Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/OHGdWjBPZ-ATP6Lm7_xfircNhs4.roa
File: OHGdWjBPZ-ATP6Lm7_xfircNhs4.roa (raw, json)
Hash identifier: IioE4LIuhS+NtyAVLWqS9cye0/uM+SJGinBpBy9aA84=
Subject key identifier: 38:71:9D:5A:30:4F:67:E0:13:3F:A2:E6:EF:FC:5F:8A:B7:0D:86:CE
Certificate issuer: /CN=f76409e8bc85d7f259326537a9f10c3b1757387f
Certificate serial: 01856FC267BD0DE32C1F2043DE0CA25FEEF3
Authority key identifier: F7:64:09:E8:BC:85:D7:F2:59:32:65:37:A9:F1:0C:3B:17:57:38:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92QJ6LyF1_JZMmU3qfEMOxdXOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/OHGdWjBPZ-ATP6Lm7_xfircNhs4.roa
Signing time: Sun 01 Jan 2023 23:54:49 +0000
ROA not before: Sun 01 Jan 2023 23:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12727
IP address blocks: 31.24.242.0/23 maxlen: 23
31.24.244.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:67:bd:0d:e3:2c:1f:20:43:de:0c:a2:5f:ee:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76409e8bc85d7f259326537a9f10c3b1757387f
Validity
Not Before: Jan 1 23:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38719d5a304f67e0133fa2e6effc5f8ab70d86ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:31:19:f6:79:85:d3:cb:55:ea:62:c1:6e:78:
00:c6:e1:2d:5c:51:da:4b:d8:37:c5:29:e2:24:3a:
5a:49:ba:8b:56:4a:02:72:7b:25:d3:23:15:74:e6:
ea:b3:3a:39:fc:4f:76:f3:3a:cd:92:58:c0:b9:35:
1a:8f:c1:1b:84:5f:b7:e9:bf:73:94:74:34:cd:10:
94:78:8b:2d:75:f1:95:fe:70:84:7d:d4:61:42:5a:
53:21:a4:33:0e:ed:02:78:4c:45:4b:96:66:0c:69:
69:a6:62:f5:d4:db:f6:7c:cf:c8:b5:53:f5:ee:38:
99:42:e2:ab:2e:98:0e:a4:0a:a2:86:10:33:e9:0b:
52:d1:3c:dc:52:bd:c3:ba:95:16:00:87:84:8c:f9:
c5:5b:b3:49:69:da:a1:82:07:a0:54:b5:4b:86:5c:
4f:17:cd:52:d2:41:53:9b:ab:99:e6:43:ef:a2:3f:
aa:26:3d:3c:5d:aa:9a:a3:ac:ed:df:36:04:b6:20:
67:27:c2:90:f4:5a:a0:3d:ea:62:3c:c3:13:b6:98:
88:6b:f0:43:6f:e3:31:0a:69:8e:b7:54:1c:80:eb:
de:01:8a:e0:b3:f7:42:6e:a1:77:31:6e:a6:45:56:
bd:e7:a9:b0:e6:7f:03:be:5b:10:f2:7f:11:e4:9a:
b0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:71:9D:5A:30:4F:67:E0:13:3F:A2:E6:EF:FC:5F:8A:B7:0D:86:CE
X509v3 Authority Key Identifier:
keyid:F7:64:09:E8:BC:85:D7:F2:59:32:65:37:A9:F1:0C:3B:17:57:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92QJ6LyF1_JZMmU3qfEMOxdXOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/OHGdWjBPZ-ATP6Lm7_xfircNhs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/92QJ6LyF1_JZMmU3qfEMOxdXOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.242.0-31.24.245.255
Signature Algorithm: sha256WithRSAEncryption
3f:71:ba:ee:70:76:dc:60:f2:9f:7f:eb:80:ba:d5:3a:94:f6:
03:c9:63:0a:96:f6:e5:2f:07:8e:28:12:94:d6:f4:14:3e:c7:
25:b1:41:07:08:38:4b:cf:6f:4d:e2:22:7d:63:8b:83:8c:a2:
85:8f:d2:0d:ec:b6:86:0d:c7:46:ab:92:37:15:a0:0b:e4:42:
6c:29:5d:87:8f:d4:91:44:71:ef:e3:e8:1d:c9:ba:1d:c5:c6:
99:a0:07:09:e2:fe:64:fa:82:86:ad:d7:c0:6b:23:87:8a:8e:
37:22:63:24:18:c8:55:ab:10:2c:62:95:9b:6a:27:76:fe:71:
f2:7f:f1:37:24:5c:24:bf:31:72:e1:97:e8:92:cf:c4:e4:d5:
b6:bf:6f:bf:19:af:ac:32:4d:fb:bd:69:e5:e3:d2:2d:70:f1:
5f:9b:93:33:dd:25:01:7b:9f:a2:bd:ff:28:0c:22:9f:0b:4a:
07:6f:a6:99:31:42:90:04:d6:61:57:28:01:7c:8b:2e:67:7c:
8a:fd:3b:e5:4c:c5:b6:d1:7f:98:c1:78:f1:1a:34:83:95:51:
db:7e:68:05:8d:8b:c7:a0:89:a4:46:b1:2c:78:86:e9:3f:7f:
63:b8:e0:d1:38:49:5f:ca:36:b7:1d:98:2b:52:57:ac:d7:d1:
e2:f2:ee:88
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVvwme9DeMsHyBD3gyiX+7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NjQwOWU4YmM4NWQ3ZjI1OTMyNjUzN2E5ZjEwYzNiMTc1
NzM4N2YwHhcNMjMwMTAxMjM1NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODcxOWQ1YTMwNGY2N2UwMTMzZmEyZTZlZmZjNWY4YWI3MGQ4NmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDEZ9nmF08tV6mLBbngAxuEtXFHa
S9g3xSniJDpaSbqLVkoCcnsl0yMVdObqszo5/E928zrNkljAuTUaj8EbhF+36b9z
lHQ0zRCUeIstdfGV/nCEfdRhQlpTIaQzDu0CeExFS5ZmDGlppmL11Nv2fM/ItVP1
7jiZQuKrLpgOpAqihhAz6QtS0TzcUr3DupUWAIeEjPnFW7NJadqhggegVLVLhlxP
F81S0kFTm6uZ5kPvoj+qJj08Xaqao6zt3zYEtiBnJ8KQ9FqgPepiPMMTtpiIa/BD
b+MxCmmOt1QcgOveAYrgs/dCbqF3MW6mRVa956mw5n8DvlsQ8n8R5JqwvwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDhxnVowT2fgEz+i5u/8X4q3DYbOMB8GA1UdIwQY
MBaAFPdkCei8hdfyWTJlN6nxDDsXVzh/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTJRSjZMeUYxX0paTW1VM3FmRU1PeGRYT0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84ZmU5YjAtMmRhOC00YWU2LWI1Mzkt
ZGFiYzliNWY5ZTNjLzEvT0hHZFdqQlBaLUFUUDZMbTdfeGZpcmNOaHM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84ZmU5YjAtMmRhOC00YWU2LWI1MzktZGFiYzliNWY5ZTNj
LzEvOTJRSjZMeUYxX0paTW1VM3FmRU1PeGRYT0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAEfGPID
BAEfGPQwDQYJKoZIhvcNAQELBQADggEBAD9xuu5wdtxg8p9/64C61TqU9gPJYwqW
9uUvB44oEpTW9BQ+xyWxQQcIOEvPb03iIn1ji4OMooWP0g3stoYNx0arkjcVoAvk
QmwpXYeP1JFEce/j6B3Juh3FxpmgBwni/mT6goat18BrI4eKjjciYyQYyFWrECxi
lZtqJ3b+cfJ/8TckXCS/MXLhl+iSz8Tk1ba/b78Zr6wyTfu9aeXj0i1w8V+bkzPd
JQF7n6K9/ygMIp8LSgdvppkxQpAE1mFXKAF8iy5nfIr9O+VMxbbRf5jBePEaNIOV
Udt+aAWNi8egiaRGsSx4huk/f2O44NE4SV/KNrcdmCtSV6zX0eLy7og=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:33 2024 by rpki-client on console-fra.rpki-client.org