Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/0B9N5-eZ1YIo4hXgyWBN1wnJolI.roa
File: 0B9N5-eZ1YIo4hXgyWBN1wnJolI.roa (raw, json)
Hash identifier: p7MXOl6PAV5z+lMEC/CxryFIlP2o9+D407I7787C/3w=
Subject key identifier: D0:1F:4D:E7:E7:99:D5:82:28:E2:15:E0:C9:60:4D:D7:09:C9:A2:52
Certificate issuer: /CN=3320c3e2ecf28b8c59374fa816dc4ad90e5f0cf0
Certificate serial: 01880FF1916E9431E7A03AB5312A5A33B3B2
Authority key identifier: 33:20:C3:E2:EC:F2:8B:8C:59:37:4F:A8:16:DC:4A:D9:0E:5F:0C:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/0B9N5-eZ1YIo4hXgyWBN1wnJolI.roa
Signing time: Fri 12 May 2023 12:31:09 +0000
ROA not before: Fri 12 May 2023 12:31:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.62.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:f1:91:6e:94:31:e7:a0:3a:b5:31:2a:5a:33:b3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3320c3e2ecf28b8c59374fa816dc4ad90e5f0cf0
Validity
Not Before: May 12 12:31:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d01f4de7e799d58228e215e0c9604dd709c9a252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:5c:bc:e4:64:79:b0:9b:61:f6:94:fe:4c:
ee:20:de:84:c1:53:73:a0:23:4f:4a:e6:0c:cd:33:
ec:65:1b:18:ee:46:fd:ce:b9:a1:07:3c:e0:87:26:
d9:63:21:05:9f:fb:f7:b6:8d:be:30:d4:a6:c1:cc:
0d:7f:f4:fe:fb:7f:91:9d:4e:45:a1:4b:12:bc:4f:
d3:75:7e:40:9c:a8:d0:f9:6f:3b:8f:c1:a8:95:09:
e7:5e:ec:13:b1:bb:3d:96:e6:72:98:c0:72:a7:75:
e4:e7:ef:ac:cc:11:15:91:55:55:a3:b7:85:32:80:
b1:de:df:ab:d9:1c:7d:da:cc:db:73:54:a8:b7:b2:
f7:9e:b8:92:1b:7c:b1:3e:2b:ea:d2:ae:5d:d2:2e:
1f:d9:55:3d:19:6f:4d:77:44:13:a6:99:97:cf:64:
8d:95:f4:08:d5:0b:83:b5:b2:c0:98:e4:a4:b5:8e:
90:ca:fb:3c:57:f8:59:f5:43:27:02:d6:d6:80:fc:
5e:3d:f8:43:16:bc:dc:a6:ea:75:8f:13:45:b5:ef:
d0:21:66:60:95:fc:ae:a0:11:dd:60:d1:4e:a1:c4:
fa:4a:83:16:ce:4b:70:21:b3:fe:51:71:11:4d:12:
cb:a5:ab:57:3a:02:28:19:32:1b:6d:fc:9a:c3:c5:
0b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1F:4D:E7:E7:99:D5:82:28:E2:15:E0:C9:60:4D:D7:09:C9:A2:52
X509v3 Authority Key Identifier:
keyid:33:20:C3:E2:EC:F2:8B:8C:59:37:4F:A8:16:DC:4A:D9:0E:5F:0C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/0B9N5-eZ1YIo4hXgyWBN1wnJolI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.162.0/24
Signature Algorithm: sha256WithRSAEncryption
61:9f:e1:d4:89:5d:23:4f:53:1c:eb:d5:8d:ce:d3:08:cf:1f:
cf:4f:3e:c1:76:7f:cb:01:22:31:3a:d7:5b:ba:43:10:11:2b:
8c:81:86:a3:3b:33:19:ad:94:03:7c:d6:26:41:7d:24:88:bd:
8e:7c:29:c8:ab:03:08:d7:dc:be:87:a0:03:24:c4:0b:33:0b:
74:70:5c:09:b5:b8:d5:ba:56:f5:55:49:51:1e:a8:9b:5f:be:
03:e2:b9:16:10:92:78:bc:bf:91:ca:42:76:92:b3:ca:11:6a:
90:a2:00:27:b8:5d:e7:56:41:b0:aa:61:c3:38:c8:17:92:13:
5b:c9:25:61:1e:03:27:5f:25:78:a2:41:1d:46:e8:04:e7:70:
cd:00:39:4a:5e:62:07:29:86:d5:ee:5b:65:80:08:66:0e:ba:
93:fb:6f:5c:e7:6d:73:19:28:3b:c1:b0:db:eb:be:48:c2:39:
4e:5b:1c:b5:fd:2e:1f:65:2c:24:e3:4f:56:fc:46:aa:40:e2:
f5:47:32:86:03:22:e1:59:d4:f5:bb:da:db:30:f1:80:95:e8:
59:f0:43:49:e5:31:94:a2:57:d6:64:d3:62:99:0d:ff:ac:4d:
93:8b:a8:dd:a8:28:10:74:e4:89:17:4c:af:00:1f:bc:73:39:
b6:a8:cc:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgP8ZFulDHnoDq1MSpaM7OyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMjBjM2UyZWNmMjhiOGM1OTM3NGZhODE2ZGM0YWQ5MGU1
ZjBjZjAwHhcNMjMwNTEyMTIzMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDFmNGRlN2U3OTlkNTgyMjhlMjE1ZTBjOTYwNGRkNzA5YzlhMjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYtcvORkebCbYfaU/kzuIN6EwVNz
oCNPSuYMzTPsZRsY7kb9zrmhBzzghybZYyEFn/v3to2+MNSmwcwNf/T++3+RnU5F
oUsSvE/TdX5AnKjQ+W87j8GolQnnXuwTsbs9luZymMByp3Xk5++szBEVkVVVo7eF
MoCx3t+r2Rx92szbc1Sot7L3nriSG3yxPivq0q5d0i4f2VU9GW9Nd0QTppmXz2SN
lfQI1QuDtbLAmOSktY6Qyvs8V/hZ9UMnAtbWgPxePfhDFrzcpup1jxNFte/QIWZg
lfyuoBHdYNFOocT6SoMWzktwIbP+UXERTRLLpatXOgIoGTIbbfyaw8ULrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNAfTefnmdWCKOIV4MlgTdcJyaJSMB8GA1UdIwQY
MBaAFDMgw+Ls8ouMWTdPqBbcStkOXwzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXlERDR1enlpNHhaTjAtb0Z0eEsyUTVmRFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81N2ViODktOTFhOC00Zjk4LWFkZjEt
ZDY4ZjRjMDM1ZWExLzEvMEI5TjUtZVoxWUlvNGhYZ3lXQk4xd25Kb2xJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC81N2ViODktOTFhOC00Zjk4LWFkZjEtZDY4ZjRjMDM1ZWEx
LzEvTXlERDR1enlpNHhaTjAtb0Z0eEsyUTVmRFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj6iMA0G
CSqGSIb3DQEBCwUAA4IBAQBhn+HUiV0jT1Mc69WNztMIzx/PTz7Bdn/LASIxOtdb
ukMQESuMgYajOzMZrZQDfNYmQX0kiL2OfCnIqwMI19y+h6ADJMQLMwt0cFwJtbjV
ulb1VUlRHqibX74D4rkWEJJ4vL+RykJ2krPKEWqQogAnuF3nVkGwqmHDOMgXkhNb
ySVhHgMnXyV4okEdRugE53DNADlKXmIHKYbV7ltlgAhmDrqT+29c521zGSg7wbDb
675IwjlOWxy1/S4fZSwk409W/EaqQOL1RzKGAyLhWdT1u9rbMPGAlehZ8ENJ5TGU
olfWZNNimQ3/rE2Ti6jdqCgQdOSJF0yvAB+8czm2qMxR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:09 2024 by rpki-client on console-fra.rpki-client.org