Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/vio2vaKX0XreZS6JbCT94FI_xVw.roa
File: vio2vaKX0XreZS6JbCT94FI_xVw.roa (raw, json)
Hash identifier: F/qjdyy5alv87bL7mNZrttpwR94OdO/ZTNQ6Tk4yMEA=
Subject key identifier: BE:2A:36:BD:A2:97:D1:7A:DE:65:2E:89:6C:24:FD:E0:52:3F:C5:5C
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01885FE294D82B9A2D13FA9C70458E2F0A1D
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/vio2vaKX0XreZS6JbCT94FI_xVw.roa
Signing time: Sun 28 May 2023 01:04:24 +0000
ROA not before: Sun 28 May 2023 01:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.198.0/24 maxlen: 24
85.237.202.0/24 maxlen: 24
85.237.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5f:e2:94:d8:2b:9a:2d:13:fa:9c:70:45:8e:2f:0a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: May 28 01:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be2a36bda297d17ade652e896c24fde0523fc55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ed:d2:4b:f2:d2:f2:ab:37:c4:01:89:9c:e7:
ff:19:75:79:11:b7:7b:a0:14:66:e8:63:a9:ac:86:
ac:0f:55:f8:86:fb:ad:3b:87:d3:23:ea:d7:e9:41:
c2:9b:34:b7:6c:a3:22:16:3b:43:d2:28:03:ea:28:
6f:2f:ef:b0:7c:95:c1:3f:a4:f3:88:ee:06:39:38:
70:7e:60:27:0d:1e:ab:db:4a:33:a0:54:c5:96:70:
62:4b:29:a6:65:fb:3f:6a:c0:2b:03:33:59:ad:e1:
a1:8e:c3:30:5f:ec:01:b5:5b:01:5d:ff:04:40:e9:
52:3c:1a:29:d5:0d:89:ae:d8:5b:48:63:40:96:d7:
11:ef:06:fd:32:94:54:44:30:af:32:ec:e0:2d:b3:
80:18:0c:3d:32:73:6b:5a:fd:14:b0:cd:61:8d:4a:
ee:2a:af:0c:3c:f4:8c:09:89:76:85:40:1c:cb:54:
41:1c:dd:29:9f:49:b6:15:37:4e:91:a4:31:87:3d:
a9:66:0c:65:8d:a0:1d:11:ac:2a:01:fb:4b:12:db:
cd:b7:85:34:7d:2c:13:c5:66:ee:de:4d:d3:71:f2:
7b:66:ad:98:81:0b:ea:4d:73:d9:c9:95:6e:12:40:
12:45:52:e9:5b:07:16:be:15:1c:cd:fe:16:89:4f:
40:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2A:36:BD:A2:97:D1:7A:DE:65:2E:89:6C:24:FD:E0:52:3F:C5:5C
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/vio2vaKX0XreZS6JbCT94FI_xVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.202.0/24
85.237.216.0/24
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:7a:90:fb:ce:4b:cc:2c:8d:96:9e:b3:7e:58:9f:62:4f:b5:
70:1e:c9:09:80:79:ff:9d:20:8a:62:ee:5c:90:68:fd:ec:88:
ce:19:1c:f1:5d:79:74:8a:bf:2c:9e:7c:1f:ef:d5:d7:0c:76:
65:73:7a:b6:29:b9:08:2c:f9:3c:4f:df:20:42:89:e8:0d:95:
0b:91:f0:96:71:cd:b1:21:75:98:eb:f6:80:a9:92:49:c2:a3:
70:5a:fc:04:a6:f1:8d:c1:03:fe:df:28:36:d8:b9:92:b5:fc:
9f:10:99:a0:80:04:7d:18:c5:d4:1f:61:f9:4b:e8:25:63:e1:
5d:8b:2d:b6:49:e8:25:88:0f:0a:86:c9:f1:55:04:7b:d8:23:
f1:e2:dd:3b:79:45:2a:60:4b:ca:5e:c9:f4:07:49:7d:7a:de:
04:3b:48:df:23:d4:23:de:91:73:f1:a5:7b:97:af:23:65:2c:
81:84:4b:18:47:55:55:39:71:27:13:4f:38:fe:31:11:48:5d:
a2:d1:01:3f:32:82:0c:92:08:77:0c:d0:9e:f7:25:34:13:6f:
9e:f6:2d:e4:60:83:db:24:6e:65:aa:36:30:77:b0:c4:c3:64:
ad:ed:0a:1e:3e:b8:f1:02:ee:be:f2:9d:ab:df:7e:c7:76:79:
eb:d3:7c:6c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYhf4pTYK5otE/qccEWOLwodMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MGI2NzM2OGM5MWI4NWU4NDg4OGM1ZWQyZTgyNGQxMzkw
ODEwYmIwHhcNMjMwNTI4MDEwNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTJhMzZiZGEyOTdkMTdhZGU2NTJlODk2YzI0ZmRlMDUyM2ZjNTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+3SS/LS8qs3xAGJnOf/GXV5Ebd7
oBRm6GOprIasD1X4hvutO4fTI+rX6UHCmzS3bKMiFjtD0igD6ihvL++wfJXBP6Tz
iO4GOThwfmAnDR6r20ozoFTFlnBiSymmZfs/asArAzNZreGhjsMwX+wBtVsBXf8E
QOlSPBop1Q2JrthbSGNAltcR7wb9MpRURDCvMuzgLbOAGAw9MnNrWv0UsM1hjUru
Kq8MPPSMCYl2hUAcy1RBHN0pn0m2FTdOkaQxhz2pZgxljaAdEawqAftLEtvNt4U0
fSwTxWbu3k3TcfJ7Zq2YgQvqTXPZyZVuEkASRVLpWwcWvhUczf4WiU9A4QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFL4qNr2il9F63mUuiWwk/eBSP8VcMB8GA1UdIwQY
MBaAFDkLZzaMkbhehIiMXtLoJNE5CBC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYt
NWM5ZDYyNjI5Yzg2LzEvdmlvMnZhS1gwWHJlWlM2SmJDVDk0RklfeFZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYtNWM5ZDYyNjI5Yzg2
LzEvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVe3KAwQA
Ve3YAwQAwW3GMA0GCSqGSIb3DQEBCwUAA4IBAQCuepD7zkvMLI2WnrN+WJ9iT7Vw
HskJgHn/nSCKYu5ckGj97IjOGRzxXXl0ir8snnwf79XXDHZlc3q2KbkILPk8T98g
QonoDZULkfCWcc2xIXWY6/aAqZJJwqNwWvwEpvGNwQP+3yg22LmStfyfEJmggAR9
GMXUH2H5S+glY+Fdiy22SegliA8KhsnxVQR72CPx4t07eUUqYEvKXsn0B0l9et4E
O0jfI9Qj3pFz8aV7l68jZSyBhEsYR1VVOXEnE084/jERSF2i0QE/MoIMkgh3DNCe
9yU0E2+e9i3kYIPbJG5lqjYwd7DEw2St7QoePrjxAu6+8p2r337Hdnnr03xs
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:47 2024 by rpki-client on console-fra.rpki-client.org