Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/y-DSBPBA4ncdPLaR5jeqt1a1Kr4.roa
File: y-DSBPBA4ncdPLaR5jeqt1a1Kr4.roa (raw, json)
Hash identifier: 05GJhPl4QkJDcSW5ASzElCcQJQufCj50d/ZHfbsu6AI=
Subject key identifier: CB:E0:D2:04:F0:40:E2:77:1D:3C:B6:91:E6:37:AA:B7:56:B5:2A:BE
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018571DEA1656BCE61F1D4413F30073FA293
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/y-DSBPBA4ncdPLaR5jeqt1a1Kr4.roa
Signing time: Mon 02 Jan 2023 09:44:53 +0000
ROA not before: Mon 02 Jan 2023 09:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 193.109.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:a1:65:6b:ce:61:f1:d4:41:3f:30:07:3f:a2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 2 09:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbe0d204f040e2771d3cb691e637aab756b52abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:64:72:2f:50:9d:f1:e7:45:1f:00:76:ec:
f3:26:51:76:da:45:c5:64:89:ca:c7:47:5a:8a:d1:
c8:05:fe:e2:81:00:f6:e1:12:53:20:16:10:ac:4d:
74:c4:93:9a:dd:ae:da:c0:53:29:63:ed:3c:2e:69:
71:0f:21:74:bc:99:33:51:43:dc:fb:51:4f:7e:5b:
e8:7b:b3:b4:70:42:29:fd:76:23:fc:53:b2:92:c1:
2e:03:59:da:e6:fe:75:4e:0a:87:28:02:1c:92:8e:
bc:77:34:35:d6:3f:f4:25:89:ac:bc:4b:bb:d6:84:
7a:57:32:6f:dc:08:72:85:6b:ec:f8:12:d3:6b:73:
09:6a:18:f3:0c:41:e5:67:24:91:b9:e6:69:ab:b5:
25:14:92:20:ea:2f:76:44:8f:69:19:d7:8b:3e:59:
a3:9b:68:d7:62:c4:d7:81:53:0a:49:79:51:84:c1:
88:30:f1:96:e9:89:bc:ce:46:ff:10:9f:2c:54:51:
81:8a:33:34:d3:df:bc:89:e0:42:61:48:e8:97:75:
61:92:70:bc:f0:9e:80:d3:f5:a8:37:ba:e6:ee:fd:
d3:0d:9b:9c:1a:9c:c6:69:3c:5f:1c:79:0c:06:2c:
b8:b7:2b:62:5f:af:d1:5b:80:cd:f6:fd:d4:f8:0b:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E0:D2:04:F0:40:E2:77:1D:3C:B6:91:E6:37:AA:B7:56:B5:2A:BE
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/y-DSBPBA4ncdPLaR5jeqt1a1Kr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.196.0/24
Signature Algorithm: sha256WithRSAEncryption
77:91:bd:70:e1:9e:a6:1c:66:5c:64:4e:9d:4d:9c:1d:a2:45:
11:10:e2:01:8b:db:1b:68:0a:e8:be:9c:e4:07:63:f7:bf:ee:
9d:05:05:03:ae:69:7b:08:03:c4:43:7a:c9:6b:22:e9:e6:05:
95:d6:30:9d:6c:5d:ee:44:7e:78:d1:1d:20:59:30:61:b4:34:
ea:53:08:fe:a5:aa:8d:11:ea:a1:a9:aa:3e:78:1b:84:ab:44:
42:41:ea:ce:1d:81:2b:19:bf:c6:43:2f:ea:e7:e1:4d:8e:2e:
8c:7a:39:02:9f:2c:c2:cc:0d:10:e3:d8:24:4d:38:b6:90:6d:
07:41:cf:9e:d5:72:97:61:0b:af:f3:2a:32:41:1d:10:05:bb:
8d:33:37:83:f3:08:b3:14:89:e6:80:7e:fd:f5:ed:40:28:a6:
e7:1c:07:af:5f:90:3c:d8:76:73:4b:83:a3:99:10:f6:90:a6:
e9:e1:d0:f9:8b:88:c5:b4:65:f5:33:c9:b8:28:13:c2:f6:ec:
c7:c2:4a:6d:73:61:1b:70:5a:13:93:83:f9:91:7b:29:fa:3c:
57:ab:72:bb:31:6a:59:00:f9:50:1d:12:94:07:2f:ad:1b:78:
d4:32:26:35:ac:38:0e:28:f4:89:a1:45:35:ff:ff:cb:29:05:
3f:8e:bc:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx3qFla85h8dRBPzAHP6KTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MGI2NzM2OGM5MWI4NWU4NDg4OGM1ZWQyZTgyNGQxMzkw
ODEwYmIwHhcNMjMwMTAyMDk0NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmUwZDIwNGYwNDBlMjc3MWQzY2I2OTFlNjM3YWFiNzU2YjUyYWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQhkci9QnfHnRR8AduzzJlF22kXF
ZInKx0daitHIBf7igQD24RJTIBYQrE10xJOa3a7awFMpY+08LmlxDyF0vJkzUUPc
+1FPflvoe7O0cEIp/XYj/FOyksEuA1na5v51TgqHKAIcko68dzQ11j/0JYmsvEu7
1oR6VzJv3AhyhWvs+BLTa3MJahjzDEHlZySRueZpq7UlFJIg6i92RI9pGdeLPlmj
m2jXYsTXgVMKSXlRhMGIMPGW6Ym8zkb/EJ8sVFGBijM009+8ieBCYUjol3VhknC8
8J6A0/WoN7rm7v3TDZucGpzGaTxfHHkMBiy4tytiX6/RW4DN9v3U+Asc+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMvg0gTwQOJ3HTy2keY3qrdWtSq+MB8GA1UdIwQY
MBaAFDkLZzaMkbhehIiMXtLoJNE5CBC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYt
NWM5ZDYyNjI5Yzg2LzEveS1EU0JQQkE0bmNkUExhUjVqZXF0MWExS3I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYtNWM5ZDYyNjI5Yzg2
LzEvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW3EMA0G
CSqGSIb3DQEBCwUAA4IBAQB3kb1w4Z6mHGZcZE6dTZwdokUREOIBi9sbaArovpzk
B2P3v+6dBQUDrml7CAPEQ3rJayLp5gWV1jCdbF3uRH540R0gWTBhtDTqUwj+paqN
Eeqhqao+eBuEq0RCQerOHYErGb/GQy/q5+FNji6MejkCnyzCzA0Q49gkTTi2kG0H
Qc+e1XKXYQuv8yoyQR0QBbuNMzeD8wizFInmgH799e1AKKbnHAevX5A82HZzS4Oj
mRD2kKbp4dD5i4jFtGX1M8m4KBPC9uzHwkptc2EbcFoTk4P5kXsp+jxXq3K7MWpZ
APlQHRKUBy+tG3jUMiY1rDgOKPSJoUU1///LKQU/jrzB
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:08 2023 by rpki-client on console-ams.rpki-client.org