Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/51bb40-fd1c-4cf9-810c-b2d73171d1bb/1/OJuht62cHpudsvyMOFFq2GijDsA.roa
File: OJuht62cHpudsvyMOFFq2GijDsA.roa (raw, json)
Hash identifier: QuZlSDHK6npQ4d69fZztZMp7fZ9U0CarsCb2uSpbOHo=
Subject key identifier: 38:9B:A1:B7:AD:9C:1E:9B:9D:B2:FC:8C:38:51:6A:D8:68:A3:0E:C0
Certificate issuer: /CN=c3b18ede10d5f9c99b8f68b9086d2fb93ccb9978
Certificate serial: 0185713087299FBF9756E0E03BECC2E9985D
Authority key identifier: C3:B1:8E:DE:10:D5:F9:C9:9B:8F:68:B9:08:6D:2F:B9:3C:CB:99:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7GO3hDV-cmbj2i5CG0vuTzLmXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/51bb40-fd1c-4cf9-810c-b2d73171d1bb/1/OJuht62cHpudsvyMOFFq2GijDsA.roa
Signing time: Mon 02 Jan 2023 06:34:43 +0000
ROA not before: Mon 02 Jan 2023 06:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63473
IP address blocks: 83.138.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:87:29:9f:bf:97:56:e0:e0:3b:ec:c2:e9:98:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b18ede10d5f9c99b8f68b9086d2fb93ccb9978
Validity
Not Before: Jan 2 06:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=389ba1b7ad9c1e9b9db2fc8c38516ad868a30ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7b:30:07:b7:cf:92:a8:9e:5b:ed:f8:7e:74:
b2:76:e6:af:f4:d5:09:6e:54:b9:0a:d9:54:95:f6:
55:e2:cb:3a:d0:1b:db:47:6e:6d:c4:a5:2f:ff:87:
f4:2d:39:84:f9:c6:d3:e0:03:0b:fa:d9:33:c0:2d:
ec:19:14:4d:6a:d7:16:f3:19:e5:aa:d3:b2:7e:44:
e2:78:19:5f:e8:ac:34:5d:d2:80:a2:a9:95:7b:0e:
34:58:1e:80:d6:0a:20:b6:5c:a1:1c:e4:20:22:30:
9f:4a:82:3d:65:36:4a:fb:8f:5f:1f:d7:eb:50:9d:
39:48:23:8a:38:7c:84:dd:fc:c8:dd:23:34:b7:e4:
ba:7b:be:9a:c6:9f:24:5a:b7:8e:2a:f4:d0:9f:8d:
90:c6:27:88:ec:a5:81:8e:87:10:70:9d:0c:ea:77:
23:c6:3a:df:91:6a:1d:b4:d5:9f:76:9f:65:17:2d:
b6:84:e5:1d:49:a1:79:51:0a:07:0f:2d:f5:99:9e:
67:dc:7a:06:06:2a:b1:61:b7:e2:27:50:c3:1e:a0:
b1:0e:7f:7b:1e:e7:e3:b9:84:e9:a2:b5:4e:4d:70:
53:a2:be:e9:54:ef:a9:cc:54:75:23:46:e5:85:59:
53:11:38:62:5f:6d:2f:60:21:4f:f4:a8:b7:53:d9:
ba:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9B:A1:B7:AD:9C:1E:9B:9D:B2:FC:8C:38:51:6A:D8:68:A3:0E:C0
X509v3 Authority Key Identifier:
keyid:C3:B1:8E:DE:10:D5:F9:C9:9B:8F:68:B9:08:6D:2F:B9:3C:CB:99:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7GO3hDV-cmbj2i5CG0vuTzLmXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/51bb40-fd1c-4cf9-810c-b2d73171d1bb/1/OJuht62cHpudsvyMOFFq2GijDsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/51bb40-fd1c-4cf9-810c-b2d73171d1bb/1/w7GO3hDV-cmbj2i5CG0vuTzLmXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.53.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:fe:c0:dc:f1:1f:23:a7:d7:a3:96:a6:27:76:de:43:a8:36:
d7:7e:63:63:5d:a7:4c:1e:04:cb:cd:ff:e7:84:b1:e9:ad:18:
b3:2d:6d:82:c4:47:48:21:8d:4b:11:0c:29:d7:d4:39:4b:62:
83:b6:b9:94:a3:2a:08:87:e5:5b:57:6f:a9:b8:eb:ba:9a:39:
25:4c:94:4d:49:13:4d:8a:61:96:1f:fe:a2:35:1b:84:ed:2b:
ed:d2:d7:45:bd:4a:0e:a1:30:85:fe:01:da:ce:25:f7:e9:25:
d5:fd:4e:06:61:e1:75:45:61:8e:6b:c5:4e:bf:56:27:d0:63:
d5:95:2f:46:4a:d3:4d:07:49:1c:c4:61:4a:f5:69:1f:c1:8b:
d4:b7:63:51:ce:74:ac:29:28:8e:a7:ac:0e:5f:56:04:ee:fb:
2b:7b:d6:4b:36:62:f5:95:11:a4:85:c0:48:5d:1c:fe:71:ff:
6f:f9:33:4a:2e:f0:5f:03:5e:69:e8:e3:1a:1b:89:e6:b1:8b:
6c:be:d5:65:b2:44:27:a3:3e:92:f7:ec:9b:88:91:27:92:11:
01:c5:55:86:06:6b:db:55:8a:6f:6b:6e:01:9b:6a:26:a6:51:
3c:fb:c0:e5:38:a2:57:b5:bc:ab:f8:31:14:4d:64:85:aa:c3:
e6:80:11:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxMIcpn7+XVuDgO+zC6ZhdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYjE4ZWRlMTBkNWY5Yzk5YjhmNjhiOTA4NmQyZmI5M2Nj
Yjk5NzgwHhcNMjMwMTAyMDYzNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODliYTFiN2FkOWMxZTliOWRiMmZjOGMzODUxNmFkODY4YTMwZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXswB7fPkqieW+34fnSyduav9NUJ
blS5CtlUlfZV4ss60BvbR25txKUv/4f0LTmE+cbT4AML+tkzwC3sGRRNatcW8xnl
qtOyfkTieBlf6Kw0XdKAoqmVew40WB6A1gogtlyhHOQgIjCfSoI9ZTZK+49fH9fr
UJ05SCOKOHyE3fzI3SM0t+S6e76axp8kWreOKvTQn42QxieI7KWBjocQcJ0M6ncj
xjrfkWodtNWfdp9lFy22hOUdSaF5UQoHDy31mZ5n3HoGBiqxYbfiJ1DDHqCxDn97
HufjuYTporVOTXBTor7pVO+pzFR1I0blhVlTEThiX20vYCFP9Ki3U9m6fQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDibobetnB6bnbL8jDhRathoow7AMB8GA1UdIwQY
MBaAFMOxjt4Q1fnJm49ouQhtL7k8y5l4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzdHTzNoRFYtY21iajJpNUNHMHZ1VHpMbVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81MWJiNDAtZmQxYy00Y2Y5LTgxMGMt
YjJkNzMxNzFkMWJiLzEvT0p1aHQ2MmNIcHVkc3Z5TU9GRnEyR2lqRHNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81MWJiNDAtZmQxYy00Y2Y5LTgxMGMtYjJkNzMxNzFkMWJi
LzEvdzdHTzNoRFYtY21iajJpNUNHMHZ1VHpMbVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4o1MA0G
CSqGSIb3DQEBCwUAA4IBAQAt/sDc8R8jp9ejlqYndt5DqDbXfmNjXadMHgTLzf/n
hLHprRizLW2CxEdIIY1LEQwp19Q5S2KDtrmUoyoIh+VbV2+puOu6mjklTJRNSRNN
imGWH/6iNRuE7Svt0tdFvUoOoTCF/gHaziX36SXV/U4GYeF1RWGOa8VOv1Yn0GPV
lS9GStNNB0kcxGFK9WkfwYvUt2NRznSsKSiOp6wOX1YE7vsre9ZLNmL1lRGkhcBI
XRz+cf9v+TNKLvBfA15p6OMaG4nmsYtsvtVlskQnoz6S9+ybiJEnkhEBxVWGBmvb
VYpva24Bm2omplE8+8DlOKJXtbyr+DEUTWSFqsPmgBGm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:13 2024 by rpki-client on console-fra.rpki-client.org