Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/WGutzI0D2wYmObhK_iJBD9xZYQQ.roa
File: WGutzI0D2wYmObhK_iJBD9xZYQQ.roa (raw, json)
Hash identifier: pxwKq68hgktmEJqSZuUx7+AR//ogb+dhnkJKpGD+X5Y=
Subject key identifier: 58:6B:AD:CC:8D:03:DB:06:26:39:B8:4A:FE:22:41:0F:DC:59:61:04
Certificate issuer: /CN=caeed2e1bb505049adb39884436cf2cb3e745224
Certificate serial: 018D84300439857E8B593B0E162087489FA2
Authority key identifier: CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu7S4btQUEmts5iEQ2zyyz50UiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/WGutzI0D2wYmObhK_iJBD9xZYQQ.roa
Signing time: Wed 07 Feb 2024 15:29:15 +0000
ROA not before: Wed 07 Feb 2024 15:29:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 62.68.87.0/24 maxlen: 24
80.68.158.0/24 maxlen: 24
146.19.190.0/24 maxlen: 24
185.155.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:30:04:39:85:7e:8b:59:3b:0e:16:20:87:48:9f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caeed2e1bb505049adb39884436cf2cb3e745224
Validity
Not Before: Feb 7 15:29:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=586badcc8d03db062639b84afe22410fdc596104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:d5:79:db:c6:00:60:6a:64:9a:eb:b6:c8:
87:21:6f:50:8d:3a:8a:08:28:b2:8b:71:e6:4f:29:
23:dc:e1:9b:dc:dd:a7:1e:9b:c8:bc:2f:49:b2:0d:
51:f0:bb:fa:04:43:dd:63:e9:e4:33:b4:5c:cf:88:
b8:07:26:db:71:a6:88:d4:67:0b:02:d4:6a:d3:02:
d5:7d:45:b3:9f:30:e6:31:07:ba:2f:a8:5b:02:ea:
96:6f:2f:c4:76:57:90:43:13:29:a3:cd:3e:2c:f5:
50:44:24:ae:9a:31:76:c8:9c:da:d0:a1:1c:4d:61:
62:41:6f:88:aa:d1:f0:81:62:a3:6a:05:bf:d5:75:
47:13:bb:17:48:28:a6:70:94:46:bd:e3:f8:ae:a0:
1f:42:e2:c5:e1:bb:31:4e:f5:ba:9c:f5:1a:22:e9:
b8:79:10:94:1e:3f:21:6f:40:58:a3:13:71:c3:7c:
af:a3:59:4d:c8:e7:24:0b:64:18:dd:cf:fb:e4:94:
2a:4a:ea:fa:e7:01:16:8a:d3:42:cc:2c:71:d3:58:
da:fe:02:f5:58:75:aa:37:49:91:79:fb:2d:5e:42:
bd:9d:84:d2:7d:51:17:aa:12:f5:cb:08:bb:2a:a8:
3c:64:af:6b:cc:31:e1:da:6e:28:9d:f0:bd:ed:f0:
6a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6B:AD:CC:8D:03:DB:06:26:39:B8:4A:FE:22:41:0F:DC:59:61:04
X509v3 Authority Key Identifier:
keyid:CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu7S4btQUEmts5iEQ2zyyz50UiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/WGutzI0D2wYmObhK_iJBD9xZYQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/yu7S4btQUEmts5iEQ2zyyz50UiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.87.0/24
80.68.158.0/24
146.19.190.0/24
185.155.101.0/24
Signature Algorithm: sha256WithRSAEncryption
38:f4:3f:90:fb:4b:b3:55:1b:bc:20:40:05:af:1f:2a:2f:21:
06:9c:d8:c9:c5:1c:00:ee:83:82:a6:d4:b5:23:01:5a:5e:bf:
de:3a:b1:e8:73:71:67:88:1b:67:fc:bd:5b:d5:1c:e6:86:29:
ff:fc:7f:9d:4e:e7:f0:32:d6:f5:3c:59:d3:d6:d1:d3:5f:15:
0b:08:ac:40:89:69:fe:ff:99:d8:3a:1f:b9:4b:3f:a2:3e:63:
5b:8f:2b:80:ba:64:90:95:6f:79:4c:b2:55:dc:8f:43:8e:87:
88:1a:34:e9:52:bf:92:1e:06:15:c3:19:af:26:4a:f8:d9:7d:
4b:f1:aa:e9:32:72:6a:b0:83:62:76:e5:45:a7:d7:b0:0f:65:
0b:4f:ce:03:8f:1e:0c:ff:19:93:b6:95:e0:69:95:3c:bb:c4:
5c:e0:12:df:ba:47:25:db:af:e4:0d:40:d7:56:23:b6:99:72:
f0:1b:7c:13:3e:36:72:17:81:28:cd:53:96:f6:f8:1b:cb:56:
36:cb:9a:06:34:6b:45:22:88:3a:58:62:93:ed:6b:38:02:26:
6a:27:00:79:0d:15:d7:19:a6:66:5d:35:f6:ab:5c:ce:21:e7:
b2:3c:59:20:a8:78:ec:91:e6:9c:41:3c:14:e1:9d:69:ef:89:
d8:78:2c:a5
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY2EMAQ5hX6LWTsOFiCHSJ+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZWVkMmUxYmI1MDUwNDlhZGIzOTg4NDQzNmNmMmNiM2U3
NDUyMjQwHhcNMjQwMjA3MTUyOTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODZiYWRjYzhkMDNkYjA2MjYzOWI4NGFmZTIyNDEwZmRjNTk2MTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2XVedvGAGBqZJrrtsiHIW9QjTqK
CCiyi3HmTykj3OGb3N2nHpvIvC9Jsg1R8Lv6BEPdY+nkM7Rcz4i4BybbcaaI1GcL
AtRq0wLVfUWznzDmMQe6L6hbAuqWby/EdleQQxMpo80+LPVQRCSumjF2yJza0KEc
TWFiQW+IqtHwgWKjagW/1XVHE7sXSCimcJRGveP4rqAfQuLF4bsxTvW6nPUaIum4
eRCUHj8hb0BYoxNxw3yvo1lNyOckC2QY3c/75JQqSur65wEWitNCzCxx01ja/gL1
WHWqN0mRefstXkK9nYTSfVEXqhL1ywi7Kqg8ZK9rzDHh2m4onfC97fBqowIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFhrrcyNA9sGJjm4Sv4iQQ/cWWEEMB8GA1UdIwQY
MBaAFMru0uG7UFBJrbOYhENs8ss+dFIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXU3UzRidFFVRW10czVpRVEyenl5ejUwVWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iYmNmYWEtN2M0NS00OTM1LTkxNTkt
ZGRlNzY5ZDdhZGU5LzEvV0d1dHpJMEQyd1ltT2JoS19pSkJEOXhaWVFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9iYmNmYWEtN2M0NS00OTM1LTkxNTktZGRlNzY5ZDdhZGU5
LzEveXU3UzRidFFVRW10czVpRVEyenl5ejUwVWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPkRXAwQA
UESeAwQAkhO+AwQAuZtlMA0GCSqGSIb3DQEBCwUAA4IBAQA49D+Q+0uzVRu8IEAF
rx8qLyEGnNjJxRwA7oOCptS1IwFaXr/eOrHoc3FniBtn/L1b1Rzmhin//H+dTufw
Mtb1PFnT1tHTXxULCKxAiWn+/5nYOh+5Sz+iPmNbjyuAumSQlW95TLJV3I9DjoeI
GjTpUr+SHgYVwxmvJkr42X1L8arpMnJqsINiduVFp9ewD2ULT84Djx4M/xmTtpXg
aZU8u8Rc4BLfukcl26/kDUDXViO2mXLwG3wTPjZyF4EozVOW9vgby1Y2y5oGNGtF
Iog6WGKT7Ws4AiZqJwB5DRXXGaZmXTX2q1zOIeeyPFkgqHjskeacQTwU4Z1p74nY
eCyl
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:40 2024 by rpki-client on console-ams.rpki-client.org