Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2fbbf5-b0b5-4ca5-9327-6c4f2e027911/1/OGB6DfHFQNj1eIzm0yMxp6V1-IU.roa
File: OGB6DfHFQNj1eIzm0yMxp6V1-IU.roa (raw, json)
Hash identifier: FosPxCPj+IuZfR1yu0fIb+eIWXEK5cGgUXedmdrscl4=
Subject key identifier: 38:60:7A:0D:F1:C5:40:D8:F5:78:8C:E6:D3:23:31:A7:A5:75:F8:85
Certificate issuer: /CN=e3025c689a52c898fd7279329f36b406cc8fbc17
Certificate serial: 018798DF685C4E32EF86361C73B896392D35
Authority key identifier: E3:02:5C:68:9A:52:C8:98:FD:72:79:32:9F:36:B4:06:CC:8F:BC:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wJcaJpSyJj9cnkynza0BsyPvBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2fbbf5-b0b5-4ca5-9327-6c4f2e027911/1/OGB6DfHFQNj1eIzm0yMxp6V1-IU.roa
Signing time: Wed 19 Apr 2023 09:36:30 +0000
ROA not before: Wed 19 Apr 2023 09:36:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62257
IP address blocks: 91.243.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:df:68:5c:4e:32:ef:86:36:1c:73:b8:96:39:2d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3025c689a52c898fd7279329f36b406cc8fbc17
Validity
Not Before: Apr 19 09:36:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38607a0df1c540d8f5788ce6d32331a7a575f885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:30:2d:31:0a:15:da:e7:2b:6f:bf:2c:1f:ac:
0a:b4:64:70:15:d4:07:80:f9:ff:e5:ae:14:53:90:
e5:af:90:8d:c6:be:9e:1f:56:a0:d6:04:e8:89:80:
ec:18:3e:8a:de:49:09:38:8f:75:3b:53:79:6f:ce:
bf:8a:91:67:54:12:c2:d4:75:52:55:aa:65:aa:ac:
bc:6e:6e:4d:30:53:a9:ef:7b:34:f3:11:65:b5:71:
8d:bd:1f:28:10:c4:01:7f:e2:3a:5e:84:69:75:3d:
0d:d5:cf:dc:1f:3e:7b:15:e4:aa:de:b1:2a:4d:a6:
ba:db:2c:8d:c3:2a:42:ea:96:06:6b:98:36:a4:dc:
98:a3:bf:29:cf:3c:c0:9f:53:94:ae:2a:ed:ca:fe:
10:5d:82:f7:79:d7:57:8c:26:2b:bf:4a:7b:fe:59:
01:b9:a9:31:0f:5a:95:5d:9b:7d:f5:f5:db:f3:28:
68:97:fe:0d:4e:73:96:e8:8b:53:42:ec:b7:fe:98:
43:8c:69:88:68:b3:08:d6:ce:f8:52:44:8d:b6:e6:
6c:d8:64:13:2b:af:bb:dd:f4:04:b2:5d:c6:91:cf:
f6:d8:cf:c5:78:34:75:1b:d3:7c:9a:3d:f8:23:75:
c4:b2:d9:46:28:8c:62:31:73:fc:e1:42:e0:5d:20:
56:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:60:7A:0D:F1:C5:40:D8:F5:78:8C:E6:D3:23:31:A7:A5:75:F8:85
X509v3 Authority Key Identifier:
keyid:E3:02:5C:68:9A:52:C8:98:FD:72:79:32:9F:36:B4:06:CC:8F:BC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wJcaJpSyJj9cnkynza0BsyPvBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2fbbf5-b0b5-4ca5-9327-6c4f2e027911/1/OGB6DfHFQNj1eIzm0yMxp6V1-IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2fbbf5-b0b5-4ca5-9327-6c4f2e027911/1/4wJcaJpSyJj9cnkynza0BsyPvBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.119.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:1e:47:d2:a6:a2:e7:50:5e:ac:68:df:aa:c8:ff:62:5c:3b:
1d:37:db:c3:f0:06:e9:ae:2e:49:3e:51:52:34:7c:a6:69:e5:
6e:ab:48:f6:c7:7e:72:96:45:72:a5:e5:14:12:5e:31:8a:a1:
ed:63:c3:bb:5e:39:2c:88:ea:e9:1b:da:ca:05:4b:fd:7b:33:
7b:6d:8d:6a:ae:c7:42:df:7b:c3:2f:ea:e3:ec:f3:a7:5e:4f:
b5:f5:f3:33:c8:d5:b4:60:f8:d7:8c:d7:bb:49:41:ae:25:73:
94:4f:b8:ca:70:e0:1e:28:d0:33:67:0e:10:92:1a:8e:f8:ec:
f5:1e:1b:99:68:e9:13:8a:a9:76:c0:03:77:ea:57:9f:65:1d:
8d:d8:9e:cd:56:94:33:a9:c5:4c:84:38:cf:a1:6a:61:a9:63:
b7:b5:eb:8a:48:77:48:f4:4d:01:c9:d4:7c:f9:e4:a9:95:6e:
b5:91:8c:ac:31:d4:ef:98:bd:97:fe:42:f3:d0:b4:9d:b5:1b:
9d:33:d0:89:10:c2:ce:b2:e8:c7:95:d0:ed:75:fa:4a:1b:18:
a5:1d:4d:65:fa:a4:f1:63:50:85:e9:91:39:65:93:9e:30:c5:
85:d8:ef:1b:40:31:34:d4:7e:0b:64:32:58:6c:be:03:e8:88:
da:62:ef:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeY32hcTjLvhjYcc7iWOS01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMDI1YzY4OWE1MmM4OThmZDcyNzkzMjlmMzZiNDA2Y2M4
ZmJjMTcwHhcNMjMwNDE5MDkzNjMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODYwN2EwZGYxYzU0MGQ4ZjU3ODhjZTZkMzIzMzFhN2E1NzVmODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzAtMQoV2ucrb78sH6wKtGRwFdQH
gPn/5a4UU5Dlr5CNxr6eH1ag1gToiYDsGD6K3kkJOI91O1N5b86/ipFnVBLC1HVS
Vaplqqy8bm5NMFOp73s08xFltXGNvR8oEMQBf+I6XoRpdT0N1c/cHz57FeSq3rEq
Taa62yyNwypC6pYGa5g2pNyYo78pzzzAn1OUrirtyv4QXYL3eddXjCYrv0p7/lkB
uakxD1qVXZt99fXb8yhol/4NTnOW6ItTQuy3/phDjGmIaLMI1s74UkSNtuZs2GQT
K6+73fQEsl3Gkc/22M/FeDR1G9N8mj34I3XEstlGKIxiMXP84ULgXSBWwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDhgeg3xxUDY9XiM5tMjMaeldfiFMB8GA1UdIwQY
MBaAFOMCXGiaUsiY/XJ5Mp82tAbMj7wXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHdKY2FKcFN5Smo5Y25reW56YTBCc3lQdkJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yZmJiZjUtYjBiNS00Y2E1LTkzMjct
NmM0ZjJlMDI3OTExLzEvT0dCNkRmSEZRTmoxZUl6bTB5TXhwNlYxLUlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yZmJiZjUtYjBiNS00Y2E1LTkzMjctNmM0ZjJlMDI3OTEx
LzEvNHdKY2FKcFN5Smo5Y25reW56YTBCc3lQdkJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/N3MA0G
CSqGSIb3DQEBCwUAA4IBAQBtHkfSpqLnUF6saN+qyP9iXDsdN9vD8Abpri5JPlFS
NHymaeVuq0j2x35ylkVypeUUEl4xiqHtY8O7XjksiOrpG9rKBUv9ezN7bY1qrsdC
33vDL+rj7POnXk+19fMzyNW0YPjXjNe7SUGuJXOUT7jKcOAeKNAzZw4QkhqO+Oz1
HhuZaOkTiql2wAN36lefZR2N2J7NVpQzqcVMhDjPoWphqWO3teuKSHdI9E0BydR8
+eSplW61kYysMdTvmL2X/kLz0LSdtRudM9CJEMLOsujHldDtdfpKGxilHU1l+qTx
Y1CF6ZE5ZZOeMMWF2O8bQDE01H4LZDJYbL4D6IjaYu/S
-----END CERTIFICATE-----
Generated at Wed Oct 18 12:47:31 2023 by rpki-client on console-ams.rpki-client.org