Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/WNfUb-V2TBc5e-rbXKhIaNZVrAI.roa
File: WNfUb-V2TBc5e-rbXKhIaNZVrAI.roa (raw, json)
Hash identifier: BgrrwnRarWRnOKxYTRBXGUbKkyZe0oQfjQ/a/3hAosg=
Subject key identifier: 58:D7:D4:6F:E5:76:4C:17:39:7B:EA:DB:5C:A8:48:68:D6:55:AC:02
Certificate issuer: /CN=22a96d3f69323d08b4ccb995294ad50b421e6b0d
Certificate serial: 018C26F6DB94BBBB6D2B21EAB450987941A8
Authority key identifier: 22:A9:6D:3F:69:32:3D:08:B4:CC:B9:95:29:4A:D5:0B:42:1E:6B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqltP2kyPQi0zLmVKUrVC0Ieaw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/WNfUb-V2TBc5e-rbXKhIaNZVrAI.roa
Signing time: Fri 01 Dec 2023 19:59:21 +0000
ROA not before: Fri 01 Dec 2023 19:59:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47689
IP address blocks: 64.187.208.0/23 maxlen: 24
91.193.114.0/24 maxlen: 24
2a06:a340::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:26:f6:db:94:bb:bb:6d:2b:21:ea:b4:50:98:79:41:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a96d3f69323d08b4ccb995294ad50b421e6b0d
Validity
Not Before: Dec 1 19:59:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58d7d46fe5764c17397beadb5ca84868d655ac02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:99:c0:b3:57:cd:ce:b7:24:4b:d5:5e:cf:d2:
d7:b8:47:29:eb:4f:b5:03:00:52:75:65:fc:03:a6:
ad:11:39:7b:f5:5a:5a:2f:ad:67:32:cc:c8:58:55:
97:95:27:bf:3e:32:5d:84:0b:cf:e5:fd:91:2b:39:
89:32:d1:32:77:2a:a3:51:be:5e:fe:01:1f:bd:fe:
dc:20:bc:83:2e:dc:c9:58:8e:e4:c3:8a:f4:32:2f:
c1:76:9f:17:ff:35:4b:5b:1c:ec:7e:86:7b:95:03:
2d:09:6f:0b:5f:74:5c:45:fc:6b:af:cc:b7:11:8a:
60:f3:9f:34:0a:b1:01:32:c1:7f:c9:83:c7:fa:74:
33:3a:3b:e9:23:10:ab:20:50:c9:5a:52:6a:3e:6c:
34:59:0c:23:f1:07:39:9e:55:b9:14:4f:40:00:e8:
7a:a5:d5:ca:94:31:12:9f:a2:40:fa:5c:d6:cd:48:
dd:6f:9b:d0:98:4d:c3:a4:1e:49:07:b4:c8:0a:1d:
0d:ba:ed:a9:f2:98:0c:cf:cc:b0:2c:f0:5a:29:85:
31:3a:22:96:5f:37:00:82:15:14:25:9b:1b:0e:0c:
3f:c1:55:e0:b6:f7:47:3b:78:a5:d3:1e:53:c4:23:
56:4c:14:0e:4a:f2:d8:f3:f4:10:8c:52:43:0a:13:
5d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D7:D4:6F:E5:76:4C:17:39:7B:EA:DB:5C:A8:48:68:D6:55:AC:02
X509v3 Authority Key Identifier:
keyid:22:A9:6D:3F:69:32:3D:08:B4:CC:B9:95:29:4A:D5:0B:42:1E:6B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqltP2kyPQi0zLmVKUrVC0Ieaw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/WNfUb-V2TBc5e-rbXKhIaNZVrAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/IqltP2kyPQi0zLmVKUrVC0Ieaw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.187.208.0/23
91.193.114.0/24
IPv6:
2a06:a340::/29
Signature Algorithm: sha256WithRSAEncryption
1f:c1:78:95:ef:28:08:2a:59:6b:00:8d:9f:46:b8:12:b3:98:
f0:71:1b:cd:89:19:57:c6:c8:46:84:86:20:74:c9:a4:0f:77:
a1:c0:bc:9f:e8:09:0b:34:c5:ab:f7:31:30:b0:3d:df:ad:2f:
59:66:7f:65:04:ae:d2:10:9c:42:b8:01:32:6d:0c:d9:bf:15:
86:e8:e7:81:7c:46:5d:72:ad:e9:b3:54:b0:b2:25:59:2f:4f:
aa:7a:ed:99:e8:3f:3a:64:a6:45:37:85:4a:32:0c:3b:20:a1:
f1:32:91:d1:89:c4:7e:38:84:4b:39:ff:cc:67:0b:e3:a0:46:
d5:b8:07:b3:6a:dc:b4:be:8a:24:4c:fe:f8:5b:71:f1:67:57:
f5:30:e2:54:81:70:98:80:89:0d:61:73:2c:91:49:aa:08:bb:
72:23:13:08:52:7f:a5:f3:b1:7b:5f:bd:28:62:65:25:de:c0:
f2:4c:af:35:c3:d6:a8:7e:da:ef:13:46:d0:f1:5c:c4:a0:cc:
fe:5d:e8:d4:0d:37:e0:e0:07:f3:84:1a:bb:23:6f:a5:48:72:
82:1a:b6:e4:4c:c0:61:a3:f8:71:d8:58:13:64:d0:af:49:87:
50:7b:86:e3:ec:62:35:2c:cb:90:bc:ae:33:fb:22:c5:1b:c0:
59:d7:22:60
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYwm9tuUu7ttKyHqtFCYeUGoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYTk2ZDNmNjkzMjNkMDhiNGNjYjk5NTI5NGFkNTBiNDIx
ZTZiMGQwHhcNMjMxMjAxMTk1OTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGQ3ZDQ2ZmU1NzY0YzE3Mzk3YmVhZGI1Y2E4NDg2OGQ2NTVhYzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45nAs1fNzrckS9Vez9LXuEcp60+1
AwBSdWX8A6atETl79VpaL61nMszIWFWXlSe/PjJdhAvP5f2RKzmJMtEydyqjUb5e
/gEfvf7cILyDLtzJWI7kw4r0Mi/Bdp8X/zVLWxzsfoZ7lQMtCW8LX3RcRfxrr8y3
EYpg8580CrEBMsF/yYPH+nQzOjvpIxCrIFDJWlJqPmw0WQwj8Qc5nlW5FE9AAOh6
pdXKlDESn6JA+lzWzUjdb5vQmE3DpB5JB7TICh0Nuu2p8pgMz8ywLPBaKYUxOiKW
XzcAghUUJZsbDgw/wVXgtvdHO3il0x5TxCNWTBQOSvLY8/QQjFJDChNd7wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFjX1G/ldkwXOXvq21yoSGjWVawCMB8GA1UdIwQY
MBaAFCKpbT9pMj0ItMy5lSlK1QtCHmsNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFsdFAya3lQUWkwekxtVktVclZDMEllYXcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lZmMyNmQtYTgzNS00NjljLThhMTQt
YmM0M2IzMDllMmM2LzEvV05mVWItVjJUQmM1ZS1yYlhLaElhTlpWckFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9lZmMyNmQtYTgzNS00NjljLThhMTQtYmM0M2IzMDllMmM2
LzEvSXFsdFAya3lQUWkwekxtVktVclZDMEllYXcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBQLvQAwQA
W8FyMA0EAgACMAcDBQMqBqNAMA0GCSqGSIb3DQEBCwUAA4IBAQAfwXiV7ygIKllr
AI2fRrgSs5jwcRvNiRlXxshGhIYgdMmkD3ehwLyf6AkLNMWr9zEwsD3frS9ZZn9l
BK7SEJxCuAEybQzZvxWG6OeBfEZdcq3ps1SwsiVZL0+qeu2Z6D86ZKZFN4VKMgw7
IKHxMpHRicR+OIRLOf/MZwvjoEbVuAezaty0vookTP74W3HxZ1f1MOJUgXCYgIkN
YXMskUmqCLtyIxMIUn+l87F7X70oYmUl3sDyTK81w9aoftrvE0bQ8VzEoMz+XejU
DTfg4AfzhBq7I2+lSHKCGrbkTMBho/hx2FgTZNCvSYdQe4bj7GI1LMuQvK4z+yLF
G8BZ1yJg
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:44 2024 by rpki-client on console-ams.rpki-client.org