Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/wjOr7jZQpTeWw99qkc67XXKTYLA.roa
File: wjOr7jZQpTeWw99qkc67XXKTYLA.roa (raw, json)
Hash identifier: FQAjKML7JK3x+VaLyfUHVZBGXWZkYvsmEY2OywMo8RI=
Subject key identifier: C2:33:AB:EE:36:50:A5:37:96:C3:DF:6A:91:CE:BB:5D:72:93:60:B0
Certificate issuer: /CN=4398cb58062ed4a9a30ff438e44eef31d7ef6a65
Certificate serial: 01856CEF4F9185EBBB2C6E715E3AD23D6397
Authority key identifier: 43:98:CB:58:06:2E:D4:A9:A3:0F:F4:38:E4:4E:EF:31:D7:EF:6A:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5jLWAYu1KmjD_Q45E7vMdfvamU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/wjOr7jZQpTeWw99qkc67XXKTYLA.roa
Signing time: Sun 01 Jan 2023 10:45:00 +0000
ROA not before: Sun 01 Jan 2023 10:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 185.181.192.0/22 maxlen: 22
95.130.16.0/23 maxlen: 23
95.130.18.0/23 maxlen: 23
95.130.20.0/23 maxlen: 23
95.130.22.0/23 maxlen: 23
2a02:2940::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:4f:91:85:eb:bb:2c:6e:71:5e:3a:d2:3d:63:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398cb58062ed4a9a30ff438e44eef31d7ef6a65
Validity
Not Before: Jan 1 10:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c233abee3650a53796c3df6a91cebb5d729360b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bd:c1:2b:e0:5f:72:bc:18:52:7f:4d:48:4b:
ca:65:a7:f0:a5:d2:5c:2f:38:f2:0c:b1:5f:0c:5a:
75:2a:8f:06:64:aa:fe:3e:11:f1:01:f5:2e:ee:36:
6b:4f:49:0a:ea:4e:d9:4c:b8:eb:8a:71:12:d3:bf:
f0:c6:63:9d:54:02:c4:80:ae:e2:8a:5d:ab:56:0e:
23:b7:da:97:8e:8c:e8:d0:3c:aa:40:20:6b:8a:3c:
a4:3c:11:22:36:6c:9c:c6:7b:5f:dd:1c:a6:e9:02:
54:8e:04:33:f3:25:f0:54:ae:dd:25:3a:c4:7c:b2:
7b:87:96:f1:69:1c:7d:e8:b6:ee:9e:e1:74:d8:02:
9c:13:cf:54:c6:6a:7c:44:d0:6e:2e:b3:70:88:ae:
3b:8b:93:fa:a2:12:75:d7:ff:e5:c7:35:4a:61:c9:
97:18:2f:ca:85:47:ef:c4:d8:f9:49:2e:47:c6:bc:
2b:b1:61:f0:45:78:47:4d:ca:2a:ab:f2:00:9b:40:
be:07:3d:a2:ca:1f:95:8c:28:a0:d8:58:c1:24:af:
03:1d:85:31:6b:80:92:15:eb:73:38:88:8a:97:63:
bc:f9:7a:92:35:44:ee:31:69:1a:fc:b6:37:a9:fc:
1a:3c:91:0a:eb:2f:01:a8:fe:49:89:c1:de:2f:04:
ee:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:33:AB:EE:36:50:A5:37:96:C3:DF:6A:91:CE:BB:5D:72:93:60:B0
X509v3 Authority Key Identifier:
keyid:43:98:CB:58:06:2E:D4:A9:A3:0F:F4:38:E4:4E:EF:31:D7:EF:6A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5jLWAYu1KmjD_Q45E7vMdfvamU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/wjOr7jZQpTeWw99qkc67XXKTYLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/Q5jLWAYu1KmjD_Q45E7vMdfvamU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.16.0/21
185.181.192.0/22
IPv6:
2a02:2940::/48
Signature Algorithm: sha256WithRSAEncryption
5c:c9:59:86:a6:3e:d4:0b:f4:ba:a5:97:7e:f4:74:7a:14:af:
46:c6:1d:0c:0c:3a:bd:0f:c7:f0:4b:87:be:dc:cb:0d:3a:d3:
49:af:e8:75:24:de:2b:94:91:79:bf:2d:a2:92:4c:13:6d:46:
cd:14:78:39:59:17:a4:45:12:62:81:f6:f1:d5:61:d5:26:f5:
8f:76:93:6b:92:54:b7:bb:74:07:e7:49:22:42:cb:6e:2e:96:
e0:31:d4:4e:59:04:fc:b2:41:5c:33:7b:7b:42:2f:6b:f7:9d:
f6:f4:92:c5:8e:60:c8:b4:1e:0b:c3:f5:30:da:22:6f:33:ab:
1b:97:52:8c:72:0f:71:84:96:f5:6c:41:69:6d:78:81:ad:f8:
87:ba:b4:c7:56:92:4f:af:3a:a6:3b:34:af:5f:d7:9c:ef:e6:
9f:67:ff:fe:40:f3:0b:e0:2b:06:04:71:47:21:db:fb:7d:9b:
25:b5:fd:7d:a1:62:c8:cb:ba:f8:7e:d5:ed:69:e1:0a:87:ad:
75:38:bb:32:08:3b:d4:74:a8:86:b7:bc:47:08:30:98:eb:74:
50:53:7f:36:91:0c:0d:83:2f:06:34:4c:ae:55:33:e1:e5:4a:
f9:b0:bd:a4:9e:5b:47:7c:41:15:bc:ed:d3:14:5b:11:ab:c3:
1e:9b:f8:0b
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVs70+Rheu7LG5xXjrSPWOXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOThjYjU4MDYyZWQ0YTlhMzBmZjQzOGU0NGVlZjMxZDdl
ZjZhNjUwHhcNMjMwMTAxMTA0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjMzYWJlZTM2NTBhNTM3OTZjM2RmNmE5MWNlYmI1ZDcyOTM2MGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r3BK+BfcrwYUn9NSEvKZafwpdJc
LzjyDLFfDFp1Ko8GZKr+PhHxAfUu7jZrT0kK6k7ZTLjrinES07/wxmOdVALEgK7i
il2rVg4jt9qXjozo0DyqQCBrijykPBEiNmycxntf3Rym6QJUjgQz8yXwVK7dJTrE
fLJ7h5bxaRx96LbunuF02AKcE89Uxmp8RNBuLrNwiK47i5P6ohJ11//lxzVKYcmX
GC/KhUfvxNj5SS5HxrwrsWHwRXhHTcoqq/IAm0C+Bz2iyh+VjCig2FjBJK8DHYUx
a4CSFetzOIiKl2O8+XqSNUTuMWka/LY3qfwaPJEK6y8BqP5JicHeLwTu7wIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFMIzq+42UKU3lsPfapHOu11yk2CwMB8GA1UdIwQY
MBaAFEOYy1gGLtSpow/0OORO7zHX72plMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVqTFdBWXUxS21qRF9RNDVFN3ZNZGZ2YW1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9jYmM3YWMtMjI0MS00OTc0LThmYTIt
MTcxMTdkYWQ5MDc3LzEvd2pPcjdqWlFwVGVXdzk5cWtjNjdYWEtUWUxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9jYmM3YWMtMjI0MS00OTc0LThmYTItMTcxMTdkYWQ5MDc3
LzEvUTVqTFdBWXUxS21qRF9RNDVFN3ZNZGZ2YW1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDX4IQAwQC
ubXAMA8EAgACMAkDBwAqAilAAAAwDQYJKoZIhvcNAQELBQADggEBAFzJWYamPtQL
9Lqll370dHoUr0bGHQwMOr0Px/BLh77cyw0600mv6HUk3iuUkXm/LaKSTBNtRs0U
eDlZF6RFEmKB9vHVYdUm9Y92k2uSVLe7dAfnSSJCy24uluAx1E5ZBPyyQVwze3tC
L2v3nfb0ksWOYMi0HgvD9TDaIm8zqxuXUoxyD3GElvVsQWlteIGt+Ie6tMdWkk+v
OqY7NK9f15zv5p9n//5A8wvgKwYEcUch2/t9myW1/X2hYsjLuvh+1e1p4QqHrXU4
uzIIO9R0qIa3vEcIMJjrdFBTfzaRDA2DLwY0TK5VM+HlSvmwvaSeW0d8QRW87dMU
WxGrwx6b+As=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-fra.rpki-client.org