Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d7d11f-a94e-4262-bf21-dda11a535986/1/9o0bv9g6uAVKCTzDBwVeBfZ3Bqs.roa
File: 9o0bv9g6uAVKCTzDBwVeBfZ3Bqs.roa (raw, json)
Hash identifier: UZcXjbWGXCesBFhAcSEoGKojA1GEhpsJ4HCQon31U4I=
Subject key identifier: F6:8D:1B:BF:D8:3A:B8:05:4A:09:3C:C3:07:05:5E:05:F6:77:06:AB
Certificate issuer: /CN=5be23e3934f0b49a0bb965105c21420865a9222b
Certificate serial: 01884E20FD54FB81BBE3AE8B373E9BDAC243
Authority key identifier: 5B:E2:3E:39:34:F0:B4:9A:0B:B9:65:10:5C:21:42:08:65:A9:22:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-I-OTTwtJoLuWUQXCFCCGWpIis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d7d11f-a94e-4262-bf21-dda11a535986/1/9o0bv9g6uAVKCTzDBwVeBfZ3Bqs.roa
Signing time: Wed 24 May 2023 14:19:24 +0000
ROA not before: Wed 24 May 2023 14:19:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 91.234.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:20:fd:54:fb:81:bb:e3:ae:8b:37:3e:9b:da:c2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be23e3934f0b49a0bb965105c21420865a9222b
Validity
Not Before: May 24 14:19:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f68d1bbfd83ab8054a093cc307055e05f67706ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:bb:83:75:10:6b:55:8f:85:44:f2:da:66:
63:39:9f:7b:a7:80:11:05:10:61:cb:ce:d2:22:42:
25:cd:65:d2:77:e0:14:f4:09:0f:9e:53:25:c3:78:
9f:d1:88:dc:55:47:d0:5c:97:5c:12:1e:c8:0b:68:
fa:14:08:13:37:1e:43:d9:c2:d8:5c:f4:71:f0:c3:
c5:07:c9:f8:58:a2:3c:61:1e:ba:e5:8a:cb:2d:89:
86:ad:e1:cb:ea:58:80:13:37:ac:95:fd:26:f6:b6:
49:43:09:59:09:ed:79:da:8d:cd:98:11:c8:f4:3e:
f0:e6:88:b9:3f:9f:cf:ec:0e:b2:f4:7b:d6:0d:73:
2c:48:21:2d:94:63:59:d9:c8:3e:91:e5:e4:ec:8a:
d4:bd:9a:40:4e:82:3d:67:63:ae:b4:25:50:13:3c:
e3:92:87:e1:5e:cf:ec:4b:55:04:04:d4:d5:d7:ea:
09:01:19:ed:0b:ac:a0:85:7e:fe:85:57:28:ee:02:
7e:28:09:d3:b3:75:9b:e2:24:31:cf:0e:c2:c2:b4:
f9:34:66:1e:32:65:ae:ca:57:2b:75:db:b2:52:19:
ed:66:2d:16:7c:c5:e1:d5:21:30:88:d9:75:94:1f:
1a:9e:63:8e:dd:25:37:81:4b:86:7d:22:88:68:a4:
d3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8D:1B:BF:D8:3A:B8:05:4A:09:3C:C3:07:05:5E:05:F6:77:06:AB
X509v3 Authority Key Identifier:
keyid:5B:E2:3E:39:34:F0:B4:9A:0B:B9:65:10:5C:21:42:08:65:A9:22:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-I-OTTwtJoLuWUQXCFCCGWpIis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d7d11f-a94e-4262-bf21-dda11a535986/1/9o0bv9g6uAVKCTzDBwVeBfZ3Bqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d7d11f-a94e-4262-bf21-dda11a535986/1/W-I-OTTwtJoLuWUQXCFCCGWpIis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.192.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b0:f0:a0:50:ba:2d:26:57:a3:22:90:e4:6a:a3:f2:45:37:
b9:04:ee:26:68:40:37:d8:1d:b1:57:9a:68:e4:ce:bf:f3:42:
25:08:31:ad:5b:74:42:c8:4c:9d:9f:85:fe:66:bb:37:83:f2:
19:d7:18:8f:d7:7b:0d:d5:e3:7d:4e:28:3b:68:ed:81:35:da:
2e:04:7e:e1:71:5b:c5:1a:b8:38:a8:d2:46:12:c5:6c:5c:b5:
f6:83:b8:6e:3e:cd:97:56:c5:df:05:d8:91:fd:7a:a2:bd:da:
d2:6f:6b:5e:db:87:ae:1a:56:6d:c7:73:a6:b1:22:44:1e:70:
bb:67:bf:24:30:85:c2:e5:5f:9a:38:3a:51:f2:c5:5f:02:5c:
16:7c:33:67:32:15:32:0d:38:72:dd:0c:76:ae:c0:50:1d:f2:
61:54:b4:7b:2c:fd:da:be:71:bc:da:9c:8c:ac:e4:ee:bf:86:
84:2a:99:4e:39:1c:e8:f2:53:03:49:d3:5b:8d:a6:1d:e5:0e:
39:bd:36:ec:9a:ff:35:80:44:de:5b:f2:50:63:f4:9e:33:5f:
2a:f3:5c:82:ca:37:df:8a:26:00:02:65:eb:32:dd:26:57:fc:
89:c5:b2:87:e7:31:a3:37:2b:cc:8f:cb:2e:41:9e:29:57:20:
0e:33:ea:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhOIP1U+4G7466LNz6b2sJDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZTIzZTM5MzRmMGI0OWEwYmI5NjUxMDVjMjE0MjA4NjVh
OTIyMmIwHhcNMjMwNTI0MTQxOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjhkMWJiZmQ4M2FiODA1NGEwOTNjYzMwNzA1NWUwNWY2NzcwNmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMO7g3UQa1WPhUTy2mZjOZ97p4AR
BRBhy87SIkIlzWXSd+AU9AkPnlMlw3if0YjcVUfQXJdcEh7IC2j6FAgTNx5D2cLY
XPRx8MPFB8n4WKI8YR665YrLLYmGreHL6liAEzeslf0m9rZJQwlZCe152o3NmBHI
9D7w5oi5P5/P7A6y9HvWDXMsSCEtlGNZ2cg+keXk7IrUvZpAToI9Z2OutCVQEzzj
kofhXs/sS1UEBNTV1+oJARntC6yghX7+hVco7gJ+KAnTs3Wb4iQxzw7CwrT5NGYe
MmWuylcrdduyUhntZi0WfMXh1SEwiNl1lB8anmOO3SU3gUuGfSKIaKTTZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPaNG7/YOrgFSgk8wwcFXgX2dwarMB8GA1UdIwQY
MBaAFFviPjk08LSaC7llEFwhQghlqSIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy1JLU9UVHd0Sm9MdVdVUVhDRkNDR1dwSWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kN2QxMWYtYTk0ZS00MjYyLWJmMjEt
ZGRhMTFhNTM1OTg2LzEvOW8wYnY5ZzZ1QVZLQ1R6REJ3VmVCZlozQnFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9kN2QxMWYtYTk0ZS00MjYyLWJmMjEtZGRhMTFhNTM1OTg2
LzEvVy1JLU9UVHd0Sm9MdVdVUVhDRkNDR1dwSWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+rAMA0G
CSqGSIb3DQEBCwUAA4IBAQA8sPCgULotJlejIpDkaqPyRTe5BO4maEA32B2xV5po
5M6/80IlCDGtW3RCyEydn4X+Zrs3g/IZ1xiP13sN1eN9Tig7aO2BNdouBH7hcVvF
Grg4qNJGEsVsXLX2g7huPs2XVsXfBdiR/XqivdrSb2te24euGlZtx3OmsSJEHnC7
Z78kMIXC5V+aODpR8sVfAlwWfDNnMhUyDThy3Qx2rsBQHfJhVLR7LP3avnG82pyM
rOTuv4aEKplOORzo8lMDSdNbjaYd5Q45vTbsmv81gETeW/JQY/SeM18q81yCyjff
iiYAAmXrMt0mV/yJxbKH5zGjNyvMj8suQZ4pVyAOM+rJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:13 2024 by rpki-client on console-ams.rpki-client.org