Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/oYNOXs3Q6eCgbbbXAZZOo4lKOkk.roa
File: oYNOXs3Q6eCgbbbXAZZOo4lKOkk.roa (raw, json)
Hash identifier: 3oTixciWQA27DCcjNxwiaI4HUoAc+eBK1v2xO1khroY=
Subject key identifier: A1:83:4E:5E:CD:D0:E9:E0:A0:6D:B6:D7:01:96:4E:A3:89:4A:3A:49
Certificate issuer: /CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
Certificate serial: E81F64
Authority key identifier: 16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/oYNOXs3Q6eCgbbbXAZZOo4lKOkk.roa
Signing time: Thu 13 Jan 2022 13:14:35 +0000
ROA not before: Thu 13 Jan 2022 13:14:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 213.109.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15212388 (0xe81f64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
Validity
Not Before: Jan 13 13:14:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1834e5ecdd0e9e0a06db6d701964ea3894a3a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:c9:a4:be:bd:64:f7:f3:f2:f3:42:f6:10:
fb:1e:53:a2:21:2d:06:44:e7:63:4f:93:c5:1e:53:
f3:9b:1d:4e:b5:d8:a9:20:c0:99:4e:32:1c:b2:7f:
f4:5c:3d:a5:95:83:3a:e4:39:f4:e4:f9:c9:da:11:
d7:d2:1c:18:ec:d4:f7:a0:53:d2:e3:8b:ed:81:d5:
d0:48:54:f1:cb:6e:c6:01:11:c6:64:c0:19:07:9e:
af:1e:01:f0:eb:3a:af:2f:32:be:11:62:3a:3d:14:
1b:b0:30:97:48:f5:e1:c6:03:7d:f0:71:89:27:d3:
04:ec:be:55:f6:19:54:77:62:6c:1b:36:f7:76:5d:
d7:5a:b7:36:d8:6e:2c:5c:5e:54:eb:7a:66:e0:ca:
c8:22:08:61:3d:9a:92:12:6c:69:88:a2:4f:3e:9c:
2b:8e:d7:55:de:0d:e3:8a:ce:c4:b7:46:72:f7:03:
95:0c:b4:f3:64:b5:41:d3:85:63:b8:e7:7d:8d:80:
cc:e6:c5:02:f3:95:19:86:ee:66:14:17:06:d6:e7:
9e:58:15:0c:4c:2a:5e:8f:74:48:32:31:1b:21:b6:
8b:52:c1:0c:89:55:79:48:54:86:43:29:a2:48:61:
59:4f:e9:e5:26:ef:0a:d6:65:6b:71:a1:ed:2a:49:
41:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:83:4E:5E:CD:D0:E9:E0:A0:6D:B6:D7:01:96:4E:A3:89:4A:3A:49
X509v3 Authority Key Identifier:
keyid:16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/oYNOXs3Q6eCgbbbXAZZOo4lKOkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/Fmw4IPtmUFE0wpLyyPS63OTrGrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:44:84:82:81:1d:bb:b0:50:ee:88:9a:e0:f3:13:b3:8b:69:
97:72:66:78:1e:59:e3:9a:41:bf:ba:bf:fd:11:39:d3:2b:be:
a5:1f:79:55:19:a9:2e:a3:af:81:bf:94:17:a1:9d:c1:c0:eb:
49:47:36:e7:a2:1e:a9:c4:03:42:50:43:d6:91:31:f5:be:d1:
e9:8e:78:61:5b:17:90:14:1c:6e:43:f0:44:92:47:03:49:fc:
6a:b7:d3:52:06:ed:66:7b:08:c4:46:33:31:b0:a3:58:18:1a:
8c:ca:5b:fb:e3:51:e9:7c:72:74:2e:46:98:ee:18:44:bc:29:
e2:c9:10:da:f5:e8:f3:02:36:0e:51:5b:ed:4d:6e:30:e1:7b:
69:71:d5:58:52:3f:0d:d9:ff:8d:6f:c2:3c:d3:0d:98:92:b5:
f8:ca:6c:3f:88:77:b0:89:9b:41:46:63:33:34:21:4b:be:99:
f7:66:b9:3c:49:16:4a:ea:bb:dd:ca:26:4a:da:8e:e3:28:a8:
b7:d7:41:c7:80:7b:e2:8a:57:eb:d3:a2:be:e7:0b:8d:80:8e:
d3:70:50:34:e4:22:04:b6:2a:ca:53:da:e5:52:47:97:5f:ff:
bf:92:59:f2:e3:75:69:e1:32:1a:3a:13:71:23:da:47:6d:4f:
8e:b4:40:05
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAOgfZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NjZjMzgyMGZiNjY1MDUxMzRjMjkyZjJjOGY0YmFkY2U0ZWIxYWI1MB4XDTIyMDEx
MzEzMTQzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTE4MzRlNWVjZGQw
ZTllMGEwNmRiNmQ3MDE5NjRlYTM4OTRhM2E0OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL4SyaS+vWT38/LzQvYQ+x5ToiEtBkTnY0+TxR5T85sdTrXY
qSDAmU4yHLJ/9Fw9pZWDOuQ59OT5ydoR19IcGOzU96BT0uOL7YHV0EhU8ctuxgER
xmTAGQeerx4B8Os6ry8yvhFiOj0UG7Awl0j14cYDffBxiSfTBOy+VfYZVHdibBs2
93Zd11q3NthuLFxeVOt6ZuDKyCIIYT2akhJsaYiiTz6cK47XVd4N44rOxLdGcvcD
lQy082S1QdOFY7jnfY2AzObFAvOVGYbuZhQXBtbnnlgVDEwqXo90SDIxGyG2i1LB
DIlVeUhUhkMpokhhWU/p5SbvCtZla3Gh7SpJQRsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBShg05ezdDp4KBtttcBlk6jiUo6STAfBgNVHSMEGDAWgBQWbDgg+2ZQUTTC
kvLI9Lrc5OsatTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZtdzRJUHRtVUZFMHdwTHl5UFM2M09UckdyVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjMvZmJiYWFiLTNkYWYtNDJhYi1iNGYyLWYwMDcwMmQyNGJhMC8x
L29ZTk9YczNRNmVDZ2JiYlhBWlpPbzRsS09ray5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMv
ZmJiYWFiLTNkYWYtNDJhYi1iNGYyLWYwMDcwMmQyNGJhMC8xL0ZtdzRJUHRtVUZF
MHdwTHl5UFM2M09UckdyVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANVtxjANBgkqhkiG9w0BAQsFAAOC
AQEAXESEgoEdu7BQ7oia4PMTs4tpl3JmeB5Z45pBv7q//RE50yu+pR95VRmpLqOv
gb+UF6GdwcDrSUc256IeqcQDQlBD1pEx9b7R6Y54YVsXkBQcbkPwRJJHA0n8arfT
UgbtZnsIxEYzMbCjWBgajMpb++NR6XxydC5GmO4YRLwp4skQ2vXo8wI2DlFb7U1u
MOF7aXHVWFI/Ddn/jW/CPNMNmJK1+MpsP4h3sImbQUZjMzQhS76Z92a5PEkWSuq7
3comStqO4yiot9dBx4B74opX69OivucLjYCO03BQNOQiBLYqylPa5VJHl1//v5JZ
8uN1aeEyGjoTcSPaR21PjrRABQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:42 2024 by rpki-client on console-ams.rpki-client.org