Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/wyHY7EVURTLBfZQxdQsbkp-4nvg.roa
File: wyHY7EVURTLBfZQxdQsbkp-4nvg.roa (raw, json)
Hash identifier: qFKlBbMNgM7Eg3ULutLE9175zanUtRyD0hxwK1Ye1nU=
Subject key identifier: C3:21:D8:EC:45:54:45:32:C1:7D:94:31:75:0B:1B:92:9F:B8:9E:F8
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 018CC86F8629E53450148EE6352A56FD262B
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/wyHY7EVURTLBfZQxdQsbkp-4nvg.roa
Signing time: Tue 02 Jan 2024 04:30:01 +0000
ROA not before: Tue 02 Jan 2024 04:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41994
IP address blocks: 212.163.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:86:29:e5:34:50:14:8e:e6:35:2a:56:fd:26:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Jan 2 04:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c321d8ec45544532c17d9431750b1b929fb89ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bc:32:65:3a:07:ef:5f:e6:b5:a9:7e:50:56:
a4:9c:fa:0f:77:e5:63:d8:4a:9a:d0:b4:30:fc:bb:
e9:b0:8a:3c:5d:f9:b9:07:1c:c0:71:04:4e:95:7d:
31:31:2c:df:31:82:0b:ce:3f:89:64:01:75:6c:ce:
e7:ef:13:bf:fd:22:37:35:c9:92:da:54:0b:51:f7:
d5:86:78:ac:5b:5f:be:71:b9:07:b1:19:ed:3b:2e:
3a:d3:38:77:71:5c:b4:25:62:d5:12:bb:f4:c2:35:
9b:1f:4e:95:95:81:db:72:94:10:d5:61:6b:bf:29:
5b:fd:5f:d8:a5:e9:35:b1:a8:fc:6d:8d:c0:01:72:
5f:e4:cb:02:48:a8:67:64:b7:9f:f2:59:25:6a:3e:
22:79:b4:4e:6e:ac:0e:53:3a:d3:d2:ed:cc:f2:7e:
a6:7a:b0:db:fd:b2:4d:77:7e:de:51:8e:ef:84:74:
cf:83:70:11:4c:6f:e9:e3:26:cf:5f:09:17:5e:a3:
9c:0e:6e:c0:44:08:54:56:3f:d2:53:a9:f2:03:1e:
d8:72:89:06:6d:74:58:24:87:2a:37:e9:06:03:3e:
5f:e5:ec:9c:b6:e8:bb:93:48:b7:c9:73:d2:20:1d:
36:26:a4:0a:c4:db:a0:84:3d:51:f1:45:ef:be:b5:
d0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:21:D8:EC:45:54:45:32:C1:7D:94:31:75:0B:1B:92:9F:B8:9E:F8
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/wyHY7EVURTLBfZQxdQsbkp-4nvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.163.10.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d7:62:9b:c9:7b:4a:b9:25:73:e1:3c:fe:9a:d3:da:cc:00:
35:60:2f:8b:3d:a6:18:35:56:40:9a:e0:a1:94:ec:3d:22:73:
d4:f0:73:f8:5c:d4:80:82:3f:fc:73:e3:e5:8e:9f:ec:bb:a9:
ee:4c:78:56:06:75:3f:af:9c:0f:da:02:90:ee:00:14:b6:53:
99:db:35:de:47:9d:a3:79:8e:73:1f:f5:21:2c:c5:da:cb:97:
2a:f2:9b:44:1f:88:f3:31:22:4e:e0:9d:54:b2:3d:6c:97:5c:
ab:2e:e8:49:d2:c8:05:23:45:37:39:f0:7e:90:90:41:fa:a9:
82:86:d2:51:b4:08:25:62:30:dc:7a:f6:84:38:2f:89:e7:1a:
2f:45:86:3d:4a:b9:f3:92:3e:d5:51:d9:1d:71:bc:d9:48:fc:
eb:6b:e6:8d:4e:d1:00:c7:25:4f:77:3b:08:e5:d9:84:7c:8b:
9b:20:9c:04:0e:96:05:bf:7d:56:36:05:70:d5:60:15:c4:39:
c8:e0:70:50:2b:d0:5d:dd:07:4b:33:3d:a9:38:5c:96:5e:16:
4c:cc:6a:52:85:de:75:8d:81:e5:1e:1e:c3:c4:e8:49:8d:16:
cc:4b:d0:9f:9b:41:2f:84:17:a9:2c:82:12:6c:b7:e8:88:f7:
39:f1:98:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb4Yp5TRQFI7mNSpW/SYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmM2U3MWI5Njk5MmRhM2Q5MWM4OGRkNzRlZjQxZjliOTVi
OTQ4NWIwHhcNMjQwMTAyMDQzMDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzIxZDhlYzQ1NTQ0NTMyYzE3ZDk0MzE3NTBiMWI5MjlmYjg5ZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7wyZToH71/mtal+UFaknPoPd+Vj
2Eqa0LQw/LvpsIo8Xfm5BxzAcQROlX0xMSzfMYILzj+JZAF1bM7n7xO//SI3NcmS
2lQLUffVhnisW1++cbkHsRntOy460zh3cVy0JWLVErv0wjWbH06VlYHbcpQQ1WFr
vylb/V/Ypek1saj8bY3AAXJf5MsCSKhnZLef8lklaj4iebRObqwOUzrT0u3M8n6m
erDb/bJNd37eUY7vhHTPg3ARTG/p4ybPXwkXXqOcDm7ARAhUVj/SU6nyAx7YcokG
bXRYJIcqN+kGAz5f5eyctui7k0i3yXPSIB02JqQKxNughD1R8UXvvrXQrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMMh2OxFVEUywX2UMXULG5KfuJ74MB8GA1UdIwQY
MBaAFO8+cblpkto9kciN1070H5uVuUhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3o1eHVXbVMyajJSeUkzWFR2UWZtNVc1U0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hZDRlNTctZDkwMS00NDg1LTk4ZDIt
OTE5NmNlNDQ2NTI3LzEvd3lIWTdFVlVSVExCZlpReGRRc2JrcC00bnZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hZDRlNTctZDkwMS00NDg1LTk4ZDItOTE5NmNlNDQ2NTI3
LzEvN3o1eHVXbVMyajJSeUkzWFR2UWZtNVc1U0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1KMKMA0G
CSqGSIb3DQEBCwUAA4IBAQAB12KbyXtKuSVz4Tz+mtPazAA1YC+LPaYYNVZAmuCh
lOw9InPU8HP4XNSAgj/8c+Pljp/su6nuTHhWBnU/r5wP2gKQ7gAUtlOZ2zXeR52j
eY5zH/UhLMXay5cq8ptEH4jzMSJO4J1Usj1sl1yrLuhJ0sgFI0U3OfB+kJBB+qmC
htJRtAglYjDcevaEOC+J5xovRYY9Srnzkj7VUdkdcbzZSPzra+aNTtEAxyVPdzsI
5dmEfIubIJwEDpYFv31WNgVw1WAVxDnI4HBQK9Bd3QdLMz2pOFyWXhZMzGpShd51
jYHlHh7DxOhJjRbMS9Cfm0EvhBepLIISbLfoiPc58Ziu
-----END CERTIFICATE-----
Generated at Mon Oct 21 13:23:57 2024 by rpki-client on console-ams.rpki-client.org