Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/jjOAHruR5AiB2HSkMRStIafRgmM.roa
File: jjOAHruR5AiB2HSkMRStIafRgmM.roa (raw, json)
Hash identifier: gnm1zPattMhaBWnN0gJjg1/7LK7yrQx+zIYVMXyH+uo=
Subject key identifier: 8E:33:80:1E:BB:91:E4:08:81:D8:74:A4:31:14:AD:21:A7:D1:82:63
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 01856ED4C4904D82C63315E54B3DD6B28C97
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/jjOAHruR5AiB2HSkMRStIafRgmM.roa
Signing time: Sun 01 Jan 2023 19:35:15 +0000
ROA not before: Sun 01 Jan 2023 19:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 91.193.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c4:90:4d:82:c6:33:15:e5:4b:3d:d6:b2:8c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Jan 1 19:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e33801ebb91e40881d874a43114ad21a7d18263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:b3:f7:31:86:c6:87:6e:d1:55:ce:57:c2:
85:b5:8c:d0:d5:07:1e:57:57:8a:d1:a6:8d:60:d1:
f0:86:fb:d6:ea:0d:61:24:dd:61:8e:43:68:13:30:
6d:36:db:c0:13:78:19:7f:bf:4f:8a:7e:df:28:2b:
3e:66:ec:8f:c3:b8:ed:45:71:b9:04:6e:b1:41:a8:
e6:f8:60:7e:7a:20:32:80:c0:6b:40:c7:95:60:05:
3b:e7:e7:60:41:81:bc:af:3f:0c:1e:d8:11:84:a0:
6b:85:4f:84:ee:a3:e2:52:60:11:ce:85:78:e0:f5:
a4:e0:d0:1b:1a:0f:90:9f:4f:da:66:b1:2f:2b:35:
d0:bb:14:c6:93:31:ba:9e:0b:20:c7:dc:29:23:7c:
21:99:e8:bd:f1:8c:d7:80:f4:c0:ad:bf:c9:4e:4f:
50:ed:d9:b6:9c:50:02:75:fd:d7:3d:e6:78:25:98:
10:f1:77:db:50:38:c2:97:6c:1f:66:21:ff:06:9a:
b1:3e:20:d0:4e:c0:75:31:cf:ee:0a:57:5a:6a:1f:
af:1f:29:4e:eb:de:8e:53:12:81:62:8a:8b:5c:f7:
0e:15:1e:57:15:c3:48:b3:f8:ff:25:70:08:b3:cf:
b8:ff:91:ca:fc:ed:89:da:f2:48:58:21:cd:33:ac:
bc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:33:80:1E:BB:91:E4:08:81:D8:74:A4:31:14:AD:21:A7:D1:82:63
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/jjOAHruR5AiB2HSkMRStIafRgmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.232.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:47:6a:40:c9:ec:20:0f:7c:f0:8f:01:aa:ea:7d:90:9d:9d:
74:a7:d3:e1:27:24:48:37:5a:cd:14:9d:4a:c7:70:6f:2c:16:
44:f5:6a:a3:8d:95:06:6c:47:24:7a:cb:b5:1c:7c:c5:61:d8:
a5:15:fc:67:af:ff:c4:e5:d3:61:79:c4:c0:a2:e0:a5:ae:9b:
c4:2b:54:ba:23:1c:33:ad:3a:97:5f:fe:cf:28:7b:b5:bc:67:
12:a6:9b:24:97:a8:74:f1:4f:a4:1c:e6:8c:57:51:d0:45:d6:
d4:f0:a6:5c:28:53:64:c0:a7:f0:0e:35:6e:77:39:17:75:d5:
e2:9b:94:30:04:72:de:59:0d:42:81:a7:95:6f:f1:3c:cf:49:
75:cc:f5:9c:f4:85:46:e4:83:6d:f4:bb:35:d6:1c:09:c3:d4:
e7:44:19:82:17:9d:ee:18:c4:7d:9f:c2:57:88:b5:3b:31:85:
ed:d3:f0:6e:22:b7:92:1e:c4:a9:9d:d8:8f:c7:f5:ae:25:c5:
60:ab:5d:55:50:90:2e:e9:9f:83:20:d4:20:c5:32:b0:ef:ac:
49:89:84:d8:6f:04:7f:32:ca:f4:e8:e1:14:f2:8b:9d:bf:51:
45:53:2d:27:b9:33:9a:e2:27:32:77:77:38:ed:a3:86:e1:a7:
97:3a:2b:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1MSQTYLGMxXlSz3WsoyXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZGNjOGJjZGI2Yzc0NGFjZGY0M2RkNzJkNjhkMjA0NTFh
MTc5ZjYwHhcNMjMwMTAxMTkzNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTMzODAxZWJiOTFlNDA4ODFkODc0YTQzMTE0YWQyMWE3ZDE4MjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWqz9zGGxodu0VXOV8KFtYzQ1Qce
V1eK0aaNYNHwhvvW6g1hJN1hjkNoEzBtNtvAE3gZf79Pin7fKCs+ZuyPw7jtRXG5
BG6xQajm+GB+eiAygMBrQMeVYAU75+dgQYG8rz8MHtgRhKBrhU+E7qPiUmARzoV4
4PWk4NAbGg+Qn0/aZrEvKzXQuxTGkzG6ngsgx9wpI3whmei98YzXgPTArb/JTk9Q
7dm2nFACdf3XPeZ4JZgQ8XfbUDjCl2wfZiH/BpqxPiDQTsB1Mc/uCldaah+vHylO
696OUxKBYoqLXPcOFR5XFcNIs/j/JXAIs8+4/5HK/O2J2vJIWCHNM6y8dQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI4zgB67keQIgdh0pDEUrSGn0YJjMB8GA1UdIwQY
MBaAFDzcyLzbbHRKzfQ91y1o0gRRoXn2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE56SXZOdHNkRXJOOUQzWExXalNCRkdoZWZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8zNTY4MjYtZmMxMC00YWE5LTk2YTQt
NjM3YjM3MWRhOGU2LzEvampPQUhydVI1QWlCMkhTa01SU3RJYWZSZ21NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8zNTY4MjYtZmMxMC00YWE5LTk2YTQtNjM3YjM3MWRhOGU2
LzEvUE56SXZOdHNkRXJOOUQzWExXalNCRkdoZWZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8HoMA0G
CSqGSIb3DQEBCwUAA4IBAQBrR2pAyewgD3zwjwGq6n2QnZ10p9PhJyRIN1rNFJ1K
x3BvLBZE9WqjjZUGbEckesu1HHzFYdilFfxnr//E5dNhecTAouClrpvEK1S6Ixwz
rTqXX/7PKHu1vGcSppskl6h08U+kHOaMV1HQRdbU8KZcKFNkwKfwDjVudzkXddXi
m5QwBHLeWQ1CgaeVb/E8z0l1zPWc9IVG5INt9Ls11hwJw9TnRBmCF53uGMR9n8JX
iLU7MYXt0/BuIreSHsSpndiPx/WuJcVgq11VUJAu6Z+DINQgxTKw76xJiYTYbwR/
Msr06OEU8oudv1FFUy0nuTOa4icyd3c47aOG4aeXOitz
-----END CERTIFICATE-----
Generated at Thu Jul 20 13:17:49 2023 by rpki-client on console-ams.rpki-client.org