Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/zA0JOILCofX24WgDFTQrD0wg81g.roa
File: zA0JOILCofX24WgDFTQrD0wg81g.roa (raw, json)
Hash identifier: PaYVv2BgGE0z1mvSeklmWSEkeQHU4mBVE/DrD9J9dNI=
Subject key identifier: CC:0D:09:38:82:C2:A1:F5:F6:E1:68:03:15:34:2B:0F:4C:20:F3:58
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018883BD780E9E41C1D11876BCA459235DDC
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/zA0JOILCofX24WgDFTQrD0wg81g.roa
Signing time: Sun 04 Jun 2023 00:10:12 +0000
ROA not before: Sun 04 Jun 2023 00:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.198.0/24 maxlen: 24
85.237.202.0/24 maxlen: 24
85.237.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:83:bd:78:0e:9e:41:c1:d1:18:76:bc:a4:59:23:5d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jun 4 00:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc0d093882c2a1f5f6e1680315342b0f4c20f358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b1:20:63:3f:94:1f:32:fb:4a:0c:af:c6:1e:
a6:f1:2e:b5:c2:7a:0c:c1:37:13:b1:ca:a3:9f:a9:
a7:62:34:0f:71:fa:bf:99:05:07:d6:c9:e7:19:f3:
41:2e:b0:51:c5:9f:ab:82:64:64:bf:c4:56:19:9e:
6a:25:9a:91:55:c5:ab:24:84:72:a2:1e:f1:31:07:
ca:8c:cd:2e:ce:f8:44:b6:dd:be:84:13:6a:1b:63:
05:f1:8b:68:15:47:cc:f9:00:2a:7c:ef:5a:8f:b9:
35:c1:71:86:8d:09:6c:87:69:73:86:c0:f2:11:77:
84:a3:cd:f6:8f:a6:04:a8:c4:d1:13:91:81:c5:0c:
83:49:4f:f0:cc:cf:86:59:04:52:be:bf:78:49:20:
44:de:2f:60:ed:55:46:b8:c3:62:8b:3a:b8:07:ab:
e7:a0:07:5d:78:64:e2:ae:0d:6a:1b:52:8f:6a:82:
8b:f2:eb:ce:86:65:b0:8e:11:db:10:43:b2:e1:c3:
dd:6e:6d:fc:2a:e3:0b:3a:61:32:6a:b7:c1:e7:e9:
44:27:07:72:27:b9:b2:79:1b:0b:e2:19:4f:09:fb:
ca:b4:11:3f:5f:c2:55:13:0a:6a:6a:3b:6b:c8:5e:
a7:8f:fe:9a:e9:3d:32:38:44:58:c0:a2:53:b4:ff:
39:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0D:09:38:82:C2:A1:F5:F6:E1:68:03:15:34:2B:0F:4C:20:F3:58
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/zA0JOILCofX24WgDFTQrD0wg81g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.202.0/24
85.237.223.0/24
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:d2:15:c0:bf:87:fb:5d:2a:b1:2e:91:c4:6e:67:88:89:3a:
01:1d:60:d0:b0:6a:3a:52:77:fc:e1:04:14:e1:19:eb:1f:09:
0b:67:59:37:b4:6c:d9:cb:83:38:37:45:75:a9:b4:ab:2f:e3:
72:fe:97:22:19:ed:ef:d3:31:d1:ce:08:ec:65:21:b1:bb:27:
2d:68:a8:e5:11:6f:26:8c:0b:8e:58:a6:27:da:79:96:15:97:
ec:f9:76:15:12:46:b2:70:9f:37:f5:8e:1d:27:f6:4d:d7:9f:
01:58:24:69:1d:8c:27:95:e1:85:f2:a6:d4:1e:32:aa:22:ce:
3e:70:82:12:4e:28:73:39:46:09:f3:30:6c:b1:29:28:ef:e6:
c7:a9:95:72:8c:4f:f9:c7:4d:e6:d8:8e:bf:03:52:29:39:3a:
39:f9:dc:d9:64:5d:ae:b5:71:9c:6a:2c:9e:51:09:30:51:7d:
9b:1e:35:81:88:65:3b:73:34:9a:65:8f:d4:25:7d:81:2c:98:
28:84:0e:91:3c:51:7b:b9:60:ea:b9:02:eb:f8:58:6b:84:69:
1d:9b:fa:74:4a:44:34:af:79:2d:b0:f3:7b:c8:e0:fc:96:c2:
80:9b:1b:26:ca:50:72:b7:ac:8b:09:07:78:2e:cd:85:94:a2:
af:10:79:65
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYiDvXgOnkHB0Rh2vKRZI13cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MGI2NzM2OGM5MWI4NWU4NDg4OGM1ZWQyZTgyNGQxMzkw
ODEwYmIwHhcNMjMwNjA0MDAxMDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzBkMDkzODgyYzJhMWY1ZjZlMTY4MDMxNTM0MmIwZjRjMjBmMzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7EgYz+UHzL7Sgyvxh6m8S61wnoM
wTcTscqjn6mnYjQPcfq/mQUH1snnGfNBLrBRxZ+rgmRkv8RWGZ5qJZqRVcWrJIRy
oh7xMQfKjM0uzvhEtt2+hBNqG2MF8YtoFUfM+QAqfO9aj7k1wXGGjQlsh2lzhsDy
EXeEo832j6YEqMTRE5GBxQyDSU/wzM+GWQRSvr94SSBE3i9g7VVGuMNiizq4B6vn
oAddeGTirg1qG1KPaoKL8uvOhmWwjhHbEEOy4cPdbm38KuMLOmEyarfB5+lEJwdy
J7myeRsL4hlPCfvKtBE/X8JVEwpqajtryF6nj/6a6T0yOERYwKJTtP85XQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMwNCTiCwqH19uFoAxU0Kw9MIPNYMB8GA1UdIwQY
MBaAFDkLZzaMkbhehIiMXtLoJNE5CBC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYt
NWM5ZDYyNjI5Yzg2LzEvekEwSk9JTENvZlgyNFdnREZUUXJEMHdnODFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYtNWM5ZDYyNjI5Yzg2
LzEvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVe3KAwQA
Ve3fAwQAwW3GMA0GCSqGSIb3DQEBCwUAA4IBAQCu0hXAv4f7XSqxLpHEbmeIiToB
HWDQsGo6Unf84QQU4RnrHwkLZ1k3tGzZy4M4N0V1qbSrL+Ny/pciGe3v0zHRzgjs
ZSGxuyctaKjlEW8mjAuOWKYn2nmWFZfs+XYVEkaycJ839Y4dJ/ZN158BWCRpHYwn
leGF8qbUHjKqIs4+cIISTihzOUYJ8zBssSko7+bHqZVyjE/5x03m2I6/A1IpOTo5
+dzZZF2utXGcaiyeUQkwUX2bHjWBiGU7czSaZY/UJX2BLJgohA6RPFF7uWDquQLr
+FhrhGkdm/p0SkQ0r3ktsPN7yOD8lsKAmxsmylByt6yLCQd4Ls2FlKKvEHll
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org