Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/PrvBPXsqkfzc7l3gns1VnNtrqtQ.roa
File: PrvBPXsqkfzc7l3gns1VnNtrqtQ.roa (raw, json)
Hash identifier: d5CO3SQh/qx9xxp64s0vIhy+qWXbLMZeFjoTnvwQyww=
Subject key identifier: 3E:BB:C1:3D:7B:2A:91:FC:DC:EE:5D:E0:9E:CD:55:9C:DB:6B:AA:D4
Certificate issuer: /CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Certificate serial: 01856F79A05B458D7E6B0906628C07B93915
Authority key identifier: 00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/PrvBPXsqkfzc7l3gns1VnNtrqtQ.roa
Signing time: Sun 01 Jan 2023 22:35:19 +0000
ROA not before: Sun 01 Jan 2023 22:35:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 194.50.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:a0:5b:45:8d:7e:6b:09:06:62:8c:07:b9:39:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Validity
Not Before: Jan 1 22:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ebbc13d7b2a91fcdcee5de09ecd559cdb6baad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8c:11:fe:ce:16:9c:7b:22:8e:6e:56:0d:22:
70:bd:4d:9b:2c:27:88:8f:c2:67:75:e0:da:4b:71:
f9:2e:70:ff:41:09:85:0c:59:34:e5:59:4f:9d:76:
b2:06:5f:7d:8c:bc:8c:90:74:1b:03:0a:52:e7:fa:
76:a8:6d:64:aa:52:11:e7:61:82:28:64:15:2d:b5:
13:d6:e8:ca:0d:b2:9c:39:07:70:96:dd:ae:31:16:
ed:82:d5:ff:cf:14:88:bb:fc:42:85:a4:b5:a4:ff:
64:a5:a2:9f:93:aa:14:d0:1b:29:b8:d6:bc:ed:5c:
e9:d7:bb:74:b1:73:bd:3f:f3:07:50:a6:a2:b5:7e:
c0:2c:f6:ae:50:bd:e6:a8:a2:b4:4f:cb:1c:40:73:
29:4e:2c:01:be:e0:9e:f7:49:ff:9c:00:ca:7f:38:
21:66:fc:86:82:bc:a7:45:86:c3:7b:30:0b:dd:71:
77:04:e4:1a:4e:2a:26:11:9b:2f:74:66:56:06:c8:
5e:f9:9a:ce:f7:47:cd:43:cc:06:eb:80:41:06:d9:
e2:b1:83:2b:0c:65:da:ec:e7:ff:3c:fd:70:1e:5b:
b5:97:ae:a6:05:48:84:f3:fb:45:e6:5a:18:1a:e3:
d2:14:75:01:86:6a:5a:3e:61:4b:4f:14:2a:24:e6:
0a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BB:C1:3D:7B:2A:91:FC:DC:EE:5D:E0:9E:CD:55:9C:DB:6B:AA:D4
X509v3 Authority Key Identifier:
keyid:00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/PrvBPXsqkfzc7l3gns1VnNtrqtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.233.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:2d:d3:99:cc:71:27:d8:c1:59:75:99:b0:84:6a:fe:76:32:
a8:c2:62:11:ba:19:f3:b9:b7:52:22:3e:ad:ca:18:1c:d3:23:
d6:dd:e9:04:26:b5:8b:fc:3a:6a:10:47:d2:59:3a:fe:23:5d:
33:1e:fb:1c:41:1b:c0:75:aa:43:d1:52:da:ec:37:10:55:ed:
8c:cc:ed:c7:39:e7:92:9a:4a:28:3c:eb:b8:b0:b6:be:2d:db:
ff:fb:9a:d9:6b:00:46:bf:9f:91:07:64:53:b9:50:7b:3f:64:
53:13:f4:87:15:1c:42:c6:a3:a6:53:79:83:11:8f:27:5e:5d:
1d:5e:d8:c4:65:11:2a:b1:9c:f5:4f:ef:92:4a:5c:27:f1:a0:
98:15:f8:92:90:92:c6:df:05:86:fc:46:9c:4a:55:df:c0:34:
38:d8:d5:84:88:f1:5d:1d:c6:d5:97:4e:9a:c3:d9:28:5a:99:
ef:e9:55:61:a9:8a:d5:d3:1f:f7:03:47:81:23:a0:6d:63:b0:
e0:a6:cf:72:d1:49:0f:20:44:52:41:6c:f3:85:0e:81:cc:7e:
c3:9c:0a:bd:95:69:e7:dd:44:cf:df:3c:27:30:a1:df:51:1f:
9d:c7:b3:f7:40:79:22:8f:e0:e7:cd:2c:ed:08:f7:72:fb:17:
1c:67:f8:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVveaBbRY1+awkGYowHuTkVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMTM4YWY2NmViNGQ1NTdmYTRiMzkzOWM2Y2JkOTYxYTkx
MjM1NjAwHhcNMjMwMTAxMjIzNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWJiYzEzZDdiMmE5MWZjZGNlZTVkZTA5ZWNkNTU5Y2RiNmJhYWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYwR/s4WnHsijm5WDSJwvU2bLCeI
j8JndeDaS3H5LnD/QQmFDFk05VlPnXayBl99jLyMkHQbAwpS5/p2qG1kqlIR52GC
KGQVLbUT1ujKDbKcOQdwlt2uMRbtgtX/zxSIu/xChaS1pP9kpaKfk6oU0BspuNa8
7Vzp17t0sXO9P/MHUKaitX7ALPauUL3mqKK0T8scQHMpTiwBvuCe90n/nADKfzgh
ZvyGgrynRYbDezAL3XF3BOQaTiomEZsvdGZWBshe+ZrO90fNQ8wG64BBBtnisYMr
DGXa7Of/PP1wHlu1l66mBUiE8/tF5loYGuPSFHUBhmpaPmFLTxQqJOYKQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD67wT17KpH83O5d4J7NVZzba6rUMB8GA1UdIwQY
MBaAFAATivZutNVX+ks5OcbL2WGpEjVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUJPSzltNjAxVmY2U3prNXhzdlpZYWtTTldBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84MzIzM2MtODk4ZS00OTFkLTk1OGMt
NGZlYTYyNDQxM2U0LzEvUHJ2QlBYc3FrZnpjN2wzZ25zMVZuTnRycXRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS84MzIzM2MtODk4ZS00OTFkLTk1OGMtNGZlYTYyNDQxM2U0
LzEvQUJPSzltNjAxVmY2U3prNXhzdlpZYWtTTldBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjLpMA0G
CSqGSIb3DQEBCwUAA4IBAQAvLdOZzHEn2MFZdZmwhGr+djKowmIRuhnzubdSIj6t
yhgc0yPW3ekEJrWL/DpqEEfSWTr+I10zHvscQRvAdapD0VLa7DcQVe2MzO3HOeeS
mkooPOu4sLa+Ldv/+5rZawBGv5+RB2RTuVB7P2RTE/SHFRxCxqOmU3mDEY8nXl0d
XtjEZREqsZz1T++SSlwn8aCYFfiSkJLG3wWG/EacSlXfwDQ42NWEiPFdHcbVl06a
w9koWpnv6VVhqYrV0x/3A0eBI6BtY7Dgps9y0UkPIERSQWzzhQ6BzH7DnAq9lWnn
3UTP3zwnMKHfUR+dx7P3QHkij+DnzSztCPdy+xccZ/gh
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:50 2023 by rpki-client on console-fra.rpki-client.org