Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f8c327-b127-4764-86f0-8dec1afd8f64/1/W5iv88rxaOPpW2jMjGIgZ1ML30Y.roa
File: W5iv88rxaOPpW2jMjGIgZ1ML30Y.roa (raw, json)
Hash identifier: h0ARyGBqkWXqqAui54dfh50IMXc0DnYEfajBz/NkL3Y=
Subject key identifier: 5B:98:AF:F3:CA:F1:68:E3:E9:5B:68:CC:8C:62:20:67:53:0B:DF:46
Certificate issuer: /CN=7fccabf47090fdbc6adf0b7806290f13241a76e8
Certificate serial: 0406D14F
Authority key identifier: 7F:CC:AB:F4:70:90:FD:BC:6A:DF:0B:78:06:29:0F:13:24:1A:76:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8yr9HCQ_bxq3wt4BikPEyQadug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f8c327-b127-4764-86f0-8dec1afd8f64/1/W5iv88rxaOPpW2jMjGIgZ1ML30Y.roa
Signing time: Sat 01 Jan 2022 09:53:06 +0000
ROA not before: Sat 01 Jan 2022 09:53:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203434
IP address blocks: 45.66.232.0/22 maxlen: 24
2a0f:d5c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67555663 (0x406d14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fccabf47090fdbc6adf0b7806290f13241a76e8
Validity
Not Before: Jan 1 09:53:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b98aff3caf168e3e95b68cc8c622067530bdf46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:2a:df:c7:71:db:f7:ce:63:cb:e1:7b:40:
a4:87:f6:2e:75:07:b3:aa:50:31:97:a3:89:c3:ef:
10:74:d5:39:fa:be:74:ef:0b:76:9f:1e:30:6e:a3:
72:a7:ba:33:23:bc:79:4e:d2:65:0d:2d:96:4e:d7:
0a:e3:62:31:ab:bd:3e:7b:db:ea:6a:1d:8a:3e:ed:
78:d9:f6:6f:c2:3a:e0:b0:5b:2b:64:e9:54:6c:e0:
45:4f:64:9e:23:bc:83:e7:86:02:81:16:5a:17:7d:
52:3a:0a:d9:4d:4c:cb:7a:24:91:7e:ca:4d:a2:1b:
e4:98:c2:9c:af:c4:c2:ec:8a:9d:5b:99:4b:20:27:
20:e7:ad:df:fa:38:0b:ab:a5:2e:c5:4d:2c:c0:29:
98:bd:ce:73:ed:3d:cf:ac:9a:1a:10:d3:82:c4:36:
47:32:e3:dd:48:58:d9:94:1f:47:c2:3f:bf:df:cb:
9e:ed:c4:db:03:76:c7:af:72:f3:af:f4:9a:68:7a:
4c:18:0d:d7:73:fe:ab:90:1f:89:52:90:3a:61:03:
65:5b:7a:68:46:92:08:7f:8e:85:ff:0a:e6:6a:fb:
07:72:eb:48:59:9e:db:74:03:45:d0:7c:fe:3b:36:
e0:44:93:4b:ed:70:80:10:55:55:9a:28:2d:00:9c:
bd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:98:AF:F3:CA:F1:68:E3:E9:5B:68:CC:8C:62:20:67:53:0B:DF:46
X509v3 Authority Key Identifier:
keyid:7F:CC:AB:F4:70:90:FD:BC:6A:DF:0B:78:06:29:0F:13:24:1A:76:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8yr9HCQ_bxq3wt4BikPEyQadug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f8c327-b127-4764-86f0-8dec1afd8f64/1/W5iv88rxaOPpW2jMjGIgZ1ML30Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f8c327-b127-4764-86f0-8dec1afd8f64/1/f8yr9HCQ_bxq3wt4BikPEyQadug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.232.0/22
IPv6:
2a0f:d5c0::/32
Signature Algorithm: sha256WithRSAEncryption
45:b8:dc:ec:4f:4a:fd:20:ed:c0:10:35:e0:b2:14:a9:ba:53:
92:e6:a7:88:8c:2c:e8:f4:3f:e9:d0:b2:ca:47:4c:94:23:22:
13:c5:e7:3e:76:8f:f4:aa:93:7b:46:7b:53:e0:68:67:7e:26:
c5:00:65:cb:4e:97:af:3c:0a:93:d6:a8:70:1f:72:31:46:6d:
b6:fc:d7:aa:7c:51:f4:08:8d:04:15:b4:06:41:a0:79:8c:0e:
21:6b:f4:28:5e:ab:f3:76:1e:f1:c5:55:b3:50:b8:e9:30:28:
cf:64:82:ce:8f:b8:42:4a:2b:35:df:fa:59:19:66:d2:ab:f9:
24:1d:45:35:7f:9e:75:4a:3e:bc:b4:75:03:1a:ed:c7:bc:f8:
99:44:a3:a9:2f:fd:0c:61:d7:82:42:ca:6e:06:f4:10:e2:37:
e0:d5:e7:10:c9:34:f3:62:8e:92:2b:f9:86:6e:02:7b:93:db:
fe:dc:c2:98:86:0b:c2:ad:9f:8c:98:35:2f:f2:0d:64:ce:ef:
db:07:d1:da:76:1c:5b:63:48:8b:be:50:1d:66:e0:e1:73:a8:
24:4e:21:00:57:1d:94:62:3f:ec:87:33:b9:08:4b:75:62:74:
f0:2c:1c:f8:16:cd:ea:a0:1d:25:9f:d4:07:e4:b3:53:06:ba:
e9:b6:dc:04
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBAbRTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZmNjYWJmNDcwOTBmZGJjNmFkZjBiNzgwNjI5MGYxMzI0MWE3NmU4MB4XDTIyMDEw
MTA5NTMwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWI5OGFmZjNjYWYx
NjhlM2U5NWI2OGNjOGM2MjIwNjc1MzBiZGY0NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKEFKt/Hcdv3zmPL4XtApIf2LnUHs6pQMZejicPvEHTVOfq+
dO8Ldp8eMG6jcqe6MyO8eU7SZQ0tlk7XCuNiMau9Pnvb6modij7teNn2b8I64LBb
K2TpVGzgRU9kniO8g+eGAoEWWhd9UjoK2U1My3okkX7KTaIb5JjCnK/EwuyKnVuZ
SyAnIOet3/o4C6ulLsVNLMApmL3Oc+09z6yaGhDTgsQ2RzLj3UhY2ZQfR8I/v9/L
nu3E2wN2x69y86/0mmh6TBgN13P+q5AfiVKQOmEDZVt6aEaSCH+Ohf8K5mr7B3Lr
SFme23QDRdB8/js24ESTS+1wgBBVVZooLQCcvfsCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRbmK/zyvFo4+lbaMyMYiBnUwvfRjAfBgNVHSMEGDAWgBR/zKv0cJD9vGrf
C3gGKQ8TJBp26DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Y4eXI5SENRX2J4cTN3dDRCaWtQRXlRYWR1Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvZjhjMzI3LWIxMjctNDc2NC04NmYwLThkZWMxYWZkOGY2NC8x
L1c1aXY4OHJ4YU9QcFcyak1qR0lnWjFNTDMwWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
ZjhjMzI3LWIxMjctNDc2NC04NmYwLThkZWMxYWZkOGY2NC8xL2Y4eXI5SENRX2J4
cTN3dDRCaWtQRXlRYWR1Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi1C6DANBAIAAjAHAwUAKg/VwDAN
BgkqhkiG9w0BAQsFAAOCAQEARbjc7E9K/SDtwBA14LIUqbpTkuaniIws6PQ/6dCy
ykdMlCMiE8XnPnaP9KqTe0Z7U+BoZ34mxQBly06XrzwKk9aocB9yMUZttvzXqnxR
9AiNBBW0BkGgeYwOIWv0KF6r83Ye8cVVs1C46TAoz2SCzo+4QkorNd/6WRlm0qv5
JB1FNX+edUo+vLR1Axrtx7z4mUSjqS/9DGHXgkLKbgb0EOI34NXnEMk082KOkiv5
hm4Ce5Pb/tzCmIYLwq2fjJg1L/INZM7v2wfR2nYcW2NIi75QHWbg4XOoJE4hAFcd
lGI/7IczuQhLdWJ08Cwc+BbN6qAdJZ/UB+SzUwa66bbcBA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:58 2024 by rpki-client on console-fra.rpki-client.org