Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e9ee4e-c73a-4c2e-a75f-4d7059219ca8/1/WP-4sBFg2M834_X65c28lUvcGYI.roa
File: WP-4sBFg2M834_X65c28lUvcGYI.roa (raw, json)
Hash identifier: 9h6QehUPOGI4cb/HqKmY+vgf2n/M/VMSr9c0mt4HvUI=
Subject key identifier: 58:FF:B8:B0:11:60:D8:CF:37:E3:F5:FA:E5:CD:BC:95:4B:DC:19:82
Certificate issuer: /CN=ca4307457aafa9c8ad0ada548b145d9db614d949
Certificate serial: 5FDD52
Authority key identifier: CA:43:07:45:7A:AF:A9:C8:AD:0A:DA:54:8B:14:5D:9D:B6:14:D9:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykMHRXqvqcitCtpUixRdnbYU2Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e9ee4e-c73a-4c2e-a75f-4d7059219ca8/1/WP-4sBFg2M834_X65c28lUvcGYI.roa
Signing time: Wed 22 Jun 2022 10:18:32 +0000
ROA not before: Wed 22 Jun 2022 10:18:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60203
IP address blocks: 171.22.10.0/24 maxlen: 24
171.22.8.0/24 maxlen: 24
171.22.11.0/24 maxlen: 24
171.22.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6282578 (0x5fdd52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca4307457aafa9c8ad0ada548b145d9db614d949
Validity
Not Before: Jun 22 10:18:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58ffb8b01160d8cf37e3f5fae5cdbc954bdc1982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:90:37:53:8d:20:5a:ed:0a:cf:7e:28:92:
f9:d3:e3:f2:22:48:8f:2e:26:04:d1:37:38:73:b9:
f4:18:64:d2:1a:36:be:52:2e:07:21:c1:30:e6:ed:
80:0b:97:48:b2:c0:69:b3:b2:d0:7b:f5:3a:d5:aa:
c1:66:c2:7e:50:c6:24:cc:16:d1:62:5c:1b:f3:65:
56:ac:e6:ce:d0:55:41:ab:ad:08:ea:98:49:a1:10:
44:ed:7f:a2:59:6b:a1:d8:85:1a:00:7d:01:dc:fc:
4b:99:06:ff:eb:ae:77:29:5a:26:6e:ab:f5:d2:3b:
39:75:67:88:1f:24:15:29:46:ac:ee:83:a4:b1:68:
e4:b4:ef:3c:bf:09:d2:36:d3:2a:07:e7:96:a9:1f:
55:2e:0c:8c:c6:2a:64:fd:c6:a2:32:45:73:13:64:
d0:74:8b:df:8d:fb:d7:28:c8:c8:bb:f3:45:22:63:
14:21:42:d9:f4:79:a8:b1:9c:3f:d9:0b:a0:bb:4d:
17:f0:84:a4:df:9c:1d:cc:fb:70:b0:93:f7:c4:ad:
95:8f:f9:b1:af:10:fa:a3:7f:36:51:f0:34:43:a3:
18:90:9e:a7:db:ca:d9:1a:5a:3d:0a:1b:ce:ff:e1:
ab:f3:dc:83:21:01:e7:33:91:04:d1:fb:8e:f2:d1:
06:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FF:B8:B0:11:60:D8:CF:37:E3:F5:FA:E5:CD:BC:95:4B:DC:19:82
X509v3 Authority Key Identifier:
keyid:CA:43:07:45:7A:AF:A9:C8:AD:0A:DA:54:8B:14:5D:9D:B6:14:D9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykMHRXqvqcitCtpUixRdnbYU2Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e9ee4e-c73a-4c2e-a75f-4d7059219ca8/1/WP-4sBFg2M834_X65c28lUvcGYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e9ee4e-c73a-4c2e-a75f-4d7059219ca8/1/ykMHRXqvqcitCtpUixRdnbYU2Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.8.0/22
Signature Algorithm: sha256WithRSAEncryption
31:81:3f:fb:07:1a:b9:62:f9:6f:5f:80:7f:cf:41:40:c6:b1:
d9:ea:8c:d2:2e:29:39:eb:9e:d1:32:eb:3d:84:0c:52:72:bf:
9c:60:c0:e1:cf:3d:92:70:5b:42:ae:c7:7e:3a:ad:b1:7e:1a:
a9:17:1d:b0:fa:4b:cf:9e:ba:11:cd:f7:ba:da:79:dd:61:19:
31:70:37:87:ed:5e:a4:c8:a9:2f:e4:88:a1:9e:94:94:79:a1:
15:7e:21:14:88:eb:fe:b6:27:08:32:1f:be:57:21:d6:be:fe:
1f:47:cf:31:9a:88:b3:c7:28:fc:a5:84:84:8c:30:0f:08:3e:
a7:68:ee:41:28:a9:94:f5:81:8a:ac:9f:15:44:6e:ec:d6:48:
f1:27:d8:0f:e2:fb:d4:b5:d8:95:90:86:4d:d1:3b:b3:0b:51:
2e:cc:10:95:3e:e4:ec:52:c4:20:f1:a9:42:8c:e4:4f:d8:38:
4f:bf:39:68:c2:07:95:67:13:e4:1c:55:17:1f:18:1f:e3:23:
c3:5e:a0:6c:03:cd:27:3c:0e:36:d9:e5:0d:95:11:34:47:e0:
51:f5:f3:00:23:81:7d:46:3d:d1:13:9d:bc:20:7d:13:3c:ff:
87:16:e3:23:a7:d1:9b:97:c8:b0:f1:16:c2:14:c2:0c:fb:b6:
b2:de:9e:3a
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDX91SMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNh
NDMwNzQ1N2FhZmE5YzhhZDBhZGE1NDhiMTQ1ZDlkYjYxNGQ5NDkwHhcNMjIwNjIy
MTAxODMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1OGZmYjhiMDExNjBk
OGNmMzdlM2Y1ZmFlNWNkYmM5NTRiZGMxOTgyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAw+2QN1ONIFrtCs9+KJL50+PyIkiPLiYE0Tc4c7n0GGTSGja+
Ui4HIcEw5u2AC5dIssBps7LQe/U61arBZsJ+UMYkzBbRYlwb82VWrObO0FVBq60I
6phJoRBE7X+iWWuh2IUaAH0B3PxLmQb/6653KVombqv10js5dWeIHyQVKUas7oOk
sWjktO88vwnSNtMqB+eWqR9VLgyMxipk/caiMkVzE2TQdIvfjfvXKMjIu/NFImMU
IULZ9HmosZw/2Qugu00X8ISk35wdzPtwsJP3xK2Vj/mxrxD6o382UfA0Q6MYkJ6n
28rZGlo9ChvO/+Gr89yDIQHnM5EE0fuO8tEG+QIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFFj/uLARYNjPN+P1+uXNvJVL3BmCMB8GA1UdIwQYMBaAFMpDB0V6r6nIrQra
VIsUXZ22FNlJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
eWtNSFJYcXZxY2l0Q3RwVWl4UmRuYllVMlVrLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hOC9lOWVlNGUtYzczYS00YzJlLWE3NWYtNGQ3MDU5MjE5Y2E4LzEv
V1AtNHNCRmcyTTgzNF9YNjVjMjhsVXZjR1lJLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9l
OWVlNGUtYzczYS00YzJlLWE3NWYtNGQ3MDU5MjE5Y2E4LzEveWtNSFJYcXZxY2l0
Q3RwVWl4UmRuYllVMlVrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqxYIMA0GCSqGSIb3DQEBCwUAA4IB
AQAxgT/7Bxq5YvlvX4B/z0FAxrHZ6ozSLik5657RMus9hAxScr+cYMDhzz2ScFtC
rsd+Oq2xfhqpFx2w+kvPnroRzfe62nndYRkxcDeH7V6kyKkv5IihnpSUeaEVfiEU
iOv+ticIMh++VyHWvv4fR88xmoizxyj8pYSEjDAPCD6naO5BKKmU9YGKrJ8VRG7s
1kjxJ9gP4vvUtdiVkIZN0TuzC1EuzBCVPuTsUsQg8alCjORP2DhPvzlowgeVZxPk
HFUXHxgf4yPDXqBsA80nPA422eUNlRE0R+BR9fMAI4F9Rj3RE528IH0TPP+HFuMj
p9Gbl8iw8RbCFMIM+7ay3p46
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:55 2024 by rpki-client on console-fra.rpki-client.org