Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ca33a4-4a61-44eb-95d4-ea8454bf2f4c/1/OPUAFt6xSMiDY0FOChHM8r3XASs.roa
File: OPUAFt6xSMiDY0FOChHM8r3XASs.roa (raw, json)
Hash identifier: Ahqxr4pXmaZFrvCn6UrCcuzpO/i1RIW+woT1RpIj5Ek=
Subject key identifier: 38:F5:00:16:DE:B1:48:C8:83:63:41:4E:0A:11:CC:F2:BD:D7:01:2B
Certificate issuer: /CN=51deaa3e3f53ec4b6c138c7865437290e32a5c3a
Certificate serial: 018964C256770C1DB0ACF811A72345D1DE6E
Authority key identifier: 51:DE:AA:3E:3F:53:EC:4B:6C:13:8C:78:65:43:72:90:E3:2A:5C:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ud6qPj9T7EtsE4x4ZUNykOMqXDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ca33a4-4a61-44eb-95d4-ea8454bf2f4c/1/OPUAFt6xSMiDY0FOChHM8r3XASs.roa
Signing time: Mon 17 Jul 2023 16:50:04 +0000
ROA not before: Mon 17 Jul 2023 16:50:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 91.212.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c2:56:77:0c:1d:b0:ac:f8:11:a7:23:45:d1:de:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51deaa3e3f53ec4b6c138c7865437290e32a5c3a
Validity
Not Before: Jul 17 16:50:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38f50016deb148c88363414e0a11ccf2bdd7012b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:dc:61:ac:4a:85:56:b8:af:e3:a2:b6:72:
c1:dc:9b:b3:62:26:f6:58:b3:be:46:94:76:42:d7:
1e:15:9e:2b:f6:6d:20:08:4f:8f:25:e9:c4:ef:70:
04:45:72:1b:65:cf:15:a0:29:86:d4:2f:df:48:34:
e0:87:ab:c1:ff:b6:94:ba:6f:08:d1:6f:66:73:b6:
e3:3d:82:2b:f4:f2:b3:52:10:ab:d0:22:03:f7:80:
7a:3f:d0:da:c3:d2:a0:51:62:00:9b:19:3e:d0:e1:
da:36:37:b9:fa:b0:59:73:02:c7:d5:08:c9:02:3e:
ab:4f:80:3a:2e:7e:74:c3:73:e6:99:58:80:90:b0:
60:a2:88:d1:10:19:da:2f:db:27:59:1e:fa:2a:6c:
b4:5a:02:14:cd:45:da:60:2e:00:13:53:f8:01:23:
9a:6e:6c:6e:a2:8b:24:ee:d6:33:ec:9b:f2:96:43:
60:d4:23:f1:2d:33:19:73:62:34:41:b4:a3:98:a7:
cc:18:58:44:75:65:cb:69:9b:4c:62:29:6e:33:b5:
f2:fb:d4:30:ac:35:f1:f0:a2:78:2c:d7:e6:c2:b0:
90:d1:49:fd:52:2f:11:67:d1:15:6d:b2:ae:05:97:
99:b7:db:41:77:24:b6:b6:e5:09:ac:9e:e2:e9:d9:
ac:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F5:00:16:DE:B1:48:C8:83:63:41:4E:0A:11:CC:F2:BD:D7:01:2B
X509v3 Authority Key Identifier:
keyid:51:DE:AA:3E:3F:53:EC:4B:6C:13:8C:78:65:43:72:90:E3:2A:5C:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ud6qPj9T7EtsE4x4ZUNykOMqXDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ca33a4-4a61-44eb-95d4-ea8454bf2f4c/1/OPUAFt6xSMiDY0FOChHM8r3XASs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ca33a4-4a61-44eb-95d4-ea8454bf2f4c/1/Ud6qPj9T7EtsE4x4ZUNykOMqXDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.169.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d3:0b:0e:82:ed:fc:e5:4e:aa:68:58:b5:92:fd:52:f8:38:
6f:68:80:4f:64:14:76:90:4e:fc:e9:1a:22:2b:44:0c:03:32:
28:51:fe:d8:ef:a0:38:28:e7:f4:0f:ca:cd:35:bf:93:b8:57:
27:71:69:57:9e:9b:2d:6c:31:7d:9c:9c:b8:07:c9:9e:2f:62:
01:8b:dd:e5:bd:c4:d8:6b:c8:31:02:24:bd:58:9a:09:b3:e7:
3a:83:c9:d0:6a:9d:10:28:b8:4c:25:61:46:49:ea:f3:7b:93:
3e:9a:00:af:09:65:8c:76:65:dc:81:67:1b:55:e6:ac:54:cc:
43:e7:a2:7c:42:04:5a:3e:cf:3f:cd:4a:53:24:a5:29:02:47:
cf:c9:b1:91:97:29:eb:1c:31:ca:b8:48:bc:63:25:9b:b6:a7:
59:48:65:4a:c3:c5:c6:fa:b3:77:13:14:b2:32:9a:70:f4:4a:
ed:dc:cb:c3:6c:47:ad:77:9d:02:a9:57:e5:a3:b8:56:2b:7a:
46:63:80:40:66:9b:6d:8f:ed:f3:9d:0b:0a:f0:aa:20:08:e8:
ee:73:80:2b:b4:fe:2b:a8:85:5f:fb:04:37:c9:6a:5a:09:74:
a7:e2:a5:e9:5b:0f:62:4c:8e:4c:45:fa:16:46:03:a5:44:8b:
8e:db:04:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkwlZ3DB2wrPgRpyNF0d5uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZGVhYTNlM2Y1M2VjNGI2YzEzOGM3ODY1NDM3MjkwZTMy
YTVjM2EwHhcNMjMwNzE3MTY1MDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGY1MDAxNmRlYjE0OGM4ODM2MzQxNGUwYTExY2NmMmJkZDcwMTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWjcYaxKhVa4r+OitnLB3JuzYib2
WLO+RpR2QtceFZ4r9m0gCE+PJenE73AERXIbZc8VoCmG1C/fSDTgh6vB/7aUum8I
0W9mc7bjPYIr9PKzUhCr0CID94B6P9Daw9KgUWIAmxk+0OHaNje5+rBZcwLH1QjJ
Aj6rT4A6Ln50w3PmmViAkLBgoojREBnaL9snWR76Kmy0WgIUzUXaYC4AE1P4ASOa
bmxuoosk7tYz7JvylkNg1CPxLTMZc2I0QbSjmKfMGFhEdWXLaZtMYiluM7Xy+9Qw
rDXx8KJ4LNfmwrCQ0Un9Ui8RZ9EVbbKuBZeZt9tBdyS2tuUJrJ7i6dmsYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDj1ABbesUjIg2NBTgoRzPK91wErMB8GA1UdIwQY
MBaAFFHeqj4/U+xLbBOMeGVDcpDjKlw6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWQ2cVBqOVQ3RXRzRTR4NFpVTnlrT01xWERvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jYTMzYTQtNGE2MS00NGViLTk1ZDQt
ZWE4NDU0YmYyZjRjLzEvT1BVQUZ0NnhTTWlEWTBGT0NoSE04cjNYQVNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9jYTMzYTQtNGE2MS00NGViLTk1ZDQtZWE4NDU0YmYyZjRj
LzEvVWQ2cVBqOVQ3RXRzRTR4NFpVTnlrT01xWERvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9SpMA0G
CSqGSIb3DQEBCwUAA4IBAQBP0wsOgu385U6qaFi1kv1S+DhvaIBPZBR2kE786Roi
K0QMAzIoUf7Y76A4KOf0D8rNNb+TuFcncWlXnpstbDF9nJy4B8meL2IBi93lvcTY
a8gxAiS9WJoJs+c6g8nQap0QKLhMJWFGSerze5M+mgCvCWWMdmXcgWcbVeasVMxD
56J8QgRaPs8/zUpTJKUpAkfPybGRlynrHDHKuEi8YyWbtqdZSGVKw8XG+rN3ExSy
Mppw9Ert3MvDbEetd50CqVflo7hWK3pGY4BAZpttj+3znQsK8KogCOjuc4ArtP4r
qIVf+wQ3yWpaCXSn4qXpWw9iTI5MRfoWRgOlRIuO2wR9
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:34 2024 by rpki-client on console-ams.rpki-client.org