Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/833ead-0351-4e01-8287-9657ae7529f0/1/WHZENVOJWSW2EH45tktPwmg_kbw.roa
File: WHZENVOJWSW2EH45tktPwmg_kbw.roa (raw, json)
Hash identifier: +14i5Aw0wmFv7UnuqHdAftqkMyvy+jM7L6D+OlWdnRE=
Subject key identifier: 58:76:44:35:53:89:59:25:B6:10:7E:39:B6:4B:4F:C2:68:3F:91:BC
Certificate issuer: /CN=3228eaf9e5d2430e7922bae794b698c86a8e87cb
Certificate serial: 01857227F510CC428FADEA55B7A3D5C96735
Authority key identifier: 32:28:EA:F9:E5:D2:43:0E:79:22:BA:E7:94:B6:98:C8:6A:8E:87:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mijq-eXSQw55IrrnlLaYyGqOh8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/833ead-0351-4e01-8287-9657ae7529f0/1/WHZENVOJWSW2EH45tktPwmg_kbw.roa
Signing time: Mon 02 Jan 2023 11:04:59 +0000
ROA not before: Mon 02 Jan 2023 11:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59878
IP address blocks: 93.115.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:f5:10:cc:42:8f:ad:ea:55:b7:a3:d5:c9:67:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3228eaf9e5d2430e7922bae794b698c86a8e87cb
Validity
Not Before: Jan 2 11:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5876443553895925b6107e39b64b4fc2683f91bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:8d:b1:6d:38:bf:8e:d2:58:6e:dd:77:83:
e3:3a:ff:fb:f6:c7:05:d0:11:d2:77:92:64:29:ac:
d4:b5:ff:9c:6d:5d:a4:97:93:88:39:04:9d:f7:dd:
44:12:c6:d4:7e:7a:ad:c7:88:9d:59:48:6f:cd:4c:
7a:00:cd:42:09:04:71:b5:40:03:66:bf:c7:da:de:
7e:42:17:e9:77:0e:f5:34:77:e6:14:92:97:fa:e3:
c0:86:1f:af:e4:68:33:f5:e4:fa:f7:ee:c0:6f:bc:
7b:29:d4:5a:0a:be:79:35:4a:ef:b0:7e:a6:6e:0f:
0d:1b:48:ad:30:22:ef:04:8e:11:4e:2f:33:bd:0b:
a4:6e:70:b2:b9:b2:de:de:ed:f6:25:e3:d0:21:59:
6b:68:b1:b1:79:32:af:d4:28:70:8a:67:6a:9a:0e:
e6:b8:d4:eb:d8:7a:6a:59:76:9a:34:89:0c:b3:47:
a2:5d:8c:50:f7:27:a8:6b:05:0e:69:ea:5b:51:47:
07:18:0c:95:27:a5:58:5b:4f:c1:f5:32:4a:b0:3a:
d2:10:da:85:b7:c0:ce:7e:21:f9:12:e3:86:e7:c0:
c2:ed:c1:4e:6d:6f:dc:b4:b0:8d:b7:97:50:57:0f:
f5:56:41:02:0e:3d:62:17:08:f1:77:23:40:25:3d:
e2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:76:44:35:53:89:59:25:B6:10:7E:39:B6:4B:4F:C2:68:3F:91:BC
X509v3 Authority Key Identifier:
keyid:32:28:EA:F9:E5:D2:43:0E:79:22:BA:E7:94:B6:98:C8:6A:8E:87:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mijq-eXSQw55IrrnlLaYyGqOh8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/833ead-0351-4e01-8287-9657ae7529f0/1/WHZENVOJWSW2EH45tktPwmg_kbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/833ead-0351-4e01-8287-9657ae7529f0/1/Mijq-eXSQw55IrrnlLaYyGqOh8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.16.0/23
Signature Algorithm: sha256WithRSAEncryption
07:9c:41:a7:33:c8:02:63:c7:49:72:05:99:f1:61:87:cc:92:
62:86:26:fb:f3:c1:9e:88:16:bc:c0:83:d2:5f:6d:4e:a8:28:
d3:ad:be:16:51:28:c0:83:87:03:f6:f1:5b:f9:33:22:9b:be:
e6:3b:da:91:6c:1c:d2:87:46:10:4a:17:5e:e6:11:aa:37:bd:
ca:a2:ac:8f:53:cd:56:a3:16:50:5d:e6:16:82:2d:9a:95:67:
88:96:f3:af:9c:52:9b:69:8a:79:10:ec:8e:c8:00:e7:05:01:
9e:10:e7:28:f2:19:ae:47:68:28:5d:06:57:82:28:b7:13:1b:
bd:ad:93:8c:d3:42:20:f9:26:10:94:45:b4:76:31:cd:51:67:
09:ec:b3:ae:92:dc:8e:9d:9c:7f:78:c8:01:e4:27:f7:f0:05:
fd:c1:8a:0f:64:bb:1f:c5:fa:d1:7b:4c:4c:35:54:a4:78:b3:
f2:ec:6f:d8:6f:ba:f0:6c:0e:d7:74:7e:a7:2d:3d:81:cf:aa:
88:74:5a:13:24:4d:b9:42:c3:0e:18:bf:aa:f0:9b:cd:86:8c:
1a:7a:a1:d0:c1:38:7d:6a:3f:c3:11:ea:da:74:82:87:78:fb:
3f:4c:74:79:af:91:19:14:9b:25:e0:ff:34:7d:d6:10:4c:0d:
aa:61:b7:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyJ/UQzEKPrepVt6PVyWc1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMjhlYWY5ZTVkMjQzMGU3OTIyYmFlNzk0YjY5OGM4NmE4
ZTg3Y2IwHhcNMjMwMTAyMTEwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODc2NDQzNTUzODk1OTI1YjYxMDdlMzliNjRiNGZjMjY4M2Y5MWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b+NsW04v47SWG7dd4PjOv/79scF
0BHSd5JkKazUtf+cbV2kl5OIOQSd991EEsbUfnqtx4idWUhvzUx6AM1CCQRxtUAD
Zr/H2t5+Qhfpdw71NHfmFJKX+uPAhh+v5Ggz9eT69+7Ab7x7KdRaCr55NUrvsH6m
bg8NG0itMCLvBI4RTi8zvQukbnCyubLe3u32JePQIVlraLGxeTKv1Chwimdqmg7m
uNTr2HpqWXaaNIkMs0eiXYxQ9yeoawUOaepbUUcHGAyVJ6VYW0/B9TJKsDrSENqF
t8DOfiH5EuOG58DC7cFObW/ctLCNt5dQVw/1VkECDj1iFwjxdyNAJT3iFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFh2RDVTiVklthB+ObZLT8JoP5G8MB8GA1UdIwQY
MBaAFDIo6vnl0kMOeSK655S2mMhqjofLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWlqcS1lWFNRdzU1SXJybmxMYVl5R3FPaDhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC84MzNlYWQtMDM1MS00ZTAxLTgyODct
OTY1N2FlNzUyOWYwLzEvV0haRU5WT0pXU1cyRUg0NXRrdFB3bWdfa2J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC84MzNlYWQtMDM1MS00ZTAxLTgyODctOTY1N2FlNzUyOWYw
LzEvTWlqcS1lWFNRdzU1SXJybmxMYVl5R3FPaDhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXXMQMA0G
CSqGSIb3DQEBCwUAA4IBAQAHnEGnM8gCY8dJcgWZ8WGHzJJihib788GeiBa8wIPS
X21OqCjTrb4WUSjAg4cD9vFb+TMim77mO9qRbBzSh0YQShde5hGqN73KoqyPU81W
oxZQXeYWgi2alWeIlvOvnFKbaYp5EOyOyADnBQGeEOco8hmuR2goXQZXgii3Exu9
rZOM00Ig+SYQlEW0djHNUWcJ7LOuktyOnZx/eMgB5Cf38AX9wYoPZLsfxfrRe0xM
NVSkeLPy7G/Yb7rwbA7XdH6nLT2Bz6qIdFoTJE25QsMOGL+q8JvNhowaeqHQwTh9
aj/DEeradIKHePs/THR5r5EZFJsl4P80fdYQTA2qYbcM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:07 2024 by rpki-client on console-fra.rpki-client.org