Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/6f5490-f0dc-4458-bc95-1b2376b041e4/1/OzhEnQb7VtX1ZmUhTUKROF4RBaU.roa
File: OzhEnQb7VtX1ZmUhTUKROF4RBaU.roa (raw, json)
Hash identifier: 0kFMvp4RAKqoYbc9YeSXDrM6b9L3TJKLc1+eckDk9pg=
Subject key identifier: 3B:38:44:9D:06:FB:56:D5:F5:66:65:21:4D:42:91:38:5E:11:05:A5
Certificate issuer: /CN=43f90c83b73b5e1e2cb5bfc45db8ca0531e356f9
Certificate serial: 897A7C
Authority key identifier: 43:F9:0C:83:B7:3B:5E:1E:2C:B5:BF:C4:5D:B8:CA:05:31:E3:56:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_kMg7c7Xh4stb_EXbjKBTHjVvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/6f5490-f0dc-4458-bc95-1b2376b041e4/1/OzhEnQb7VtX1ZmUhTUKROF4RBaU.roa
Signing time: Sat 01 Jan 2022 03:57:34 +0000
ROA not before: Sat 01 Jan 2022 03:57:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 194.26.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9009788 (0x897a7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43f90c83b73b5e1e2cb5bfc45db8ca0531e356f9
Validity
Not Before: Jan 1 03:57:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b38449d06fb56d5f56665214d4291385e1105a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ad:45:3b:2d:dc:b9:e1:43:4c:cf:db:8c:5a:
21:d1:00:16:59:63:06:8c:14:10:40:2a:dd:71:2a:
05:d1:b4:0f:46:ce:ad:b0:f8:dc:47:13:3a:c0:dc:
ad:5d:b9:85:5d:3f:a1:66:8f:8c:57:19:32:b3:1b:
b5:70:33:2b:2a:88:ee:c5:db:cc:7c:19:73:51:13:
ab:cb:01:1e:f6:36:08:56:80:32:f3:0b:4d:0c:56:
13:14:71:7c:59:c4:8e:22:dc:09:d7:38:c1:19:3b:
11:a0:34:60:59:7f:0b:8e:79:ba:eb:28:30:bd:8c:
31:30:54:39:79:6a:e1:6a:ba:b1:d2:05:e6:03:6e:
fb:a5:72:bf:ba:f2:d9:ae:5f:72:9c:8d:68:66:7a:
b4:9f:d5:dd:1d:f3:9d:d0:a9:e1:7d:6e:c2:49:90:
84:3e:2e:a8:bd:b2:6c:f9:cc:50:6a:68:25:cf:10:
86:4f:58:7d:55:30:92:d1:88:79:af:30:84:72:5c:
44:41:57:76:3d:2a:06:7d:40:19:05:85:f6:b6:7d:
74:3a:a5:fa:b7:6b:5a:b7:8e:89:f9:bd:b6:25:10:
5e:dd:54:fe:cc:e9:6c:42:26:55:72:82:69:6b:df:
f2:18:d6:e5:7c:e1:a3:75:fb:2d:28:b4:10:5b:f5:
c9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:38:44:9D:06:FB:56:D5:F5:66:65:21:4D:42:91:38:5E:11:05:A5
X509v3 Authority Key Identifier:
keyid:43:F9:0C:83:B7:3B:5E:1E:2C:B5:BF:C4:5D:B8:CA:05:31:E3:56:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_kMg7c7Xh4stb_EXbjKBTHjVvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6f5490-f0dc-4458-bc95-1b2376b041e4/1/OzhEnQb7VtX1ZmUhTUKROF4RBaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6f5490-f0dc-4458-bc95-1b2376b041e4/1/Q_kMg7c7Xh4stb_EXbjKBTHjVvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.193.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e5:ed:23:29:33:32:d6:30:16:fa:38:86:17:d0:35:23:69:
b1:f9:22:06:1d:d6:bf:6c:f2:39:71:dc:0e:fe:ab:ba:9b:1d:
5e:6f:d8:c5:78:bc:3a:20:07:1b:fb:d1:39:48:27:ec:46:70:
1c:1d:1b:e6:ae:6f:a4:c7:7e:64:90:37:95:31:47:f1:0e:ca:
cd:68:4e:68:b2:ec:54:68:04:10:e6:ea:ad:e3:ab:f9:c6:75:
41:c4:4c:6d:06:0a:18:06:9b:a0:92:c2:f9:c9:2f:9a:43:1e:
f1:c7:7b:3d:f0:ed:bf:de:cc:f7:59:15:ba:c1:fd:5d:b2:18:
a6:4a:1e:0e:1f:c2:51:e6:b5:40:81:89:d6:94:c9:a1:10:1b:
2f:7c:a0:27:1a:d5:21:ac:31:bc:fe:f4:7c:ec:f0:b9:b7:0b:
2a:f2:e3:78:b2:b8:92:aa:6a:09:b8:3d:a3:cb:67:56:c8:85:
db:14:c2:6c:d7:2b:14:52:a9:72:43:89:a6:1e:28:cc:a2:f0:
55:a1:fd:79:10:33:0c:b3:e9:63:51:89:eb:81:4c:54:63:41:
bf:af:5d:58:de:23:90:cc:b1:65:66:b4:59:8c:42:e0:ca:3b:
9e:c0:5d:2f:7c:02:5a:8b:86:72:c4:05:1e:12:b4:c9:3e:14:
b1:b2:a0:ab
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAIl6fDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
M2Y5MGM4M2I3M2I1ZTFlMmNiNWJmYzQ1ZGI4Y2EwNTMxZTM1NmY5MB4XDTIyMDEw
MTAzNTczNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2IzODQ0OWQwNmZi
NTZkNWY1NjY2NTIxNGQ0MjkxMzg1ZTExMDVhNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANetRTst3LnhQ0zP24xaIdEAFlljBowUEEAq3XEqBdG0D0bO
rbD43EcTOsDcrV25hV0/oWaPjFcZMrMbtXAzKyqI7sXbzHwZc1ETq8sBHvY2CFaA
MvMLTQxWExRxfFnEjiLcCdc4wRk7EaA0YFl/C455uusoML2MMTBUOXlq4Wq6sdIF
5gNu+6Vyv7ry2a5fcpyNaGZ6tJ/V3R3zndCp4X1uwkmQhD4uqL2ybPnMUGpoJc8Q
hk9YfVUwktGIea8whHJcREFXdj0qBn1AGQWF9rZ9dDql+rdrWreOifm9tiUQXt1U
/szpbEImVXKCaWvf8hjW5Xzho3X7LSi0EFv1yRMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ7OESdBvtW1fVmZSFNQpE4XhEFpTAfBgNVHSMEGDAWgBRD+QyDtzteHiy1
v8RduMoFMeNW+TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Ffa01nN2M3WGg0c3RiX0VYYmpLQlRIalZ2ay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTkvNmY1NDkwLWYwZGMtNDQ1OC1iYzk1LTFiMjM3NmIwNDFlNC8x
L096aEVuUWI3VnRYMVptVWhUVUtST0Y0UkJhVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkv
NmY1NDkwLWYwZGMtNDQ1OC1iYzk1LTFiMjM3NmIwNDFlNC8xL1Ffa01nN2M3WGg0
c3RiX0VYYmpLQlRIalZ2ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIawTANBgkqhkiG9w0BAQsFAAOC
AQEAaeXtIykzMtYwFvo4hhfQNSNpsfkiBh3Wv2zyOXHcDv6rupsdXm/YxXi8OiAH
G/vROUgn7EZwHB0b5q5vpMd+ZJA3lTFH8Q7KzWhOaLLsVGgEEObqreOr+cZ1QcRM
bQYKGAaboJLC+ckvmkMe8cd7PfDtv97M91kVusH9XbIYpkoeDh/CUea1QIGJ1pTJ
oRAbL3ygJxrVIawxvP70fOzwubcLKvLjeLK4kqpqCbg9o8tnVsiF2xTCbNcrFFKp
ckOJph4ozKLwVaH9eRAzDLPpY1GJ64FMVGNBv69dWN4jkMyxZWa0WYxC4Mo7nsBd
L3wCWouGcsQFHhK0yT4UsbKgqw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:16 2024 by rpki-client on console-ams.rpki-client.org