Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/WXCKFUk6EhC4p3qFm-lSnPIR7DE.roa
File: WXCKFUk6EhC4p3qFm-lSnPIR7DE.roa (raw, json)
Hash identifier: D5IFH1zND7xUjffSStRPls82UIGV1H6hlQu3Ml7n1oU=
Subject key identifier: 59:70:8A:15:49:3A:12:10:B8:A7:7A:85:9B:E9:52:9C:F2:11:EC:31
Certificate issuer: /CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
Certificate serial: 2A2B71
Authority key identifier: 60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/WXCKFUk6EhC4p3qFm-lSnPIR7DE.roa
Signing time: Sat 05 Feb 2022 18:13:40 +0000
ROA not before: Sat 05 Feb 2022 18:13:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 5.181.183.0/24 maxlen: 24
5.181.180.0/24 maxlen: 24
185.176.93.0/24 maxlen: 24
185.216.104.0/24 maxlen: 24
185.229.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2763633 (0x2a2b71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
Validity
Not Before: Feb 5 18:13:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59708a15493a1210b8a77a859be9529cf211ec31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cb:7e:d6:7c:6e:ff:65:32:27:16:e1:9c:b5:
85:5f:4c:50:7d:52:b1:f0:93:fe:0b:14:6a:9d:25:
f9:ac:c5:6f:f2:50:21:e8:c9:6b:00:d8:27:9f:2c:
a1:bf:e4:7b:de:7f:ec:f9:8b:13:58:64:43:58:07:
0a:e5:65:fa:2e:f9:55:2b:e9:25:a3:7a:c0:13:3f:
6b:17:52:54:a3:97:e7:97:c8:5b:83:4a:ac:9d:47:
12:b7:36:ac:54:f2:ec:be:a6:e4:9e:9d:85:90:05:
7e:52:fe:e7:ac:ab:ee:2f:5e:1c:11:be:34:09:8b:
83:b1:72:fb:7e:39:5d:89:4e:79:90:65:ee:38:9e:
e9:0c:d0:ee:2d:0b:cc:81:bb:92:16:97:09:47:58:
55:57:da:ff:c9:51:b0:4e:f4:d0:7c:c6:77:29:78:
0d:40:7f:ff:a0:85:4a:5c:f7:dc:cf:20:2d:9d:d2:
1a:46:f9:d3:92:f9:79:ab:87:3f:33:05:38:da:c6:
e9:85:6d:93:3d:e6:a6:12:5a:74:88:31:de:61:b4:
6f:8c:9a:c5:3c:75:a5:7e:f2:25:13:42:f5:05:82:
a3:98:b4:69:ed:33:a5:c4:91:82:eb:4e:df:b1:41:
68:b8:d1:a0:5f:3f:bd:d8:c2:80:3f:40:a8:6b:e7:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:70:8A:15:49:3A:12:10:B8:A7:7A:85:9B:E9:52:9C:F2:11:EC:31
X509v3 Authority Key Identifier:
keyid:60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/WXCKFUk6EhC4p3qFm-lSnPIR7DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/YB2c0uMMPqK6WGzYHz6yahoAD1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.180.0/24
5.181.183.0/24
185.176.93.0/24
185.216.104.0/24
185.229.220.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:2a:c6:59:9b:72:50:3a:27:00:32:25:91:56:b9:e7:ea:17:
24:fe:f4:44:2d:fe:d9:16:be:67:4b:97:ed:73:3c:4c:c2:44:
c7:69:e3:df:d9:ea:c2:1b:d8:d2:1e:3d:59:38:64:14:c0:14:
3d:0e:e4:92:5b:92:45:51:86:cc:91:f8:6e:92:29:18:03:31:
95:40:1f:f5:a4:d7:d5:0b:b7:a8:d5:2d:a9:e8:7a:fe:49:42:
fa:6f:ff:63:20:0d:7f:02:cc:8a:97:15:7b:81:c4:b5:53:09:
db:7f:35:78:b8:43:fb:b6:2a:93:f5:97:f4:0c:78:87:63:c7:
de:82:61:8b:59:4c:f0:d5:2a:71:04:d9:91:4e:4f:19:f6:4d:
eb:5e:0b:5a:3d:d3:e5:25:e7:06:83:3d:1d:a2:64:99:24:54:
04:4a:c4:12:b3:7f:1e:e4:22:77:5d:46:c4:46:1c:05:ed:13:
10:41:e3:b5:d1:50:4f:c1:d9:1a:44:29:11:64:4f:2a:40:7e:
b0:54:b0:a3:f7:a9:8c:ca:51:14:0f:17:a1:ed:7f:37:79:f6:
63:29:93:8f:f4:93:22:23:8e:4d:71:a5:65:48:35:06:81:3b:
a2:96:65:37:99:e8:0c:4d:6b:7c:a7:9e:c3:f7:7d:c3:c7:c7:
d2:6a:e9:fc
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIDKitxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYw
MWQ5Y2QyZTMwYzNlYTJiYTU4NmNkODFmM2ViMjZhMWEwMDBmNTYwHhcNMjIwMjA1
MTgxMzQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1OTcwOGExNTQ5M2Ex
MjEwYjhhNzdhODU5YmU5NTI5Y2YyMTFlYzMxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq8t+1nxu/2UyJxbhnLWFX0xQfVKx8JP+CxRqnSX5rMVv8lAh
6MlrANgnnyyhv+R73n/s+YsTWGRDWAcK5WX6LvlVK+klo3rAEz9rF1JUo5fnl8hb
g0qsnUcStzasVPLsvqbknp2FkAV+Uv7nrKvuL14cEb40CYuDsXL7fjldiU55kGXu
OJ7pDNDuLQvMgbuSFpcJR1hVV9r/yVGwTvTQfMZ3KXgNQH//oIVKXPfczyAtndIa
RvnTkvl5q4c/MwU42sbphW2TPeamElp0iDHeYbRvjJrFPHWlfvIlE0L1BYKjmLRp
7TOlxJGC607fsUFouNGgXz+92MKAP0Coa+ci9QIDAQABo4ICITCCAh0wHQYDVR0O
BBYEFFlwihVJOhIQuKd6hZvpUpzyEewxMB8GA1UdIwQYMBaAFGAdnNLjDD6iulhs
2B8+smoaAA9WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
WUIyYzB1TU1QcUs2V0d6WUh6NnlhaG9BRDFZLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85MC8zNzJiMzEtNzExNC00YWYwLThiYjEtZTk5OTI0ZGFhMWQ1LzEv
V1hDS0ZVazZFaEM0cDNxRm0tbFNuUElSN0RFLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8z
NzJiMzEtNzExNC00YWYwLThiYjEtZTk5OTI0ZGFhMWQ1LzEvWUIyYzB1TU1QcUs2
V0d6WUh6NnlhaG9BRDFZLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG
CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABbW0AwQABbW3AwQAubBdAwQAudho
AwQAueXcMA0GCSqGSIb3DQEBCwUAA4IBAQDKKsZZm3JQOicAMiWRVrnn6hck/vRE
Lf7ZFr5nS5ftczxMwkTHaePf2erCG9jSHj1ZOGQUwBQ9DuSSW5JFUYbMkfhukikY
AzGVQB/1pNfVC7eo1S2p6Hr+SUL6b/9jIA1/AsyKlxV7gcS1UwnbfzV4uEP7tiqT
9Zf0DHiHY8fegmGLWUzw1SpxBNmRTk8Z9k3rXgtaPdPlJecGgz0domSZJFQESsQS
s38e5CJ3XUbERhwF7RMQQeO10VBPwdkaRCkRZE8qQH6wVLCj96mMylEUDxeh7X83
efZjKZOP9JMiI45NcaVlSDUGgTuilmU3megMTWt8p57D933Dx8fSaun8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:44 2024 by rpki-client on console-ams.rpki-client.org