Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dc64a5-d7c4-4caf-875f-b2951d389fce/1/W9M_iye0P1V0iHHIf_30nALikFE.roa
File: W9M_iye0P1V0iHHIf_30nALikFE.roa (raw, json)
Hash identifier: fU+/Xdjn/Er2CqwFnl92DzFIA1FCBADNhTvjf3CLzDU=
Subject key identifier: 5B:D3:3F:8B:27:B4:3F:55:74:88:71:C8:7F:FD:F4:9C:02:E2:90:51
Certificate issuer: /CN=e295f4dd0cecbedc6916dd1f8683524c088bef63
Certificate serial: 0270075E
Authority key identifier: E2:95:F4:DD:0C:EC:BE:DC:69:16:DD:1F:86:83:52:4C:08:8B:EF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pX03QzsvtxpFt0fhoNSTAiL72M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/dc64a5-d7c4-4caf-875f-b2951d389fce/1/W9M_iye0P1V0iHHIf_30nALikFE.roa
Signing time: Sat 01 Jan 2022 12:55:29 +0000
ROA not before: Sat 01 Jan 2022 12:55:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29639
IP address blocks: 194.5.31.0/24 maxlen: 24
194.5.30.0/24 maxlen: 24
194.5.38.0/24 maxlen: 24
194.5.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40896350 (0x270075e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e295f4dd0cecbedc6916dd1f8683524c088bef63
Validity
Not Before: Jan 1 12:55:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bd33f8b27b43f55748871c87ffdf49c02e29051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:66:b4:2c:25:11:f3:ec:b4:55:c0:96:ee:
64:c6:ae:e6:e6:2c:2b:76:db:2d:22:a7:3b:7b:6f:
91:46:9f:a1:80:f8:83:0c:30:45:b4:12:be:6c:7d:
03:c0:60:ba:26:c1:6a:bc:d5:9b:1c:95:32:d1:36:
b8:e8:e2:e1:3b:a3:10:23:08:04:2e:5c:84:27:c7:
20:b3:fe:59:da:08:a7:15:74:7a:a2:e4:9a:f8:ce:
22:b8:be:a5:0b:0c:23:d5:21:c3:d7:31:fd:cc:a4:
d9:da:23:19:6c:df:df:7a:67:c1:82:96:0e:dd:75:
83:3a:72:5a:74:26:20:c4:f2:8e:d3:fa:68:c6:0a:
7f:41:ba:e4:c0:0e:f2:05:38:47:45:56:2f:d8:b1:
bc:71:1f:8c:f5:fa:68:79:83:9b:21:e3:b6:79:82:
5a:f1:b0:e9:99:af:42:88:22:89:e8:af:fb:de:46:
94:92:d7:d9:db:af:ec:73:99:49:c2:20:d0:63:25:
5b:45:c1:50:3b:18:2d:9a:b2:f0:53:9b:b5:50:04:
2e:56:a7:f4:e1:53:ca:18:6e:97:e3:ba:c5:51:9f:
12:3b:c7:aa:aa:53:17:9c:8b:a5:52:12:df:ed:f5:
5e:a0:81:6d:58:50:63:d0:85:e4:9c:0a:07:fa:d8:
b0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D3:3F:8B:27:B4:3F:55:74:88:71:C8:7F:FD:F4:9C:02:E2:90:51
X509v3 Authority Key Identifier:
keyid:E2:95:F4:DD:0C:EC:BE:DC:69:16:DD:1F:86:83:52:4C:08:8B:EF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pX03QzsvtxpFt0fhoNSTAiL72M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dc64a5-d7c4-4caf-875f-b2951d389fce/1/W9M_iye0P1V0iHHIf_30nALikFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dc64a5-d7c4-4caf-875f-b2951d389fce/1/4pX03QzsvtxpFt0fhoNSTAiL72M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.30.0/23
194.5.37.0-194.5.38.255
Signature Algorithm: sha256WithRSAEncryption
16:15:34:79:1e:94:12:55:86:11:25:6f:13:d0:0a:7b:c4:a4:
38:ba:80:1d:d8:15:fa:cb:c2:29:93:aa:55:de:ca:53:1a:39:
b7:20:98:b0:4d:62:c5:7b:9a:2a:07:1a:d3:0a:e6:0e:2f:0f:
6b:97:10:15:0b:27:2d:3d:ae:94:fc:c8:db:f9:ca:7d:f8:7f:
a7:68:f5:bd:87:c7:56:b3:18:7e:40:1b:00:83:78:f7:e6:b9:
7b:f7:fa:18:77:f0:07:af:17:b3:4d:91:3b:b2:d4:18:57:56:
0b:25:53:58:ec:76:76:d9:74:6e:fd:49:a7:fc:ec:2a:20:be:
1a:f4:33:49:28:6d:71:82:9f:28:91:cf:10:3e:66:78:2e:56:
02:52:b5:65:60:5c:4f:75:2a:ca:33:60:94:db:e9:4a:32:49:
a5:2a:58:89:5f:be:62:47:3d:85:22:29:f1:cf:25:20:78:2a:
05:bd:16:ed:41:a7:2e:ec:b3:59:18:b2:72:99:0a:b2:87:63:
ff:f9:9d:79:0c:f0:91:bc:dc:c5:9e:93:91:61:62:bc:ad:64:
3d:17:dc:a4:74:8e:d2:06:8e:8c:f6:0b:25:c3:99:4d:fd:13:
ac:9f:56:52:a6:6d:a3:7c:df:fc:ed:c0:0d:a7:a2:16:4a:f1:
c8:11:de:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEAnAHXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
Mjk1ZjRkZDBjZWNiZWRjNjkxNmRkMWY4NjgzNTI0YzA4OGJlZjYzMB4XDTIyMDEw
MTEyNTUyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWJkMzNmOGIyN2I0
M2Y1NTc0ODg3MWM4N2ZmZGY0OWMwMmUyOTA1MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALuFZrQsJRHz7LRVwJbuZMau5uYsK3bbLSKnO3tvkUafoYD4
gwwwRbQSvmx9A8BguibBarzVmxyVMtE2uOji4TujECMIBC5chCfHILP+WdoIpxV0
eqLkmvjOIri+pQsMI9Uhw9cx/cyk2dojGWzf33pnwYKWDt11gzpyWnQmIMTyjtP6
aMYKf0G65MAO8gU4R0VWL9ixvHEfjPX6aHmDmyHjtnmCWvGw6ZmvQogiieiv+95G
lJLX2duv7HOZScIg0GMlW0XBUDsYLZqy8FObtVAELlan9OFTyhhul+O6xVGfEjvH
qqpTF5yLpVIS3+31XqCBbVhQY9CF5JwKB/rYsLkCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBRb0z+LJ7Q/VXSIcch//fScAuKQUTAfBgNVHSMEGDAWgBTilfTdDOy+3GkW
3R+Gg1JMCIvvYzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRwWDAzUXpzdnR4cEZ0MGZob05TVEFpTDcyTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODUvZGM2NGE1LWQ3YzQtNGNhZi04NzVmLWIyOTUxZDM4OWZjZS8x
L1c5TV9peWUwUDFWMGlISElmXzMwbkFMaWtGRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUv
ZGM2NGE1LWQ3YzQtNGNhZi04NzVmLWIyOTUxZDM4OWZjZS8xLzRwWDAzUXpzdnR4
cEZ0MGZob05TVEFpTDcyTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAcIFHjAMAwQAwgUlAwQAwgUmMA0G
CSqGSIb3DQEBCwUAA4IBAQAWFTR5HpQSVYYRJW8T0Ap7xKQ4uoAd2BX6y8Ipk6pV
3spTGjm3IJiwTWLFe5oqBxrTCuYOLw9rlxAVCyctPa6U/Mjb+cp9+H+naPW9h8dW
sxh+QBsAg3j35rl79/oYd/AHrxezTZE7stQYV1YLJVNY7HZ22XRu/Umn/OwqIL4a
9DNJKG1xgp8okc8QPmZ4LlYCUrVlYFxPdSrKM2CU2+lKMkmlKliJX75iRz2FIinx
zyUgeCoFvRbtQacu7LNZGLJymQqyh2P/+Z15DPCRvNzFnpORYWK8rWQ9F9ykdI7S
Bo6M9gslw5lN/ROsn1ZSpm2jfN/87cANp6IWSvHIEd6+
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:53 2023 by rpki-client on console-fra.rpki-client.org