Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/bcb697-f4d9-4114-b4dc-bd1cb3c49b5b/1/wkeELE6n9zi2xQSAlexDi7pcX_o.roa
File: wkeELE6n9zi2xQSAlexDi7pcX_o.roa (raw, json)
Hash identifier: DQhil1PA2rMVzIs4ADw3slUU+NsRRr4JUOVd/8umnmA=
Subject key identifier: C2:47:84:2C:4E:A7:F7:38:B6:C5:04:80:95:EC:43:8B:BA:5C:5F:FA
Certificate issuer: /CN=06771d23ce8756dfb911e863c08424927a5dde34
Certificate serial: 018A3D265E8911D0EE5381DB62AE1063C401
Authority key identifier: 06:77:1D:23:CE:87:56:DF:B9:11:E8:63:C0:84:24:92:7A:5D:DE:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BncdI86HVt-5EehjwIQkknpd3jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/bcb697-f4d9-4114-b4dc-bd1cb3c49b5b/1/wkeELE6n9zi2xQSAlexDi7pcX_o.roa
Signing time: Mon 28 Aug 2023 17:17:19 +0000
ROA not before: Mon 28 Aug 2023 17:17:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51160
IP address blocks: 91.216.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3d:26:5e:89:11:d0:ee:53:81:db:62:ae:10:63:c4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06771d23ce8756dfb911e863c08424927a5dde34
Validity
Not Before: Aug 28 17:17:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c247842c4ea7f738b6c5048095ec438bba5c5ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:9e:d3:00:55:1a:64:6e:be:1c:af:98:9a:
4c:41:9d:f0:02:86:c7:e4:4c:91:c3:4c:03:4d:b8:
f9:f8:b0:9d:2e:63:a2:b6:69:a1:f3:a2:8c:7e:5c:
60:b6:b1:dd:16:16:69:92:70:1e:2a:ba:3d:09:9a:
aa:0f:a8:2b:55:a9:bf:f3:12:96:a8:23:41:81:af:
ce:90:39:e5:1a:1c:37:89:03:1e:75:49:cf:ae:06:
c8:21:24:89:4d:58:b2:d8:d9:1f:f8:93:e7:1f:04:
ac:43:c5:f9:40:e2:bd:14:33:c6:e0:ad:6f:f4:ce:
2e:f7:25:18:00:5e:00:49:74:68:f8:d5:e0:e5:4a:
51:13:b4:c0:2e:d3:0d:af:9b:01:65:d3:d6:c6:35:
93:45:fb:54:71:c3:79:40:4f:d9:27:2f:ba:0b:a3:
76:32:ab:a4:56:cb:e4:1d:2f:85:44:a7:a4:b9:61:
a7:5b:c8:8a:0a:b2:cc:33:92:5a:25:af:42:1f:a6:
ae:bd:01:64:0c:74:fd:bf:e0:f2:74:e8:84:46:32:
89:e3:34:e0:ce:69:6f:5d:8c:fa:df:60:c0:97:a3:
fc:b9:fb:93:cb:3b:68:ad:9e:94:b9:0d:5a:b5:a8:
ba:c4:88:5a:78:9d:eb:ab:d1:29:65:0a:5c:0b:a8:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:47:84:2C:4E:A7:F7:38:B6:C5:04:80:95:EC:43:8B:BA:5C:5F:FA
X509v3 Authority Key Identifier:
keyid:06:77:1D:23:CE:87:56:DF:B9:11:E8:63:C0:84:24:92:7A:5D:DE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BncdI86HVt-5EehjwIQkknpd3jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/bcb697-f4d9-4114-b4dc-bd1cb3c49b5b/1/wkeELE6n9zi2xQSAlexDi7pcX_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/bcb697-f4d9-4114-b4dc-bd1cb3c49b5b/1/BncdI86HVt-5EehjwIQkknpd3jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.176.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d3:13:f4:c0:5c:34:54:3a:5d:cc:1f:1c:42:fa:ad:e1:62:
f0:a7:80:3a:d9:f3:13:6b:40:88:e4:c7:f6:8b:fd:46:37:e7:
0f:f2:6f:42:1d:9a:d8:7d:49:27:7d:7a:0e:68:ec:34:b8:25:
14:e5:0b:c7:fc:f0:01:1d:d4:25:52:54:ea:f2:de:3f:ba:55:
b2:91:c5:6c:3b:d1:67:a3:f3:ad:1b:5c:90:f6:94:6c:4b:8a:
bf:fe:49:f7:72:81:20:f3:63:68:21:44:09:80:b8:68:29:2e:
44:fa:86:cb:70:53:08:33:ea:f8:d3:b3:41:1f:b3:8f:8e:11:
5e:5b:d3:47:b7:aa:35:2f:43:11:0d:62:d5:47:6b:b2:ad:95:
f1:f2:cb:1c:26:b9:67:fd:ac:85:c6:a9:5b:79:31:b3:31:6b:
b5:d5:07:40:60:85:33:3e:10:ca:f7:91:54:57:34:88:13:a2:
4d:e2:64:8b:bd:c5:3f:51:5f:84:3c:12:99:06:2c:63:ea:05:
31:53:69:36:87:bf:86:34:ad:f3:62:24:9e:c4:0f:85:3d:bb:
58:6e:10:07:00:1d:43:59:3c:89:25:33:fd:5f:9c:87:54:6f:
3b:d4:01:38:be:e7:ca:4b:80:9d:b2:7f:9b:c3:ef:ab:31:d1:
f2:fd:5c:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYo9Jl6JEdDuU4HbYq4QY8QBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzcxZDIzY2U4NzU2ZGZiOTExZTg2M2MwODQyNDkyN2E1
ZGRlMzQwHhcNMjMwODI4MTcxNzE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjQ3ODQyYzRlYTdmNzM4YjZjNTA0ODA5NWVjNDM4YmJhNWM1ZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQWe0wBVGmRuvhyvmJpMQZ3wAobH
5EyRw0wDTbj5+LCdLmOitmmh86KMflxgtrHdFhZpknAeKro9CZqqD6grVam/8xKW
qCNBga/OkDnlGhw3iQMedUnPrgbIISSJTViy2Nkf+JPnHwSsQ8X5QOK9FDPG4K1v
9M4u9yUYAF4ASXRo+NXg5UpRE7TALtMNr5sBZdPWxjWTRftUccN5QE/ZJy+6C6N2
MqukVsvkHS+FRKekuWGnW8iKCrLMM5JaJa9CH6auvQFkDHT9v+DydOiERjKJ4zTg
zmlvXYz632DAl6P8ufuTyztorZ6UuQ1atai6xIhaeJ3rq9EpZQpcC6jo/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMJHhCxOp/c4tsUEgJXsQ4u6XF/6MB8GA1UdIwQY
MBaAFAZ3HSPOh1bfuRHoY8CEJJJ6Xd40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5jZEk4NkhWdC01RWVoandJUWtrbnBkM2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iY2I2OTctZjRkOS00MTE0LWI0ZGMt
YmQxY2IzYzQ5YjViLzEvd2tlRUxFNm45emkyeFFTQWxleERpN3BjWF9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iY2I2OTctZjRkOS00MTE0LWI0ZGMtYmQxY2IzYzQ5YjVi
LzEvQm5jZEk4NkhWdC01RWVoandJUWtrbnBkM2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9iwMA0G
CSqGSIb3DQEBCwUAA4IBAQBU0xP0wFw0VDpdzB8cQvqt4WLwp4A62fMTa0CI5Mf2
i/1GN+cP8m9CHZrYfUknfXoOaOw0uCUU5QvH/PABHdQlUlTq8t4/ulWykcVsO9Fn
o/OtG1yQ9pRsS4q//kn3coEg82NoIUQJgLhoKS5E+obLcFMIM+r407NBH7OPjhFe
W9NHt6o1L0MRDWLVR2uyrZXx8sscJrln/ayFxqlbeTGzMWu11QdAYIUzPhDK95FU
VzSIE6JN4mSLvcU/UV+EPBKZBixj6gUxU2k2h7+GNK3zYiSexA+FPbtYbhAHAB1D
WTyJJTP9X5yHVG871AE4vufKS4Cdsn+bw++rMdHy/Vzf
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:41 2024 by rpki-client on console-ams.rpki-client.org