Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/W6Ioh9f_F_yTq_ifyLhZ2I9J_eg.roa
File: W6Ioh9f_F_yTq_ifyLhZ2I9J_eg.roa (raw, json)
Hash identifier: 0AYdCU+2EoHa9imJYFnN5tUcgW8kUAqpr7Pz8/smrcQ=
Subject key identifier: 5B:A2:28:87:D7:FF:17:FC:93:AB:F8:9F:C8:B8:59:D8:8F:49:FD:E8
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01840B35AA782DE89F0C164DC7DEAAEC05B9
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/W6Ioh9f_F_yTq_ifyLhZ2I9J_eg.roa
Signing time: Mon 24 Oct 2022 18:16:17 +0000
ROA not before: Mon 24 Oct 2022 18:16:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60602
IP address blocks: 5.181.176.0/23 maxlen: 24
45.91.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0b:35:aa:78:2d:e8:9f:0c:16:4d:c7:de:aa:ec:05:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Oct 24 18:16:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ba22887d7ff17fc93abf89fc8b859d88f49fde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:8c:a3:ea:59:d7:47:4d:9e:0a:70:db:87:
9c:65:28:a4:4a:25:1f:f3:c9:e0:97:d6:fe:d7:7d:
64:2f:45:8a:13:c7:aa:21:cb:a7:69:ea:8a:5a:e7:
d0:dc:07:c9:1f:6c:f0:88:c0:2f:aa:24:d4:f3:af:
9c:b1:70:35:be:e2:6b:38:fe:7e:f2:95:a5:c2:d5:
f6:54:73:28:e8:8d:38:2d:56:f2:3a:12:75:36:d3:
86:35:7a:27:ea:32:02:91:c5:35:36:5d:1a:0c:4c:
46:c3:8f:05:ec:31:3b:1d:2f:b6:f3:cb:b1:04:f7:
b7:fe:d6:62:01:0e:d9:2d:0f:03:38:d1:c8:cc:98:
45:c0:c6:d6:dc:61:4a:bd:af:a9:1d:04:e6:a0:6a:
fc:e7:97:90:6b:d2:95:cc:a4:5f:d9:d9:13:91:fd:
e5:5b:02:a6:e7:11:20:3a:88:9d:7c:71:06:7e:44:
2e:c8:4d:7b:a1:a8:1b:3d:8f:22:11:ea:23:92:e2:
f8:47:ce:ef:14:3b:40:9b:83:db:b9:5c:b0:96:b3:
ab:14:6d:35:58:8a:b0:2d:91:58:20:10:8b:4c:92:
d9:38:63:1b:ec:c0:8e:53:6c:94:65:36:b7:a4:48:
45:eb:59:5d:f7:20:6b:2f:96:a2:53:97:96:de:15:
00:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A2:28:87:D7:FF:17:FC:93:AB:F8:9F:C8:B8:59:D8:8F:49:FD:E8
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/W6Ioh9f_F_yTq_ifyLhZ2I9J_eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.176.0/23
45.91.138.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:e8:f1:de:0f:57:eb:a2:fa:d8:98:c1:ae:5c:b6:52:be:42:
e7:4e:72:76:d7:af:f9:5c:49:06:f8:e3:19:53:37:91:d8:fc:
5c:d9:28:e7:e3:53:43:f6:c0:97:7a:61:44:dd:52:db:9d:23:
95:7a:31:b9:1c:17:c8:04:7d:bc:9d:15:56:63:e7:50:32:38:
9d:40:08:10:05:ae:6a:3f:b5:a5:ab:d1:7f:0d:1b:fe:ee:5b:
7a:55:60:fc:a8:a3:ba:e6:0b:ee:79:33:1b:70:bd:73:e7:dc:
b2:45:22:77:78:b8:4a:61:71:39:2f:70:f4:72:f8:07:bb:da:
8b:fe:b3:58:45:81:20:d8:20:0d:56:be:50:71:e6:00:ed:ca:
c7:c5:6a:69:4e:74:52:0a:0e:e9:56:1d:10:a4:d1:46:c6:f6:
5c:43:27:ce:d7:24:d2:b3:7f:3c:73:8f:4b:50:c3:3f:72:e8:
3d:0e:5b:24:56:d5:14:cd:00:8f:81:81:c5:8f:8e:ba:9f:36:
0f:8c:34:13:4c:c3:37:4b:0f:c6:3d:3d:b8:2e:ed:19:65:a0:
ef:8b:93:3f:87:26:af:3f:9f:26:dd:6b:e0:60:ef:19:56:72:
b2:90:ce:be:7d:c3:7d:a2:d4:03:55:fe:75:45:fc:54:0a:6c:
b8:a8:40:8f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQLNap4LeifDBZNx96q7AW5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjIxMDI0MTgxNjE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmEyMjg4N2Q3ZmYxN2ZjOTNhYmY4OWZjOGI4NTlkODhmNDlmZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMyMo+pZ10dNngpw24ecZSikSiUf
88ngl9b+131kL0WKE8eqIcunaeqKWufQ3AfJH2zwiMAvqiTU86+csXA1vuJrOP5+
8pWlwtX2VHMo6I04LVbyOhJ1NtOGNXon6jICkcU1Nl0aDExGw48F7DE7HS+288ux
BPe3/tZiAQ7ZLQ8DONHIzJhFwMbW3GFKva+pHQTmoGr855eQa9KVzKRf2dkTkf3l
WwKm5xEgOoidfHEGfkQuyE17oagbPY8iEeojkuL4R87vFDtAm4PbuVywlrOrFG01
WIqwLZFYIBCLTJLZOGMb7MCOU2yUZTa3pEhF61ld9yBrL5aiU5eW3hUAVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFuiKIfX/xf8k6v4n8i4WdiPSf3oMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvVzZJb2g5Zl9GX3lUcV9pZnlMaFoySTlKX2VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBbWwAwQB
LVuKMA0GCSqGSIb3DQEBCwUAA4IBAQDF6PHeD1frovrYmMGuXLZSvkLnTnJ216/5
XEkG+OMZUzeR2Pxc2Sjn41ND9sCXemFE3VLbnSOVejG5HBfIBH28nRVWY+dQMjid
QAgQBa5qP7Wlq9F/DRv+7lt6VWD8qKO65gvueTMbcL1z59yyRSJ3eLhKYXE5L3D0
cvgHu9qL/rNYRYEg2CANVr5QceYA7crHxWppTnRSCg7pVh0QpNFGxvZcQyfO1yTS
s388c49LUMM/cug9DlskVtUUzQCPgYHFj466nzYPjDQTTMM3Sw/GPT24Lu0ZZaDv
i5M/hyavP58m3WvgYO8ZVnKykM6+fcN9otQDVf51RfxUCmy4qECP
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org