Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/0gxRUd97auHl-9BXzrENtztgq30.roa
File: 0gxRUd97auHl-9BXzrENtztgq30.roa (raw, json)
Hash identifier: n7yQB55ulw8jLxcdQ5kdsNNxecTzmZDzkfZpDrgu6dE=
Subject key identifier: D2:0C:51:51:DF:7B:6A:E1:E5:FB:D0:57:CE:B1:0D:B7:3B:60:AB:7D
Certificate issuer: /CN=51ea07606b286288cedfd25fee8f8b76e416d7fd
Certificate serial: 018570FBAC494A89C4B93E486FEABA2AFE65
Authority key identifier: 51:EA:07:60:6B:28:62:88:CE:DF:D2:5F:EE:8F:8B:76:E4:16:D7:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeoHYGsoYojO39Jf7o-LduQW1_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/0gxRUd97auHl-9BXzrENtztgq30.roa
Signing time: Mon 02 Jan 2023 05:36:59 +0000
ROA not before: Mon 02 Jan 2023 05:36:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.3.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:ac:49:4a:89:c4:b9:3e:48:6f:ea:ba:2a:fe:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ea07606b286288cedfd25fee8f8b76e416d7fd
Validity
Not Before: Jan 2 05:36:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d20c5151df7b6ae1e5fbd057ceb10db73b60ab7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3a:94:20:9b:c6:1d:7c:d8:24:04:28:03:b8:
61:a1:91:13:6f:c4:de:28:81:e7:3d:af:da:56:e2:
59:df:ef:9a:07:33:b8:18:27:92:2b:4f:a7:66:01:
8c:b7:d4:d2:42:72:38:c1:cb:30:67:93:15:4d:42:
98:31:e9:8d:3b:39:5c:2d:eb:1c:2f:cf:39:8d:e9:
1a:17:7d:f5:ed:89:8b:20:19:46:66:bb:59:ae:5f:
70:3b:38:1a:e5:b2:58:68:f4:ad:8d:5c:b0:99:b7:
ef:63:de:fd:fa:9b:6a:5e:c4:a7:2c:82:a1:f3:04:
ec:b8:76:99:8e:95:bf:6d:e1:a5:52:21:30:00:86:
b8:de:07:0f:df:6f:93:63:4b:5e:1d:65:50:37:10:
15:22:b4:8c:22:6d:ad:9a:b6:f0:86:ee:0b:2c:ea:
dd:cb:f2:cf:b9:e9:de:c6:49:eb:ac:2e:1f:5f:37:
6a:43:2a:31:94:cd:bd:4a:1c:42:c5:86:90:03:b6:
9c:c0:21:b7:24:df:74:8f:ba:4f:89:58:00:ca:b8:
c2:44:ce:83:d9:e7:60:af:f4:6b:36:b1:47:dd:85:
c3:e0:a5:2c:7b:a1:95:b7:0d:53:63:3d:1b:8b:a3:
ca:f5:40:a7:13:01:d6:de:ea:f7:e5:9c:5d:2a:00:
a8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0C:51:51:DF:7B:6A:E1:E5:FB:D0:57:CE:B1:0D:B7:3B:60:AB:7D
X509v3 Authority Key Identifier:
keyid:51:EA:07:60:6B:28:62:88:CE:DF:D2:5F:EE:8F:8B:76:E4:16:D7:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeoHYGsoYojO39Jf7o-LduQW1_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/0gxRUd97auHl-9BXzrENtztgq30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/UeoHYGsoYojO39Jf7o-LduQW1_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.20.0/24
Signature Algorithm: sha256WithRSAEncryption
88:9e:5e:71:35:e0:29:dd:c9:82:1b:7d:11:34:cd:77:be:e4:
57:9b:f5:44:34:77:ac:87:fd:2d:de:34:b1:16:19:bc:09:9e:
9b:c9:13:6c:35:05:99:78:06:f2:c5:13:2b:3c:77:00:7e:fb:
ac:ea:82:e7:e4:c1:b3:1a:08:62:58:33:a6:87:06:64:95:91:
54:7c:dc:05:65:fe:27:54:dd:d7:42:ba:9d:87:23:4e:8e:83:
be:b4:a2:d4:db:55:74:5b:41:54:a3:c5:86:e6:20:ac:e1:5c:
bf:2c:54:50:58:40:f0:9a:e1:f5:ea:ac:89:30:27:df:d4:b8:
31:e4:3b:38:97:5a:a4:a9:6d:81:ef:a9:dd:77:12:f8:49:67:
30:40:7a:03:26:c8:e1:31:f4:83:22:bc:da:a0:f8:7a:de:06:
00:03:e1:61:74:4e:c5:a1:73:fc:f4:44:22:a0:73:9d:38:a1:
8b:f2:4d:14:6d:79:03:b7:99:aa:58:ba:71:9f:80:db:f1:66:
0c:0e:d8:ac:36:19:d9:28:39:dd:8f:5e:45:6b:2d:8c:ad:d0:
f9:b6:58:1b:5a:5b:96:6f:a2:b3:f3:7e:70:fe:9f:52:3c:cc:
ca:10:53:ba:69:b1:8d:8a:02:1b:fe:27:1f:01:51:c0:b4:a7:
b8:73:eb:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw+6xJSonEuT5Ib+q6Kv5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZWEwNzYwNmIyODYyODhjZWRmZDI1ZmVlOGY4Yjc2ZTQx
NmQ3ZmQwHhcNMjMwMTAyMDUzNjU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjBjNTE1MWRmN2I2YWUxZTVmYmQwNTdjZWIxMGRiNzNiNjBhYjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTqUIJvGHXzYJAQoA7hhoZETb8Te
KIHnPa/aVuJZ3++aBzO4GCeSK0+nZgGMt9TSQnI4wcswZ5MVTUKYMemNOzlcLesc
L885jekaF3317YmLIBlGZrtZrl9wOzga5bJYaPStjVywmbfvY979+ptqXsSnLIKh
8wTsuHaZjpW/beGlUiEwAIa43gcP32+TY0teHWVQNxAVIrSMIm2tmrbwhu4LLOrd
y/LPuenexknrrC4fXzdqQyoxlM29ShxCxYaQA7acwCG3JN90j7pPiVgAyrjCRM6D
2edgr/RrNrFH3YXD4KUse6GVtw1TYz0bi6PK9UCnEwHW3ur35ZxdKgCobQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNIMUVHfe2rh5fvQV86xDbc7YKt9MB8GA1UdIwQY
MBaAFFHqB2BrKGKIzt/SX+6Pi3bkFtf9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVvSFlHc29Zb2pPMzlKZjdvLUxkdVFXMV8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9mM2UwZjItMGJiNi00OTViLWFkM2Et
NmMzZjY5YjE4NzM1LzEvMGd4UlVkOTdhdUhsLTlCWHpyRU50enRncTMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9mM2UwZjItMGJiNi00OTViLWFkM2EtNmMzZjY5YjE4NzM1
LzEvVWVvSFlHc29Zb2pPMzlKZjdvLUxkdVFXMV8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQMUMA0G
CSqGSIb3DQEBCwUAA4IBAQCInl5xNeAp3cmCG30RNM13vuRXm/VENHesh/0t3jSx
Fhm8CZ6byRNsNQWZeAbyxRMrPHcAfvus6oLn5MGzGghiWDOmhwZklZFUfNwFZf4n
VN3XQrqdhyNOjoO+tKLU21V0W0FUo8WG5iCs4Vy/LFRQWEDwmuH16qyJMCff1Lgx
5Ds4l1qkqW2B76nddxL4SWcwQHoDJsjhMfSDIrzaoPh63gYAA+FhdE7FoXP89EQi
oHOdOKGL8k0UbXkDt5mqWLpxn4Db8WYMDtisNhnZKDndj15Fay2MrdD5tlgbWluW
b6Kz835w/p9SPMzKEFO6abGNigIb/icfAVHAtKe4c+vg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:44 2024 by rpki-client on console-fra.rpki-client.org