Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/dw-IfTXE5kMqnLwzbZel2TGfnOY.roa
File: dw-IfTXE5kMqnLwzbZel2TGfnOY.roa (raw, json)
Hash identifier: ARmjunz2Q4ablH9vm9Uegk/WHHXm6lmlxPOpS+I9nzY=
Subject key identifier: 77:0F:88:7D:35:C4:E6:43:2A:9C:BC:33:6D:97:A5:D9:31:9F:9C:E6
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 0191FFAD89E5DB2F07CBA582113520B96A9F
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/dw-IfTXE5kMqnLwzbZel2TGfnOY.roa
Signing time: Tue 17 Sep 2024 11:10:48 +0000
ROA not before: Tue 17 Sep 2024 11:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24812
IP address blocks: 91.225.4.0/22 maxlen: 22
176.105.192.0/22 maxlen: 22
176.105.194.0/23 maxlen: 23
176.105.194.0/24 maxlen: 24
176.105.196.0/24 maxlen: 24
176.105.197.0/24 maxlen: 24
176.105.198.0/24 maxlen: 24
176.105.199.0/24 maxlen: 24
176.105.200.0/22 maxlen: 22
176.105.200.0/23 maxlen: 23
176.105.204.0/23 maxlen: 23
176.105.204.0/24 maxlen: 24
176.105.206.0/23 maxlen: 23
176.105.208.0/22 maxlen: 22
176.105.208.0/24 maxlen: 24
176.105.209.0/24 maxlen: 24
176.105.210.0/23 maxlen: 23
176.105.212.0/22 maxlen: 22
176.105.212.0/23 maxlen: 23
176.105.216.0/23 maxlen: 23
176.105.218.0/23 maxlen: 23
176.105.218.0/24 maxlen: 24
176.105.220.0/24 maxlen: 24
176.105.221.0/24 maxlen: 24
176.105.222.0/24 maxlen: 24
176.105.223.0/24 maxlen: 24
178.159.208.0/20 maxlen: 20
178.159.216.0/24 maxlen: 24
178.159.217.0/24 maxlen: 24
178.159.218.0/24 maxlen: 24
178.159.219.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ff:ad:89:e5:db:2f:07:cb:a5:82:11:35:20:b9:6a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: Sep 17 11:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=770f887d35c4e6432a9cbc336d97a5d9319f9ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:b7:43:80:8e:89:ea:c4:14:0e:67:fb:6e:
c5:57:32:ce:82:3f:d9:05:6a:a9:43:67:72:31:78:
ba:22:3d:bd:f8:c0:67:4b:75:d4:28:f6:ec:73:33:
b5:00:bf:f1:74:fa:ee:4f:77:28:f8:97:04:10:51:
d3:b5:98:40:11:5b:9d:8f:25:5d:3d:63:88:a5:9b:
64:76:fd:74:f3:6f:c0:82:5f:1b:3b:c2:7a:5a:b8:
b3:4c:8f:d5:d0:c4:0c:16:f2:7a:eb:7d:dc:0d:b2:
34:1a:eb:5d:52:d4:c3:64:79:02:a1:9c:ed:fb:9b:
ff:80:da:7d:21:87:74:bc:4f:30:27:a8:39:2f:7a:
71:42:39:4d:70:e5:71:3e:17:11:65:e7:f8:1c:ef:
e0:02:a2:36:1e:cb:76:c8:f1:73:f9:67:b9:ed:22:
02:ef:b3:da:61:18:0a:04:2e:10:66:79:99:59:dd:
2a:67:53:c8:84:b9:db:b2:d4:fc:4a:21:f3:be:d3:
85:8e:f6:11:64:fa:e0:c3:8f:06:82:15:97:73:32:
b3:a4:70:9f:4b:e4:2f:60:4c:b1:98:fb:c0:fe:15:
90:54:e2:5f:50:69:d2:bd:9e:01:ea:af:ed:ee:37:
4d:f3:85:d7:d3:dc:79:13:f7:4d:92:1b:3d:40:97:
c7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0F:88:7D:35:C4:E6:43:2A:9C:BC:33:6D:97:A5:D9:31:9F:9C:E6
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/dw-IfTXE5kMqnLwzbZel2TGfnOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.4.0/22
176.105.192.0/19
178.159.208.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:f4:f9:32:97:e9:c0:31:60:d5:ed:42:d1:84:b8:aa:ea:30:
c9:fa:d3:87:97:73:5d:e8:33:12:cc:2c:38:74:a8:88:2e:3b:
f0:fe:bc:7d:1c:e8:bb:ad:50:01:7b:b7:f4:c3:cc:22:65:b2:
ea:c8:4d:e7:98:ed:7f:47:c8:b8:55:f8:20:b4:d4:99:45:ed:
cd:33:86:ed:15:bd:8a:16:48:7d:69:71:4d:f2:d1:9b:2e:4c:
5f:df:6c:66:e6:9a:c6:51:b6:c5:c4:ce:24:77:af:24:90:a3:
b1:5c:4c:56:6f:80:ec:34:29:f9:49:8e:5c:7f:f3:40:83:42:
03:3a:97:b6:7a:33:95:42:b7:a6:84:90:2a:ff:f1:f4:07:1d:
9c:51:ad:bf:e6:a6:f7:3f:3e:2e:11:a3:ac:9f:1d:47:5f:bf:
6a:19:fc:ef:29:45:65:4e:b4:e7:67:ea:58:98:1e:22:e2:05:
62:12:fe:bc:c0:7e:bd:96:c0:ff:db:4c:96:9e:71:57:5a:06:
9c:6e:22:be:7a:ed:85:61:99:82:9d:5d:2b:55:ed:60:1d:da:
b3:de:50:ab:98:ff:d3:67:9b:42:e5:9f:3b:17:cc:14:81:08:
fb:08:ba:e6:f8:7c:94:fd:c4:b7:89:4a:23:b1:97:a8:cc:0f:
2a:38:0a:d9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZH/rYnl2y8Hy6WCETUguWqfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTkwNjZkNWI2YWMzMDE5YzIwMzdmNTc5ZDExYmFlMWE1
ZWVhNzMwHhcNMjQwOTE3MTExMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzBmODg3ZDM1YzRlNjQzMmE5Y2JjMzM2ZDk3YTVkOTMxOWY5Y2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnye3Q4COierEFA5n+27FVzLOgj/Z
BWqpQ2dyMXi6Ij29+MBnS3XUKPbsczO1AL/xdPruT3co+JcEEFHTtZhAEVudjyVd
PWOIpZtkdv1082/Agl8bO8J6WrizTI/V0MQMFvJ6633cDbI0GutdUtTDZHkCoZzt
+5v/gNp9IYd0vE8wJ6g5L3pxQjlNcOVxPhcRZef4HO/gAqI2Hst2yPFz+We57SIC
77PaYRgKBC4QZnmZWd0qZ1PIhLnbstT8SiHzvtOFjvYRZPrgw48GghWXczKzpHCf
S+QvYEyxmPvA/hWQVOJfUGnSvZ4B6q/t7jdN84XX09x5E/dNkhs9QJfHXwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHcPiH01xOZDKpy8M22Xpdkxn5zmMB8GA1UdIwQY
MBaAFGWpBm1basMBnCA39XnRG64aXupzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFrR2JWdHF3d0djSURmMWVkRWJyaHBlNm5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80ZjlmMjktYTAzZS00YzQ1LTgyY2Qt
MThmMzQzNDg4Mjg2LzEvZHctSWZUWEU1a01xbkx3emJaZWwyVEdmbk9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC80ZjlmMjktYTAzZS00YzQ1LTgyY2QtMThmMzQzNDg4Mjg2
LzEvWmFrR2JWdHF3d0djSURmMWVkRWJyaHBlNm5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW+EEAwQF
sGnAAwQEsp/QMA0GCSqGSIb3DQEBCwUAA4IBAQA/9Pkyl+nAMWDV7ULRhLiq6jDJ
+tOHl3Nd6DMSzCw4dKiILjvw/rx9HOi7rVABe7f0w8wiZbLqyE3nmO1/R8i4Vfgg
tNSZRe3NM4btFb2KFkh9aXFN8tGbLkxf32xm5prGUbbFxM4kd68kkKOxXExWb4Ds
NCn5SY5cf/NAg0IDOpe2ejOVQremhJAq//H0Bx2cUa2/5qb3Pz4uEaOsnx1HX79q
GfzvKUVlTrTnZ+pYmB4i4gViEv68wH69lsD/20yWnnFXWgacbiK+eu2FYZmCnV0r
Ve1gHdqz3lCrmP/TZ5tC5Z87F8wUgQj7CLrm+HyU/cS3iUojsZeozA8qOArZ
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:07:06 2024 by rpki-client on console.sobornost.net