Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e6e903-f1dc-459f-b5cf-ddcdbd580b2f/1/wek_4lv_QMVnlYltiQVwQn-E4Z4.roa
File: wek_4lv_QMVnlYltiQVwQn-E4Z4.roa (raw, json)
Hash identifier: /QjAxmyz4qNeQE4iDtRgKMLf51MAxFhO5XPKbw4zuT0=
Subject key identifier: C1:E9:3F:E2:5B:FF:40:C5:67:95:89:6D:89:05:70:42:7F:84:E1:9E
Certificate issuer: /CN=ceb0fbf6f0325f64dee9d9c2787265b93d6b3f5b
Certificate serial: 01856E1448FAA69C0AF5FB498B03A30D943C
Authority key identifier: CE:B0:FB:F6:F0:32:5F:64:DE:E9:D9:C2:78:72:65:B9:3D:6B:3F:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrD79vAyX2Te6dnCeHJluT1rP1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e6e903-f1dc-459f-b5cf-ddcdbd580b2f/1/wek_4lv_QMVnlYltiQVwQn-E4Z4.roa
Signing time: Sun 01 Jan 2023 16:05:01 +0000
ROA not before: Sun 01 Jan 2023 16:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201606
IP address blocks: 185.69.83.0/24 maxlen: 24
185.69.82.0/24 maxlen: 24
185.69.80.0/22 maxlen: 22
185.69.81.0/24 maxlen: 24
185.69.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:48:fa:a6:9c:0a:f5:fb:49:8b:03:a3:0d:94:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb0fbf6f0325f64dee9d9c2787265b93d6b3f5b
Validity
Not Before: Jan 1 16:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1e93fe25bff40c56795896d890570427f84e19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:70:f5:30:cb:b3:51:09:65:b9:4a:f4:4a:
2e:f9:db:79:44:a8:9a:16:94:f9:4c:6b:31:fe:bd:
be:4a:2a:ff:fe:84:a5:4c:c2:34:af:46:28:e2:34:
a9:bd:ee:da:0f:13:a9:e5:33:21:ca:ee:3a:ff:f3:
72:d6:a7:1d:ea:70:59:73:0f:9d:1e:bd:88:e5:e1:
c6:92:85:24:99:03:70:67:d8:c8:ac:e8:06:32:c5:
50:15:23:e4:d7:d5:40:04:dc:c7:3c:3c:74:a4:da:
4b:e5:53:b7:a5:8e:fa:55:e8:ec:79:f6:73:59:77:
d0:14:2e:e5:c6:e4:41:15:34:5c:b1:4f:94:f8:5b:
46:78:cf:3d:b2:ab:f5:d3:66:4e:4c:50:ed:b9:e1:
05:c4:30:91:6f:51:a9:8f:95:c1:59:27:32:8a:68:
cd:f5:25:91:e8:60:bb:39:39:f5:7c:ec:73:89:52:
d4:96:87:47:78:e4:3e:cd:b0:18:12:b5:2d:6b:47:
f6:f5:83:a4:f1:b4:57:89:29:68:79:fd:72:ec:17:
7f:b9:3a:70:09:76:fe:e7:a0:17:de:7d:52:fa:7e:
8f:e8:ff:89:84:27:06:f1:42:4a:19:5d:ac:b4:f7:
5c:64:ac:f2:bc:ae:50:51:94:1a:fd:36:34:90:d3:
46:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E9:3F:E2:5B:FF:40:C5:67:95:89:6D:89:05:70:42:7F:84:E1:9E
X509v3 Authority Key Identifier:
keyid:CE:B0:FB:F6:F0:32:5F:64:DE:E9:D9:C2:78:72:65:B9:3D:6B:3F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrD79vAyX2Te6dnCeHJluT1rP1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e6e903-f1dc-459f-b5cf-ddcdbd580b2f/1/wek_4lv_QMVnlYltiQVwQn-E4Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e6e903-f1dc-459f-b5cf-ddcdbd580b2f/1/zrD79vAyX2Te6dnCeHJluT1rP1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.80.0/22
Signature Algorithm: sha256WithRSAEncryption
09:88:75:f6:db:c6:d1:d3:50:0d:30:5d:b4:93:28:ed:d2:fb:
9f:52:04:32:bb:76:05:a0:e1:92:0b:38:df:3a:0b:a4:7b:9b:
7c:47:f6:4d:3a:17:85:17:71:53:32:24:ca:7d:af:b5:5e:a2:
7e:3d:ec:fa:43:57:0c:f3:81:af:7e:12:91:d7:8a:74:84:73:
d1:e1:70:c7:f9:40:70:00:93:a0:78:ad:17:6e:55:d1:51:b8:
2e:9b:40:ce:f8:ca:90:5a:b4:26:05:9c:2c:54:f2:8b:4d:95:
ae:f4:5d:e2:e3:bf:e7:c2:26:0b:4f:c6:14:9a:66:a4:cb:d3:
6f:c8:f7:04:10:e9:8e:dd:d2:c6:9f:f5:db:01:11:21:c7:3c:
a1:9c:0e:c6:1f:13:a7:40:74:6a:6e:00:77:ec:b2:de:fb:d6:
39:fe:3a:b1:44:ca:dd:2f:30:70:8a:6e:f5:18:f1:08:23:e2:
1c:ba:2d:29:e5:7e:69:f3:5c:60:17:25:13:99:b4:d5:fe:c0:
3a:c6:a8:e2:16:b0:1f:1f:ff:ea:60:5f:b0:3b:57:cf:00:15:
06:8a:f0:11:53:79:45:3e:22:f6:b4:31:da:6a:0b:2e:0a:f2:
40:35:2c:6a:38:2e:07:cc:d7:d5:d9:a1:56:3d:91:14:86:c9:
62:2f:db:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuFEj6ppwK9ftJiwOjDZQ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYjBmYmY2ZjAzMjVmNjRkZWU5ZDljMjc4NzI2NWI5M2Q2
YjNmNWIwHhcNMjMwMTAxMTYwNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWU5M2ZlMjViZmY0MGM1Njc5NTg5NmQ4OTA1NzA0MjdmODRlMTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpJw9TDLs1EJZblK9Eou+dt5RKia
FpT5TGsx/r2+Sir//oSlTMI0r0Yo4jSpve7aDxOp5TMhyu46//Ny1qcd6nBZcw+d
Hr2I5eHGkoUkmQNwZ9jIrOgGMsVQFSPk19VABNzHPDx0pNpL5VO3pY76VejsefZz
WXfQFC7lxuRBFTRcsU+U+FtGeM89sqv102ZOTFDtueEFxDCRb1Gpj5XBWScyimjN
9SWR6GC7OTn1fOxziVLUlodHeOQ+zbAYErUta0f29YOk8bRXiSloef1y7Bd/uTpw
CXb+56AX3n1S+n6P6P+JhCcG8UJKGV2stPdcZKzyvK5QUZQa/TY0kNNG3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMHpP+Jb/0DFZ5WJbYkFcEJ/hOGeMB8GA1UdIwQY
MBaAFM6w+/bwMl9k3unZwnhyZbk9az9bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenJENzl2QXlYMlRlNmRuQ2VISmx1VDFyUDFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lNmU5MDMtZjFkYy00NTlmLWI1Y2Yt
ZGRjZGJkNTgwYjJmLzEvd2VrXzRsdl9RTVZubFlsdGlRVndRbi1FNFo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lNmU5MDMtZjFkYy00NTlmLWI1Y2YtZGRjZGJkNTgwYjJm
LzEvenJENzl2QXlYMlRlNmRuQ2VISmx1VDFyUDFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUVQMA0G
CSqGSIb3DQEBCwUAA4IBAQAJiHX228bR01ANMF20kyjt0vufUgQyu3YFoOGSCzjf
Oguke5t8R/ZNOheFF3FTMiTKfa+1XqJ+Pez6Q1cM84GvfhKR14p0hHPR4XDH+UBw
AJOgeK0XblXRUbgum0DO+MqQWrQmBZwsVPKLTZWu9F3i47/nwiYLT8YUmmaky9Nv
yPcEEOmO3dLGn/XbAREhxzyhnA7GHxOnQHRqbgB37LLe+9Y5/jqxRMrdLzBwim71
GPEII+Icui0p5X5p81xgFyUTmbTV/sA6xqjiFrAfH//qYF+wO1fPABUGivARU3lF
PiL2tDHaagsuCvJANSxqOC4HzNfV2aFWPZEUhsliL9tr
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:33 2024 by rpki-client on console-ams.rpki-client.org