Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3af1e6-7f6d-4ac8-a022-fab9bab2f894/1/WWOwluloG9hfX4rBsNY3XrRKBK4.roa
File: WWOwluloG9hfX4rBsNY3XrRKBK4.roa (raw, json)
Hash identifier: esZiKOYilk9Ih0sj1wZ7gMWOn+pqTrPq2Oz3fRMwlhs=
Subject key identifier: 59:63:B0:96:E9:68:1B:D8:5F:5F:8A:C1:B0:D6:37:5E:B4:4A:04:AE
Certificate issuer: /CN=166dcaf076c3ec103117deaa67990c968bcd644d
Certificate serial: 018602318F894C119BE56F6458BAC838A8AE
Authority key identifier: 16:6D:CA:F0:76:C3:EC:10:31:17:DE:AA:67:99:0C:96:8B:CD:64:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm3K8HbD7BAxF96qZ5kMlovNZE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3af1e6-7f6d-4ac8-a022-fab9bab2f894/1/WWOwluloG9hfX4rBsNY3XrRKBK4.roa
Signing time: Mon 30 Jan 2023 10:20:47 +0000
ROA not before: Mon 30 Jan 2023 10:20:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200181
IP address blocks: 213.109.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:31:8f:89:4c:11:9b:e5:6f:64:58:ba:c8:38:a8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166dcaf076c3ec103117deaa67990c968bcd644d
Validity
Not Before: Jan 30 10:20:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5963b096e9681bd85f5f8ac1b0d6375eb44a04ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c5:13:b9:10:74:fb:2d:bd:6e:d0:1c:3c:9f:
53:a9:39:66:db:2e:6d:85:eb:8a:d1:f9:14:40:5f:
b9:e4:41:48:96:e8:88:80:f9:03:96:5d:82:fe:c5:
55:d6:f4:01:a8:6b:82:23:a5:d9:59:69:87:ae:d4:
5f:58:15:39:c0:6d:80:f0:9c:be:d9:ad:68:1d:b4:
45:48:42:b8:dd:8f:1a:82:80:11:89:a3:df:46:bd:
66:da:46:2d:31:4c:6e:f8:a4:aa:57:aa:c2:66:01:
0d:f7:3e:f0:ec:49:d6:76:ac:62:c8:b3:9d:9b:12:
d7:8a:9b:d0:cc:21:4f:3f:09:5d:77:53:9a:9e:55:
58:5f:84:32:86:ce:b2:be:de:fb:3c:3b:34:35:3d:
a8:56:31:9a:6b:90:76:52:43:2c:7b:31:80:e7:c0:
24:31:08:fd:8b:9e:d2:2f:13:3e:86:89:e7:3a:9e:
c9:df:ac:b8:1f:1d:7a:91:57:d8:08:c9:b3:8c:b2:
38:74:fa:b5:1a:f0:b3:be:46:48:88:55:8d:8c:10:
f4:ed:4d:a7:30:b9:3b:0f:27:11:9e:9c:b4:2a:06:
81:8b:e3:28:f0:5c:8b:04:c5:58:05:2e:d1:dc:70:
54:1f:41:5d:fd:37:73:e7:74:df:3d:aa:d3:0b:97:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:63:B0:96:E9:68:1B:D8:5F:5F:8A:C1:B0:D6:37:5E:B4:4A:04:AE
X509v3 Authority Key Identifier:
keyid:16:6D:CA:F0:76:C3:EC:10:31:17:DE:AA:67:99:0C:96:8B:CD:64:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm3K8HbD7BAxF96qZ5kMlovNZE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3af1e6-7f6d-4ac8-a022-fab9bab2f894/1/WWOwluloG9hfX4rBsNY3XrRKBK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3af1e6-7f6d-4ac8-a022-fab9bab2f894/1/Fm3K8HbD7BAxF96qZ5kMlovNZE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.154.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:16:61:47:bc:4a:12:8a:e3:2f:9b:4c:a1:96:ff:be:c0:ae:
28:fa:55:a2:00:0c:9c:66:53:bb:26:c1:fd:9b:d9:3a:2c:41:
0b:39:d6:9e:c1:9a:c0:32:73:b4:62:ae:55:60:2b:9b:47:a7:
85:f9:dd:9f:49:a3:ba:57:62:43:a4:c3:40:e1:5b:ab:1b:f8:
74:ef:78:dc:2a:a4:d9:8f:f3:99:8a:6c:a5:9e:6e:7c:bd:53:
7b:6e:37:90:c3:a6:b1:67:3e:89:ef:7e:bb:8d:be:3a:9e:f6:
05:b1:cc:68:07:3d:93:b7:6e:e1:59:4e:5b:96:7e:47:63:3e:
cd:f9:cc:15:04:59:51:85:b7:f6:12:4c:98:8c:fe:56:38:69:
12:a6:42:a6:78:84:65:cd:44:44:1f:9a:8a:e9:80:2c:30:e5:
d4:c7:10:dc:b5:a7:e9:9e:36:21:9c:73:67:86:62:71:6d:86:
6a:76:be:a0:0e:9d:23:67:c8:51:6c:71:78:43:83:57:23:cf:
2b:c2:af:a5:9e:0f:63:ae:14:af:eb:31:01:e3:ff:26:a3:39:
3f:0f:0d:06:ee:e3:95:3c:f5:fa:fd:34:c6:db:cc:fd:87:a3:
74:73:74:ab:f2:54:f4:de:23:e4:54:a2:6d:51:c5:30:3b:ee:
92:a3:eb:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYCMY+JTBGb5W9kWLrIOKiuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmRjYWYwNzZjM2VjMTAzMTE3ZGVhYTY3OTkwYzk2OGJj
ZDY0NGQwHhcNMjMwMTMwMTAyMDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTYzYjA5NmU5NjgxYmQ4NWY1ZjhhYzFiMGQ2Mzc1ZWI0NGEwNGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cUTuRB0+y29btAcPJ9TqTlm2y5t
heuK0fkUQF+55EFIluiIgPkDll2C/sVV1vQBqGuCI6XZWWmHrtRfWBU5wG2A8Jy+
2a1oHbRFSEK43Y8agoARiaPfRr1m2kYtMUxu+KSqV6rCZgEN9z7w7EnWdqxiyLOd
mxLXipvQzCFPPwldd1OanlVYX4Qyhs6yvt77PDs0NT2oVjGaa5B2UkMsezGA58Ak
MQj9i57SLxM+honnOp7J36y4Hx16kVfYCMmzjLI4dPq1GvCzvkZIiFWNjBD07U2n
MLk7DycRnpy0KgaBi+Mo8FyLBMVYBS7R3HBUH0Fd/Tdz53TfParTC5cTnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFljsJbpaBvYX1+KwbDWN160SgSuMB8GA1UdIwQY
MBaAFBZtyvB2w+wQMRfeqmeZDJaLzWRNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm0zSzhIYkQ3QkF4Rjk2cVo1a01sb3ZOWkUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zYWYxZTYtN2Y2ZC00YWM4LWEwMjIt
ZmFiOWJhYjJmODk0LzEvV1dPd2x1bG9HOWhmWDRyQnNOWTNYclJLQks0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8zYWYxZTYtN2Y2ZC00YWM4LWEwMjItZmFiOWJhYjJmODk0
LzEvRm0zSzhIYkQ3QkF4Rjk2cVo1a01sb3ZOWkUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1W2aMA0G
CSqGSIb3DQEBCwUAA4IBAQA+FmFHvEoSiuMvm0yhlv++wK4o+lWiAAycZlO7JsH9
m9k6LEELOdaewZrAMnO0Yq5VYCubR6eF+d2fSaO6V2JDpMNA4VurG/h073jcKqTZ
j/OZimylnm58vVN7bjeQw6axZz6J7367jb46nvYFscxoBz2Tt27hWU5bln5HYz7N
+cwVBFlRhbf2EkyYjP5WOGkSpkKmeIRlzUREH5qK6YAsMOXUxxDctafpnjYhnHNn
hmJxbYZqdr6gDp0jZ8hRbHF4Q4NXI88rwq+lng9jrhSv6zEB4/8mozk/Dw0G7uOV
PPX6/TTG28z9h6N0c3Sr8lT03iPkVKJtUcUwO+6So+vU
-----END CERTIFICATE-----
Generated at Thu Dec 14 13:51:35 2023 by rpki-client on console-ams.rpki-client.org