Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/qyMIxjBgte-TI6Olo1M8uUrj4zo.roa
File: qyMIxjBgte-TI6Olo1M8uUrj4zo.roa (raw, json)
Hash identifier: TYOL0D43B58Z+2rcPtqQw1z/D1i9Lyao0cPcoyQJ/ck=
Subject key identifier: AB:23:08:C6:30:60:B5:EF:93:23:A3:A5:A3:53:3C:B9:4A:E3:E3:3A
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 0186E6DDE5C8BEC8BC26F7419A7E33F4744C
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/qyMIxjBgte-TI6Olo1M8uUrj4zo.roa
Signing time: Wed 15 Mar 2023 20:02:27 +0000
ROA not before: Wed 15 Mar 2023 20:02:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 91.108.238.0/24 maxlen: 24
91.108.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e6:dd:e5:c8:be:c8:bc:26:f7:41:9a:7e:33:f4:74:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Mar 15 20:02:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab2308c63060b5ef9323a3a5a3533cb94ae3e33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:17:e5:23:ac:13:89:2e:5e:df:53:b3:88:a3:
26:11:b6:97:12:01:1a:c5:77:11:a0:1e:11:b8:50:
c4:3f:ea:c0:93:fe:5f:63:ff:f5:9e:b7:75:c5:17:
59:39:98:08:13:78:85:12:dc:52:87:2f:db:a0:08:
1d:ba:71:0f:b4:b4:6b:d5:6c:07:18:41:84:27:c7:
d4:5a:55:93:6c:9d:7f:18:8e:c5:6c:fa:c9:d0:f8:
d5:4d:00:6a:27:f8:51:84:8d:72:a9:44:1f:ad:64:
34:a4:df:f8:13:f0:4f:40:8a:b7:6f:30:f0:12:18:
52:5c:db:98:0c:1b:a7:f2:cf:47:15:54:d2:ee:72:
3a:32:22:ea:27:e9:05:09:e9:3b:ea:e5:06:93:37:
37:c1:f9:f5:c9:9f:50:82:c9:4f:85:f7:d8:5d:de:
1b:a4:07:00:ea:f7:e8:fc:56:87:8f:73:a8:e9:33:
f2:b9:81:d9:0f:bf:47:54:df:93:c1:6d:6f:c2:a0:
6a:e1:66:2c:b7:c6:89:d3:ef:5f:91:73:31:d1:fd:
32:4d:44:94:4a:59:09:39:d3:65:1f:7e:18:d2:a1:
a5:c4:a1:b9:88:77:ab:79:2b:bc:9c:b2:94:c2:23:
e6:ab:0c:18:d2:4a:62:a0:3e:b7:23:f9:8c:46:da:
9e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:23:08:C6:30:60:B5:EF:93:23:A3:A5:A3:53:3C:B9:4A:E3:E3:3A
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/qyMIxjBgte-TI6Olo1M8uUrj4zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.236.0/24
91.108.238.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:df:a1:ca:7f:20:16:f1:b1:06:fe:d2:7a:c7:bf:95:a5:cb:
5f:6d:16:ae:98:6d:cf:d5:32:2b:fd:53:76:a9:33:b4:80:79:
6e:e5:5a:b3:dc:1d:b1:11:2c:b8:39:7d:d3:4e:aa:d2:73:86:
08:16:1e:48:19:68:a6:ed:b4:da:09:dc:42:e3:af:4f:9d:19:
bc:9f:c7:56:83:97:60:e2:a5:a4:58:22:40:e5:66:18:3e:8c:
77:bf:f8:83:2a:78:68:c2:92:b9:18:8c:9b:de:27:32:db:35:
5c:c0:a0:d6:79:f2:ad:4d:12:ef:04:ba:ce:cf:9b:a5:ec:5e:
a1:77:01:19:cd:3e:ac:b9:db:59:b8:fd:df:af:91:b7:0f:b7:
f5:57:25:8d:f2:93:07:f3:8f:94:e8:51:fb:1c:ac:74:97:0b:
a2:c8:e6:f3:5d:81:53:fd:98:34:49:28:04:41:67:e9:65:19:
c3:06:40:89:af:c5:ac:db:70:f6:e1:37:34:2b:30:74:0a:a3:
af:90:5c:58:24:9d:80:2b:6d:02:b1:89:e1:bf:be:d6:17:ab:
ce:c9:bc:61:8a:3f:d3:e3:b2:1d:3c:e8:7b:15:6c:de:d0:7e:
f7:fd:65:21:16:b5:ac:3b:38:3a:99:ae:60:d1:72:c8:22:53:
ae:b4:e7:ae
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYbm3eXIvsi8JvdBmn4z9HRMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZGVlYTNiNmFhYzRkODM0YjRmZDdjMmU1ZDNjMzk3ZjYx
ZjQzZDYwHhcNMjMwMzE1MjAwMjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjIzMDhjNjMwNjBiNWVmOTMyM2EzYTVhMzUzM2NiOTRhZTNlMzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBflI6wTiS5e31OziKMmEbaXEgEa
xXcRoB4RuFDEP+rAk/5fY//1nrd1xRdZOZgIE3iFEtxShy/boAgdunEPtLRr1WwH
GEGEJ8fUWlWTbJ1/GI7FbPrJ0PjVTQBqJ/hRhI1yqUQfrWQ0pN/4E/BPQIq3bzDw
EhhSXNuYDBun8s9HFVTS7nI6MiLqJ+kFCek76uUGkzc3wfn1yZ9QgslPhffYXd4b
pAcA6vfo/FaHj3Oo6TPyuYHZD79HVN+TwW1vwqBq4WYst8aJ0+9fkXMx0f0yTUSU
SlkJOdNlH34Y0qGlxKG5iHereSu8nLKUwiPmqwwY0kpioD63I/mMRtqeEQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKsjCMYwYLXvkyOjpaNTPLlK4+M6MB8GA1UdIwQY
MBaAFDre6jtqrE2DS0/XwuXTw5f2H0PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3Q3cU8ycXNUWU5MVDlmQzVkUERsX1lmUTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8wMTVmNDQtMGY0Yy00NzE0LTg2MTUt
MjNiMDcyZjViMTg4LzEvcXlNSXhqQmd0ZS1USTZPbG8xTTh1VXJqNHpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8wMTVmNDQtMGY0Yy00NzE0LTg2MTUtMjNiMDcyZjViMTg4
LzEvT3Q3cU8ycXNUWU5MVDlmQzVkUERsX1lmUTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW2zsAwQA
W2zuMA0GCSqGSIb3DQEBCwUAA4IBAQCP36HKfyAW8bEG/tJ6x7+VpctfbRaumG3P
1TIr/VN2qTO0gHlu5Vqz3B2xESy4OX3TTqrSc4YIFh5IGWim7bTaCdxC469PnRm8
n8dWg5dg4qWkWCJA5WYYPox3v/iDKnhowpK5GIyb3icy2zVcwKDWefKtTRLvBLrO
z5ul7F6hdwEZzT6sudtZuP3fr5G3D7f1VyWN8pMH84+U6FH7HKx0lwuiyObzXYFT
/Zg0SSgEQWfpZRnDBkCJr8Ws23D24Tc0KzB0CqOvkFxYJJ2AK20CsYnhv77WF6vO
ybxhij/T47IdPOh7FWze0H73/WUhFrWsOzg6ma5g0XLIIlOutOeu
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:20 2023 by rpki-client on console-fra.rpki-client.org