Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d9e0e2-55c9-4be5-bdbd-b08ac2c01573/1/Wt8ESiZqOnEzoaDQ_IOfmPSc78Y.roa
File: Wt8ESiZqOnEzoaDQ_IOfmPSc78Y.roa (raw, json)
Hash identifier: b3IOV3RLVRIX64/ujTweA948K4Ru/hKzm3yu87X4Ikc=
Subject key identifier: 5A:DF:04:4A:26:6A:3A:71:33:A1:A0:D0:FC:83:9F:98:F4:9C:EF:C6
Certificate issuer: /CN=72b708f840a7544a2d7cb8cd07e22568373ad034
Certificate serial: 01856BC115F1B2401165BDA6970311842BBF
Authority key identifier: 72:B7:08:F8:40:A7:54:4A:2D:7C:B8:CD:07:E2:25:68:37:3A:D0:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crcI-ECnVEotfLjNB-IlaDc60DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d9e0e2-55c9-4be5-bdbd-b08ac2c01573/1/Wt8ESiZqOnEzoaDQ_IOfmPSc78Y.roa
Signing time: Sun 01 Jan 2023 05:14:54 +0000
ROA not before: Sun 01 Jan 2023 05:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51254
IP address blocks: 185.133.124.0/23 maxlen: 23
185.133.124.0/22 maxlen: 22
185.133.126.0/23 maxlen: 23
2a05:25c0::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:15:f1:b2:40:11:65:bd:a6:97:03:11:84:2b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b708f840a7544a2d7cb8cd07e22568373ad034
Validity
Not Before: Jan 1 05:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5adf044a266a3a7133a1a0d0fc839f98f49cefc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d3:e9:4b:86:c2:df:3b:2c:96:e9:0c:db:08:
78:5e:6a:5e:8a:4f:30:79:fd:99:7d:16:cd:17:ec:
0e:74:c5:bd:fd:1c:3b:b5:e9:54:db:b2:67:76:91:
93:a3:8e:b8:ea:e0:9b:a9:4b:26:e0:6c:db:9c:82:
60:81:8d:ac:36:db:26:d2:75:17:7a:52:8c:46:86:
33:30:5e:1c:d6:c7:42:92:eb:e8:3a:b9:ab:2c:26:
a0:bb:80:2d:ed:70:9e:68:cc:0d:89:1b:3a:dd:e3:
48:74:66:da:7d:b4:03:fc:2a:d2:37:af:32:97:30:
7d:a7:a8:af:31:75:6f:3a:f1:8b:1e:7c:69:1b:1b:
09:b6:7b:3d:74:87:1e:b6:a2:17:56:72:7d:23:7f:
10:af:13:3e:2e:6e:ff:03:12:f1:ac:dd:9c:81:9a:
7a:c1:6f:22:83:01:df:c6:16:a7:7c:98:61:5b:d3:
9b:2c:06:86:d8:de:00:ed:2a:f6:78:a0:94:6a:41:
7a:0b:0a:88:36:23:d3:e1:b3:56:6e:71:3c:be:d5:
77:de:67:89:67:4b:16:36:46:bd:e1:2c:87:c6:df:
46:d1:5c:9c:55:a8:52:cc:5f:68:31:5f:98:b1:2b:
f0:e3:76:ef:f7:65:38:89:f2:29:24:b8:2e:5e:41:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DF:04:4A:26:6A:3A:71:33:A1:A0:D0:FC:83:9F:98:F4:9C:EF:C6
X509v3 Authority Key Identifier:
keyid:72:B7:08:F8:40:A7:54:4A:2D:7C:B8:CD:07:E2:25:68:37:3A:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crcI-ECnVEotfLjNB-IlaDc60DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d9e0e2-55c9-4be5-bdbd-b08ac2c01573/1/Wt8ESiZqOnEzoaDQ_IOfmPSc78Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d9e0e2-55c9-4be5-bdbd-b08ac2c01573/1/crcI-ECnVEotfLjNB-IlaDc60DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.124.0/22
IPv6:
2a05:25c0::/36
Signature Algorithm: sha256WithRSAEncryption
2a:65:4f:91:34:bc:2f:dc:3f:73:c8:a4:c6:57:65:f2:38:d7:
73:1d:7d:1d:06:2f:ea:66:cf:f1:b8:28:ca:7c:89:e2:89:07:
30:dc:47:52:e7:5d:55:49:15:96:9a:0e:96:7a:75:ee:f9:a1:
3c:91:32:57:54:ec:9b:76:19:58:94:c1:3d:c8:41:a1:c1:02:
97:a7:03:b5:a7:83:df:95:7e:0e:53:bc:c5:c4:86:cf:74:60:
2d:09:c5:37:ac:6f:22:23:b4:94:53:26:88:9d:1b:82:d5:7c:
3d:c2:3f:46:2e:b1:21:fe:54:db:99:94:c5:3d:f2:9c:b1:7d:
62:0f:27:27:ea:72:10:93:41:04:8c:c0:ec:10:03:54:9b:66:
50:91:a6:c3:61:2e:0d:73:21:15:41:b8:ea:d9:f6:fd:fe:e1:
1a:fd:6a:e6:9d:aa:43:77:16:a5:c9:db:aa:24:99:1f:8e:4b:
13:cd:a3:19:81:15:ea:ee:8b:9f:16:b4:a6:0d:62:fa:a5:04:
6c:56:1e:6e:88:63:d1:4a:12:42:f7:81:e2:e0:37:a4:da:07:
13:78:7d:0a:35:94:3b:05:48:50:01:6d:bb:92:7e:24:0e:99:
00:5b:a5:c2:d3:a7:3e:cd:65:84:fe:46:4d:d7:53:39:a1:21:
53:55:a0:4d
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYVrwRXxskARZb2mlwMRhCu/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjcwOGY4NDBhNzU0NGEyZDdjYjhjZDA3ZTIyNTY4Mzcz
YWQwMzQwHhcNMjMwMTAxMDUxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWRmMDQ0YTI2NmEzYTcxMzNhMWEwZDBmYzgzOWY5OGY0OWNlZmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdPpS4bC3zsslukM2wh4Xmpeik8w
ef2ZfRbNF+wOdMW9/Rw7telU27JndpGTo4646uCbqUsm4GzbnIJggY2sNtsm0nUX
elKMRoYzMF4c1sdCkuvoOrmrLCagu4At7XCeaMwNiRs63eNIdGbafbQD/CrSN68y
lzB9p6ivMXVvOvGLHnxpGxsJtns9dIcetqIXVnJ9I38QrxM+Lm7/AxLxrN2cgZp6
wW8igwHfxhanfJhhW9ObLAaG2N4A7Sr2eKCUakF6CwqINiPT4bNWbnE8vtV33meJ
Z0sWNka94SyHxt9G0VycVahSzF9oMV+YsSvw43bv92U4ifIpJLguXkFH+wIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFFrfBEomajpxM6Gg0PyDn5j0nO/GMB8GA1UdIwQY
MBaAFHK3CPhAp1RKLXy4zQfiJWg3OtA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JjSS1FQ25WRW90ZkxqTkItSWxhRGM2MERRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kOWUwZTItNTVjOS00YmU1LWJkYmQt
YjA4YWMyYzAxNTczLzEvV3Q4RVNpWnFPbkV6b2FEUV9JT2ZtUFNjNzhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9kOWUwZTItNTVjOS00YmU1LWJkYmQtYjA4YWMyYzAxNTcz
LzEvY3JjSS1FQ25WRW90ZkxqTkItSWxhRGM2MERRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCuYV8MA4E
AgACMAgDBgQqBSXAADANBgkqhkiG9w0BAQsFAAOCAQEAKmVPkTS8L9w/c8ikxldl
8jjXcx19HQYv6mbP8bgoynyJ4okHMNxHUuddVUkVlpoOlnp17vmhPJEyV1Tsm3YZ
WJTBPchBocECl6cDtaeD35V+DlO8xcSGz3RgLQnFN6xvIiO0lFMmiJ0bgtV8PcI/
Ri6xIf5U25mUxT3ynLF9Yg8nJ+pyEJNBBIzA7BADVJtmUJGmw2EuDXMhFUG46tn2
/f7hGv1q5p2qQ3cWpcnbqiSZH45LE82jGYEV6u6Lnxa0pg1i+qUEbFYebohj0UoS
QveB4uA3pNoHE3h9CjWUOwVIUAFtu5J+JA6ZAFulwtOnPs1lhP5GTddTOaEhU1Wg
TQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:38 2023 by rpki-client on console-fra.rpki-client.org