Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OfuobLURJseEIa7ErJButXy31sw.roa
File: OfuobLURJseEIa7ErJButXy31sw.roa (raw, json)
Hash identifier: qZHL1iPeBR9GuxWQlVMnj0cTTSusrAHVLLRdFNf2Ers=
Subject key identifier: 39:FB:A8:6C:B5:11:26:C7:84:21:AE:C4:AC:90:6E:B5:7C:B7:D6:CC
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 051B1B3A
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OfuobLURJseEIa7ErJButXy31sw.roa
Signing time: Thu 17 Mar 2022 09:43:42 +0000
ROA not before: Thu 17 Mar 2022 09:43:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.109.195.0/24 maxlen: 24
85.237.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85662522 (0x51b1b3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Mar 17 09:43:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39fba86cb51126c78421aec4ac906eb57cb7d6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ee:61:e4:71:9d:5c:63:3a:05:58:2c:ec:05:
c3:26:a6:56:08:72:ab:c5:24:83:9b:12:84:25:0e:
b4:c0:47:9f:65:fc:0b:f3:95:20:03:48:97:cf:12:
f4:c2:46:82:49:a1:72:77:3d:c9:af:58:af:75:b5:
04:61:13:3e:8c:da:d2:06:08:8d:28:71:c4:0d:05:
0d:13:1f:09:bc:d0:b3:30:2e:fd:01:d9:d5:5e:1b:
c9:5d:65:83:35:e6:ba:4d:57:a9:fc:11:4e:84:14:
4d:8b:d4:f1:26:c0:4a:fc:5a:27:2e:64:42:6e:3e:
a3:43:e5:8f:2d:e1:b0:82:14:c0:7b:d4:1d:64:23:
a5:91:89:8a:27:7c:31:de:86:26:67:51:88:cc:e9:
6f:84:f4:06:f3:b2:8a:49:8b:37:ed:a0:31:45:9f:
eb:1f:48:91:b3:33:87:c3:39:1a:cc:bf:b0:71:05:
93:82:14:3d:96:e1:99:68:b3:38:66:9a:0d:32:41:
ea:39:41:be:01:52:ec:83:7d:c2:81:34:c7:f0:bd:
b4:e1:45:b3:d1:5c:4e:fb:d6:5a:a8:5e:05:92:9d:
6a:91:a9:76:78:4e:f5:d4:47:77:34:3f:b2:f7:ae:
67:06:5b:e8:f7:2f:73:cb:20:4c:8a:45:a4:0f:9e:
74:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FB:A8:6C:B5:11:26:C7:84:21:AE:C4:AC:90:6E:B5:7C:B7:D6:CC
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OfuobLURJseEIa7ErJButXy31sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.215.0/24
193.109.195.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:dd:4c:e6:6a:a3:fe:0d:35:4d:71:3c:5b:7d:f8:c4:95:93:
ea:0b:d9:a7:01:66:96:16:53:b9:b0:a7:4f:a8:fe:d6:61:2b:
4f:4d:9a:7a:04:5d:db:db:0b:73:cf:8c:69:47:cf:2e:09:70:
38:f4:40:67:7e:eb:2a:7e:2b:ae:0c:2c:6a:00:49:5c:9c:85:
67:70:76:8c:16:51:ae:5a:12:f0:f7:f1:a5:2e:5e:09:ed:c0:
f8:7a:ea:11:d4:7a:fe:1a:4d:2a:b6:75:78:61:7a:32:17:4f:
c0:1a:b4:ac:c1:a6:af:61:b7:65:8e:35:9d:2c:b3:98:a5:6c:
ea:e5:c8:81:2e:ed:4e:35:0a:23:d2:69:95:00:cc:79:e7:e0:
2f:38:80:6f:40:85:47:73:6f:35:5c:f1:71:1a:cd:9c:81:87:
5d:2d:b5:c4:d8:3b:22:e9:2b:9c:bc:3c:76:b5:f1:02:49:93:
80:89:a1:10:fb:1b:b5:59:7a:37:7a:cd:f4:38:b2:9d:f8:10:
25:ce:6d:29:20:7e:a3:f0:10:6a:6b:4e:04:6a:34:1e:2a:ae:
a5:eb:bb:47:aa:a0:2a:d1:8f:4e:40:41:c6:13:42:86:52:2d:
22:d0:ae:65:49:fd:e0:22:95:5c:51:67:d5:6b:93:98:95:c7:
17:1a:3b:5b
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBRsbOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OTBiNjczNjhjOTFiODVlODQ4ODhjNWVkMmU4MjRkMTM5MDgxMGJiMB4XDTIyMDMx
NzA5NDM0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzlmYmE4NmNiNTEx
MjZjNzg0MjFhZWM0YWM5MDZlYjU3Y2I3ZDZjYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO3uYeRxnVxjOgVYLOwFwyamVghyq8Ukg5sShCUOtMBHn2X8
C/OVIANIl88S9MJGgkmhcnc9ya9Yr3W1BGETPoza0gYIjShxxA0FDRMfCbzQszAu
/QHZ1V4byV1lgzXmuk1XqfwRToQUTYvU8SbASvxaJy5kQm4+o0Pljy3hsIIUwHvU
HWQjpZGJiid8Md6GJmdRiMzpb4T0BvOyikmLN+2gMUWf6x9IkbMzh8M5Gsy/sHEF
k4IUPZbhmWizOGaaDTJB6jlBvgFS7IN9woE0x/C9tOFFs9FcTvvWWqheBZKdapGp
dnhO9dRHdzQ/sveuZwZb6Pcvc8sgTIpFpA+edOkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQ5+6hstREmx4QhrsSskG61fLfWzDAfBgNVHSMEGDAWgBQ5C2c2jJG4XoSI
jF7S6CTROQgQuzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09RdG5Ob3lSdUY2RWlJeGUwdWdrMFRrSUVMcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTIvMTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8x
L09mdW9iTFVSSnNlRUlhN0VySkJ1dFh5MzFzdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIv
MTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8xL09RdG5Ob3lSdUY2
RWlJeGUwdWdrMFRrSUVMcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFXt1wMEAMFtwzANBgkqhkiG9w0B
AQsFAAOCAQEAbt1M5mqj/g01TXE8W334xJWT6gvZpwFmlhZTubCnT6j+1mErT02a
egRd29sLc8+MaUfPLglwOPRAZ37rKn4rrgwsagBJXJyFZ3B2jBZRrloS8PfxpS5e
Ce3A+HrqEdR6/hpNKrZ1eGF6MhdPwBq0rMGmr2G3ZY41nSyzmKVs6uXIgS7tTjUK
I9JplQDMeefgLziAb0CFR3NvNVzxcRrNnIGHXS21xNg7IukrnLw8drXxAkmTgImh
EPsbtVl6N3rN9DiynfgQJc5tKSB+o/AQamtOBGo0Hiqupeu7R6qgKtGPTkBBxhNC
hlItItCuZUn94CKVXFFn1WuTmJXHFxo7Ww==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:59 2025 by rpki-client