Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/N8Uts6pVJta5oqz6vfwaXTLOj_s.roa
File: N8Uts6pVJta5oqz6vfwaXTLOj_s.roa (raw, json)
Hash identifier: eLPjO+aIW2mEAf7kL+t5oV4BWyzXZ7fLqdHOpRc60C0=
Subject key identifier: 37:C5:2D:B3:AA:55:26:D6:B9:A2:AC:FA:BD:FC:1A:5D:32:CE:8F:FB
Certificate issuer: /CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Certificate serial: 0188716A5204143B28EEED3D2BBDFF7A1BD2
Authority key identifier: C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/N8Uts6pVJta5oqz6vfwaXTLOj_s.roa
Signing time: Wed 31 May 2023 10:46:13 +0000
ROA not before: Wed 31 May 2023 10:46:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206119
IP address blocks: 89.23.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:6a:52:04:14:3b:28:ee:ed:3d:2b:bd:ff:7a:1b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Validity
Not Before: May 31 10:46:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37c52db3aa5526d6b9a2acfabdfc1a5d32ce8ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:fa:c4:4c:88:9e:1a:e0:93:64:22:71:da:
47:04:9d:44:9a:2c:77:27:29:3b:8f:e1:fa:7d:bd:
d7:c6:f9:e3:f3:ef:9e:68:9a:37:7c:0e:a4:b1:94:
aa:28:66:43:f4:fe:7f:56:9f:26:65:fe:41:19:b4:
2c:1c:55:7a:b9:11:30:bb:04:45:92:67:cf:4e:55:
4c:08:4b:15:c7:27:e6:ee:77:2f:d6:c7:ae:86:a9:
b1:36:a1:27:27:db:b8:74:b1:e0:8e:4d:1b:88:a8:
b4:2b:25:27:2b:2b:22:90:22:d3:ff:9e:f2:c1:5a:
04:ca:fb:0c:f8:6b:1b:17:9d:e9:84:a8:01:28:57:
5f:ca:dd:26:60:93:0c:61:53:fb:d1:56:f1:8f:fe:
5d:a5:ab:eb:f9:02:85:60:49:2f:27:e4:d3:0c:63:
02:41:3b:2e:0f:33:6a:c0:07:4f:84:c0:67:ef:5a:
84:bd:af:6d:0a:1b:90:d0:9d:83:4f:de:f6:35:08:
cc:b8:9a:bd:b3:1a:96:f4:ba:51:cc:68:cb:6a:74:
1b:bd:6a:aa:34:f2:15:bf:86:90:4b:b1:c2:9c:73:
85:40:2d:d8:82:8d:86:9b:a1:cd:49:ac:1d:ed:c8:
82:65:30:b6:84:db:9a:39:64:ad:fd:60:c6:c5:c9:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C5:2D:B3:AA:55:26:D6:B9:A2:AC:FA:BD:FC:1A:5D:32:CE:8F:FB
X509v3 Authority Key Identifier:
keyid:C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/N8Uts6pVJta5oqz6vfwaXTLOj_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/wsO16XxGqTvDo1zHEFXE8N_GxFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.91.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:36:3b:dc:08:5f:ce:37:3d:6d:7f:d6:68:65:79:9f:22:3b:
4e:bd:e9:6e:fb:58:0e:05:85:98:1c:b3:8b:ff:20:41:bd:4c:
df:93:6f:40:8a:3e:50:db:1f:c9:1c:86:d7:73:9f:f1:aa:c0:
1e:dc:b9:25:f4:fe:be:26:91:c8:b5:ed:fb:b4:1e:26:41:c2:
10:32:46:b7:d6:e0:57:9a:8a:7d:b4:9c:38:96:d4:27:45:f4:
88:5e:1d:47:fe:e1:4b:53:6c:32:b8:b9:3e:a2:e4:e3:9d:00:
75:85:f9:2f:fb:c1:fd:f2:41:ad:2d:22:53:4a:f2:11:7d:d5:
2c:62:60:28:18:2a:8e:f0:33:31:91:b1:7e:f5:bc:ba:05:bc:
b2:3b:ed:57:f5:23:00:93:18:54:84:80:e8:59:3c:a6:6c:9c:
1e:3a:09:bc:a4:99:48:83:17:89:e5:f8:50:9f:e4:5c:89:7f:
d5:55:d9:44:e9:a6:68:bd:37:e4:b6:6a:6a:3e:86:f5:d2:9d:
b5:a5:8a:b3:8f:d3:cd:23:a5:ce:aa:4c:4a:73:e3:89:b6:21:
38:04:88:15:05:3c:0c:04:ee:ac:47:76:cd:ce:ef:e9:8c:83:
55:23:12:3d:e4:ba:2e:a3:91:fe:f2:0d:2d:76:1c:10:02:e3:
27:7a:50:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhxalIEFDso7u09K73/ehvSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzNiNWU5N2M0NmE5M2JjM2EzNWNjNzEwNTVjNGYwZGZj
NmM0NTEwHhcNMjMwNTMxMTA0NjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2M1MmRiM2FhNTUyNmQ2YjlhMmFjZmFiZGZjMWE1ZDMyY2U4ZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNX6xEyInhrgk2QicdpHBJ1Emix3
Jyk7j+H6fb3Xxvnj8++eaJo3fA6ksZSqKGZD9P5/Vp8mZf5BGbQsHFV6uREwuwRF
kmfPTlVMCEsVxyfm7ncv1seuhqmxNqEnJ9u4dLHgjk0biKi0KyUnKysikCLT/57y
wVoEyvsM+GsbF53phKgBKFdfyt0mYJMMYVP70Vbxj/5dpavr+QKFYEkvJ+TTDGMC
QTsuDzNqwAdPhMBn71qEva9tChuQ0J2DT972NQjMuJq9sxqW9LpRzGjLanQbvWqq
NPIVv4aQS7HCnHOFQC3Ygo2Gm6HNSawd7ciCZTC2hNuaOWSt/WDGxclNfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDfFLbOqVSbWuaKs+r38Gl0yzo/7MB8GA1UdIwQY
MBaAFMLDtel8Rqk7w6NcxxBVxPDfxsRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NPMTZYeEdxVHZEbzF6SEVGWEU4Tl9HeEZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xNjUxYjUtY2RlNS00Y2RmLWEyOWYt
NDJiNGZiODM0ZjE1LzEvTjhVdHM2cFZKdGE1b3F6NnZmd2FYVExPal9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xNjUxYjUtY2RlNS00Y2RmLWEyOWYtNDJiNGZiODM0ZjE1
LzEvd3NPMTZYeEdxVHZEbzF6SEVGWEU4Tl9HeEZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdbMA0G
CSqGSIb3DQEBCwUAA4IBAQCzNjvcCF/ONz1tf9ZoZXmfIjtOvelu+1gOBYWYHLOL
/yBBvUzfk29Aij5Q2x/JHIbXc5/xqsAe3Lkl9P6+JpHIte37tB4mQcIQMka31uBX
mop9tJw4ltQnRfSIXh1H/uFLU2wyuLk+ouTjnQB1hfkv+8H98kGtLSJTSvIRfdUs
YmAoGCqO8DMxkbF+9by6BbyyO+1X9SMAkxhUhIDoWTymbJweOgm8pJlIgxeJ5fhQ
n+RciX/VVdlE6aZovTfktmpqPob10p21pYqzj9PNI6XOqkxKc+OJtiE4BIgVBTwM
BO6sR3bNzu/pjINVIxI95Louo5H+8g0tdhwQAuMnelA6
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:10 2025 by rpki-client