Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8f5ef0-9a25-4946-aa71-0d3392a9eb93/1/WVuM-w7aTZB3J-h5Gfa5m7kegw0.roa
File: WVuM-w7aTZB3J-h5Gfa5m7kegw0.roa (raw, json)
Hash identifier: jmXyubfLshEaDQOqs04/ZVZmK8/VYmOKlbX40GzrClI=
Subject key identifier: 59:5B:8C:FB:0E:DA:4D:90:77:27:E8:79:19:F6:B9:9B:B9:1E:83:0D
Certificate issuer: /CN=1196f87d5decfcbf04450b5fcf65b5b345f22464
Certificate serial: 018CC8DEA8A00FF770ED85BB7FCC76B7CC74
Authority key identifier: 11:96:F8:7D:5D:EC:FC:BF:04:45:0B:5F:CF:65:B5:B3:45:F2:24:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EZb4fV3s_L8ERQtfz2W1s0XyJGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8f5ef0-9a25-4946-aa71-0d3392a9eb93/1/WVuM-w7aTZB3J-h5Gfa5m7kegw0.roa
Signing time: Tue 02 Jan 2024 06:31:24 +0000
ROA not before: Tue 02 Jan 2024 06:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209431
IP address blocks: 139.28.100.0/22 maxlen: 24
2a09:540::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:a8:a0:0f:f7:70:ed:85:bb:7f:cc:76:b7:cc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1196f87d5decfcbf04450b5fcf65b5b345f22464
Validity
Not Before: Jan 2 06:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=595b8cfb0eda4d907727e87919f6b99bb91e830d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:06:81:66:27:73:78:9f:35:b6:21:fe:62:26:
43:5d:d5:0c:01:87:6c:96:8d:97:73:a4:52:18:41:
79:f1:7f:d3:a0:90:00:d1:e1:53:30:a4:35:6e:aa:
b0:10:8d:f9:54:1c:9a:54:69:c7:ba:62:62:b9:84:
cd:8b:00:b2:31:2f:d2:3c:9e:de:a6:ca:4b:21:b0:
ec:50:83:24:65:20:cf:a9:ad:6b:55:d1:84:c5:01:
2a:c5:e0:de:d8:84:a2:d8:8e:c2:68:21:c6:11:7b:
84:7b:28:db:35:1c:86:49:6f:88:20:26:36:a4:3e:
de:8a:bd:fa:3e:dc:0e:90:64:97:39:ed:90:ea:22:
53:a9:21:d1:ec:19:9f:0e:72:20:39:bb:57:04:1a:
68:db:bf:e9:64:6c:0e:4b:f4:83:2e:4f:75:2f:8d:
66:f0:a5:47:7f:9d:03:91:06:30:d8:69:44:a0:a0:
2d:5c:45:bb:b7:57:47:3a:3a:d5:6d:90:ba:b7:25:
0f:49:59:2a:18:62:4a:57:05:37:48:48:d3:24:58:
54:57:3f:67:f4:04:54:4d:e3:6a:ab:70:4c:9f:6a:
65:57:36:cb:d6:b6:eb:ed:b0:d9:9a:84:2c:70:7b:
15:cd:b7:54:ec:1f:92:c8:f9:bb:83:57:fe:37:92:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5B:8C:FB:0E:DA:4D:90:77:27:E8:79:19:F6:B9:9B:B9:1E:83:0D
X509v3 Authority Key Identifier:
keyid:11:96:F8:7D:5D:EC:FC:BF:04:45:0B:5F:CF:65:B5:B3:45:F2:24:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EZb4fV3s_L8ERQtfz2W1s0XyJGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8f5ef0-9a25-4946-aa71-0d3392a9eb93/1/WVuM-w7aTZB3J-h5Gfa5m7kegw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8f5ef0-9a25-4946-aa71-0d3392a9eb93/1/EZb4fV3s_L8ERQtfz2W1s0XyJGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.100.0/22
IPv6:
2a09:540::/29
Signature Algorithm: sha256WithRSAEncryption
00:d7:ca:6c:fd:2f:4a:f2:7e:a8:b1:46:fd:3f:8e:89:d8:55:
a6:99:a9:0a:d3:b3:5c:56:d5:c5:20:b2:38:68:a4:9f:55:a1:
42:66:19:db:7a:48:99:39:1d:62:cc:19:f6:e3:32:43:ce:22:
30:3e:8e:63:c0:53:1b:9a:5d:ce:43:d5:3c:d6:29:0e:fe:b3:
fc:ea:6c:ee:e1:d9:8e:31:96:a7:06:c1:37:3a:ba:82:d3:51:
c4:e7:41:d6:2e:06:8f:df:80:88:57:4b:bf:6b:bc:ae:5d:fc:
10:39:67:70:fd:19:2f:bd:15:68:08:6c:53:51:47:52:2f:bd:
5b:99:e8:b4:7b:2e:33:b1:5f:39:0c:6f:db:56:71:7a:0a:c7:
2d:25:15:be:c5:f5:14:4f:d0:8b:fb:84:c3:19:72:20:1c:a2:
30:87:7a:f5:8c:41:31:c1:e6:09:0c:ba:62:f3:2e:79:77:fd:
ac:75:a1:53:4c:44:3f:3f:b9:38:5e:b6:43:36:90:6e:4e:7a:
65:cf:15:0e:10:df:7d:75:52:4c:d3:0a:3f:3b:d1:2a:a0:0e:
c2:b6:7f:df:e5:e2:a3:b0:c5:d5:79:8e:77:6b:b7:5f:18:e0:
2f:fe:ca:1d:ef:d6:1d:7c:0f:cf:8d:69:30:6d:9f:07:ca:9e:
98:06:9d:86
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzI3qigD/dw7YW7f8x2t8x0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExOTZmODdkNWRlY2ZjYmYwNDQ1MGI1ZmNmNjViNWIzNDVm
MjI0NjQwHhcNMjQwMTAyMDYzMTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTViOGNmYjBlZGE0ZDkwNzcyN2U4NzkxOWY2Yjk5YmI5MWU4MzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAaBZidzeJ81tiH+YiZDXdUMAYds
lo2Xc6RSGEF58X/ToJAA0eFTMKQ1bqqwEI35VByaVGnHumJiuYTNiwCyMS/SPJ7e
pspLIbDsUIMkZSDPqa1rVdGExQEqxeDe2ISi2I7CaCHGEXuEeyjbNRyGSW+IICY2
pD7eir36PtwOkGSXOe2Q6iJTqSHR7BmfDnIgObtXBBpo27/pZGwOS/SDLk91L41m
8KVHf50DkQYw2GlEoKAtXEW7t1dHOjrVbZC6tyUPSVkqGGJKVwU3SEjTJFhUVz9n
9ARUTeNqq3BMn2plVzbL1rbr7bDZmoQscHsVzbdU7B+SyPm7g1f+N5K8GwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFlbjPsO2k2QdyfoeRn2uZu5HoMNMB8GA1UdIwQY
MBaAFBGW+H1d7Py/BEULX89ltbNF8iRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVpiNGZWM3NfTDhFUlF0ZnoyVzFzMFh5SkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84ZjVlZjAtOWEyNS00OTQ2LWFhNzEt
MGQzMzkyYTllYjkzLzEvV1Z1TS13N2FUWkIzSi1oNUdmYTVtN2tlZ3cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84ZjVlZjAtOWEyNS00OTQ2LWFhNzEtMGQzMzkyYTllYjkz
LzEvRVpiNGZWM3NfTDhFUlF0ZnoyVzFzMFh5SkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCixxkMA0E
AgACMAcDBQMqCQVAMA0GCSqGSIb3DQEBCwUAA4IBAQAA18ps/S9K8n6osUb9P46J
2FWmmakK07NcVtXFILI4aKSfVaFCZhnbekiZOR1izBn24zJDziIwPo5jwFMbml3O
Q9U81ikO/rP86mzu4dmOMZanBsE3OrqC01HE50HWLgaP34CIV0u/a7yuXfwQOWdw
/RkvvRVoCGxTUUdSL71bmei0ey4zsV85DG/bVnF6CsctJRW+xfUUT9CL+4TDGXIg
HKIwh3r1jEExweYJDLpi8y55d/2sdaFTTEQ/P7k4XrZDNpBuTnplzxUOEN99dVJM
0wo/O9EqoA7Ctn/f5eKjsMXVeY53a7dfGOAv/sod79YdfA/PjWkwbZ8Hyp6YBp2G
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:51 2024 by rpki-client on console-fra.rpki-client.org