8:
ed:cf:35:b0:9e:40:e7:b6:ba:e1:66:a7:43:1a:f4:1c:27:ff:
c0:9e:37:2c:df:fa:c0:20:b8:29:fa:fe:47:5c:80:5e:bc:dc:
5a:14:b0:b7:7d:9d:8f:13:2b:27:ad:6f:ff:c3:be:10:9d:11:
cb:39:e1:e6:8f:a1:cf:ae:41:96:20:5b:9d:31:d1:90:10:c2:
c1:f6:47:19:64:ad:8e:c0:67:a7:99:0c:9e:c0:68:bb:e4:93:
86:28:b2:e6:04:62:ab:d5:e4:7f:2e:c0:65:a5:a4:4a:79:cf:
f1:6a:aa:42:87:9b:d1:47:96:fd:39:8e:bc:a1:14:bd:2c:d4:
b4:ab:10:d9:a1:8e:1c:bb:d0:3f:d0:1f:cc:36:67:45:0c:49:
28:e8:72:0e:ca:cb:9b:b4:93:b8:0e:cc:99:a6:fd:5c:00:50:
36:ae:f3:93:84:4b:71:75:fa:11:4a:c3:2f:7a:73:28:8e:46:
60:a9:95:cf:84:57:71:d6:41:82:23:97:b7:49:83:88:87:24:
63:8e:5f:5b:c8:98:ed:fc:66:89:ea:66:87:3e:5b:30:68:33:
54:01:10:2e:35:dc:55:6d:62:32:aa:3b:5e:2e:8b:2e:0f:bd:
8b:e3:de:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:44:32 2023 by rpki-client on console.sobornost.net