Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/WETNvSFCXtKM-jSexA8vk4gbwXc.roa
File: WETNvSFCXtKM-jSexA8vk4gbwXc.roa (raw, json)
Hash identifier: bxGqgXK89IVMaA4q4G6yPwsCr0NVDmauIBBfsiYDNhs=
Subject key identifier: 58:44:CD:BD:21:42:5E:D2:8C:FA:34:9E:C4:0F:2F:93:88:1B:C1:77
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 09514D55
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/WETNvSFCXtKM-jSexA8vk4gbwXc.roa
Signing time: Sat 01 Jan 2022 12:04:05 +0000
ROA not before: Sat 01 Jan 2022 12:04:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212618
IP address blocks: 85.209.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156323157 (0x9514d55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 12:04:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5844cdbd21425ed28cfa349ec40f2f93881bc177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:77:42:06:e1:1c:63:53:bf:5a:cb:24:85:
38:83:68:be:2e:af:8c:21:12:b6:ed:8a:4d:96:e7:
ba:b4:3b:ae:ee:f8:03:a5:27:51:f9:7d:c1:cd:08:
a7:83:75:f6:55:c5:85:89:19:16:50:64:fe:ef:07:
02:c0:da:0f:13:b3:b2:d4:28:11:98:e9:86:12:e4:
52:a3:28:61:08:84:85:58:ed:0d:b0:05:a1:24:07:
0c:c3:28:45:74:6f:35:7a:9d:6e:5b:e3:a0:9b:d1:
39:c6:ad:91:35:36:6d:3e:54:d0:96:41:ef:8e:00:
e2:ac:0a:1f:c9:bd:4f:94:02:35:48:93:77:0c:4a:
b6:da:d9:34:5f:84:cc:bb:eb:27:6a:fc:0f:01:19:
4a:2f:b2:fb:01:f7:87:6d:b9:75:a6:80:15:5f:97:
c8:ee:05:b6:f6:6d:44:41:cf:7e:56:2b:8b:6c:1c:
1e:e9:6e:40:c2:8f:fb:af:c0:7d:26:72:46:7e:02:
bd:8f:6b:1a:8f:56:ea:fa:10:cf:38:34:e1:d4:89:
3c:24:83:9f:5a:e9:ef:0b:83:37:48:dd:f6:61:51:
15:4a:02:d8:be:8a:70:36:3c:fa:40:5d:43:50:52:
a9:d5:d0:3d:73:a4:98:4a:32:f9:d7:f2:af:5c:cf:
88:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:44:CD:BD:21:42:5E:D2:8C:FA:34:9E:C4:0F:2F:93:88:1B:C1:77
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/WETNvSFCXtKM-jSexA8vk4gbwXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.220.0/22
Signature Algorithm: sha256WithRSAEncryption
27:72:d8:72:a1:fb:e2:ba:15:0a:3c:cb:95:e4:21:57:2a:4c:
c1:ba:bb:94:83:36:26:f5:fa:e2:83:5d:da:ce:10:51:b8:ef:
bf:48:05:1a:aa:2a:37:6c:34:79:fd:a4:5d:35:89:ba:7c:e5:
ed:37:48:48:28:3f:e2:4c:17:ec:ff:02:a9:c6:2e:99:a3:e6:
1a:50:69:36:05:f9:87:95:73:3e:77:9d:7b:fb:8e:46:1a:35:
72:d1:b6:14:84:f1:04:81:29:45:e3:dd:25:be:c0:ea:65:47:
cc:9c:04:90:19:4e:9b:29:4e:0e:bc:44:fa:78:ea:46:ce:8d:
38:a6:89:6a:62:98:bd:3f:79:96:fa:51:b9:72:6b:36:67:96:
cc:f9:51:d6:d6:b6:e9:36:10:5c:3a:04:c5:9b:6e:9d:a5:65:
fd:b1:e1:c9:2c:ae:d4:92:12:4a:e9:62:15:64:a8:0a:5d:8b:
14:c0:8a:bb:ac:c5:60:20:af:c4:3d:cf:81:b3:a4:70:7e:af:
da:89:49:e8:6f:a3:44:04:34:c2:3a:3b:20:cf:b1:89:b3:98:
ee:e4:b1:cd:fa:3c:80:4c:3a:f6:a2:be:1c:65:33:64:98:51:
1e:06:9a:87:45:cc:2a:25:e0:c4:64:57:db:54:cf:58:21:62:
b7:b4:df:0b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECVFNVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDRjMjY3ZmE3NTRjZDY1MDllOWY4MDcyNzMxMjNiZWU5NmM1MjVkMB4XDTIyMDEw
MTEyMDQwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTg0NGNkYmQyMTQy
NWVkMjhjZmEzNDllYzQwZjJmOTM4ODFiYzE3NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKVid0IG4RxjU79ayySFOINovi6vjCEStu2KTZbnurQ7ru74
A6UnUfl9wc0Ip4N19lXFhYkZFlBk/u8HAsDaDxOzstQoEZjphhLkUqMoYQiEhVjt
DbAFoSQHDMMoRXRvNXqdblvjoJvROcatkTU2bT5U0JZB744A4qwKH8m9T5QCNUiT
dwxKttrZNF+EzLvrJ2r8DwEZSi+y+wH3h225daaAFV+XyO4FtvZtREHPflYri2wc
HuluQMKP+6/AfSZyRn4CvY9rGo9W6voQzzg04dSJPCSDn1rp7wuDN0jd9mFRFUoC
2L6KcDY8+kBdQ1BSqdXQPXOkmEoy+dfyr1zPiDkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRYRM29IUJe0oz6NJ7EDy+TiBvBdzAfBgNVHSMEGDAWgBSkTCZ/p1TNZQnp
+AcnMSO+6WxSXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BFd21mNmRVeldVSjZmZ0hKekVqdnVsc1VsMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvYWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8x
L1dFVE52U0ZDWHRLTS1qU2V4QTh2azRnYndYYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
YWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8xL3BFd21mNmRVeldV
SjZmZ0hKekVqdnVsc1VsMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlXR3DANBgkqhkiG9w0BAQsFAAOC
AQEAJ3LYcqH74roVCjzLleQhVypMwbq7lIM2JvX64oNd2s4QUbjvv0gFGqoqN2w0
ef2kXTWJunzl7TdISCg/4kwX7P8CqcYumaPmGlBpNgX5h5VzPnede/uORho1ctG2
FITxBIEpRePdJb7A6mVHzJwEkBlOmylODrxE+njqRs6NOKaJamKYvT95lvpRuXJr
NmeWzPlR1ta26TYQXDoExZtunaVl/bHhySyu1JISSuliFWSoCl2LFMCKu6zFYCCv
xD3PgbOkcH6v2olJ6G+jRAQ0wjo7IM+xibOY7uSxzfo8gEw69qK+HGUzZJhRHgaa
h0XMKiXgxGRX21TPWCFit7TfCw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org