Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/DQOgeYPfqZA5m1syOlW_eygzbAQ.roa
File: DQOgeYPfqZA5m1syOlW_eygzbAQ.roa (raw, json)
Hash identifier: p3RanIOayivZVb0vrLgBEG+dRS/zlw4k06KbOt7lMiU=
Subject key identifier: 0D:03:A0:79:83:DF:A9:90:39:9B:5B:32:3A:55:BF:7B:28:33:6C:04
Certificate issuer: /CN=69b60a6d77c4cac8f102d810be330b3d391efe93
Certificate serial: 0183FEA6DC17FEB9D453D8C31E7DD3C82B30
Authority key identifier: 69:B6:0A:6D:77:C4:CA:C8:F1:02:D8:10:BE:33:0B:3D:39:1E:FE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abYKbXfEysjxAtgQvjMLPTke_pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/DQOgeYPfqZA5m1syOlW_eygzbAQ.roa
Signing time: Sat 22 Oct 2022 07:44:51 +0000
ROA not before: Sat 22 Oct 2022 07:44:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.202.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fe:a6:dc:17:fe:b9:d4:53:d8:c3:1e:7d:d3:c8:2b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b60a6d77c4cac8f102d810be330b3d391efe93
Validity
Not Before: Oct 22 07:44:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d03a07983dfa990399b5b323a55bf7b28336c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:64:f5:bd:c8:06:52:e8:3d:19:ba:2f:71:d8:
29:d4:29:8e:d8:8f:54:42:70:ee:90:d5:e8:81:07:
11:34:4f:ff:80:90:5c:1d:2f:9e:9a:3c:01:e8:6a:
3a:4e:d1:d5:44:ff:af:84:c6:49:98:30:9e:96:8d:
1c:e7:26:a0:a1:4d:d2:9a:1e:89:b3:e9:80:b4:72:
84:75:23:84:34:73:9c:70:d6:40:7e:bb:8b:95:73:
42:f7:43:9f:68:cd:2c:b1:30:3a:d0:8e:9f:b8:15:
9a:c6:22:43:a8:a1:74:42:ee:2d:e0:73:b1:b6:ce:
88:47:13:ae:6f:b8:fc:22:d2:21:23:35:30:2b:9f:
8f:96:10:74:b1:61:be:e3:9e:fd:fd:bb:d6:99:7f:
e1:74:76:a3:b8:fd:d0:dc:86:9d:df:4d:f7:ec:f7:
5e:99:42:d4:3f:be:aa:cd:11:71:30:92:e7:71:d3:
f3:1c:4f:77:77:ed:de:85:b4:a9:cc:ec:96:e1:c9:
ca:8c:43:a9:be:af:90:b0:23:f8:3d:b4:ec:b0:53:
32:d2:ea:0f:43:e5:da:f7:e2:a3:77:9c:19:10:24:
b1:d1:22:dc:d5:7e:07:89:e0:66:41:8f:ac:de:bb:
79:60:d0:85:29:5e:7b:9a:90:e1:06:0e:cf:e4:90:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:03:A0:79:83:DF:A9:90:39:9B:5B:32:3A:55:BF:7B:28:33:6C:04
X509v3 Authority Key Identifier:
keyid:69:B6:0A:6D:77:C4:CA:C8:F1:02:D8:10:BE:33:0B:3D:39:1E:FE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abYKbXfEysjxAtgQvjMLPTke_pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/DQOgeYPfqZA5m1syOlW_eygzbAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/abYKbXfEysjxAtgQvjMLPTke_pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.209.0/24
Signature Algorithm: sha256WithRSAEncryption
33:22:2b:9e:53:64:6f:6d:fd:6b:a9:25:a8:07:b0:04:e6:c2:
77:a9:9e:db:53:23:ff:60:38:82:93:48:55:0e:35:c2:87:7d:
45:bb:4a:f9:51:93:25:2f:f4:25:ab:9e:cc:10:2e:65:fc:65:
9e:98:d2:aa:66:a5:c5:df:34:f8:8a:c9:d9:6c:7c:6f:c3:b2:
e0:e1:56:f3:4c:ad:d3:e2:f1:91:1e:af:e1:19:bd:2b:85:7d:
d1:42:4c:e1:69:8f:cf:fa:53:70:76:94:cc:b7:a3:2f:d7:87:
cc:c9:58:3e:83:4d:70:e0:b8:9d:1f:8a:18:7a:4b:dd:99:38:
3a:4f:a0:33:2c:e9:61:82:28:2c:e7:76:08:fb:68:29:9a:25:
88:b6:f2:2e:8b:d1:c6:f0:a7:24:61:2c:1d:3f:dc:57:63:d2:
1d:d0:0a:23:bd:a3:2c:36:86:b2:81:7d:59:a2:ed:8f:c8:f8:
de:40:cf:f3:3b:00:e1:de:b3:c2:9d:de:a2:3f:fe:aa:da:15:
0b:d8:2a:0c:87:a5:ac:4a:e2:8a:05:fb:79:46:f4:4e:91:bc:
b7:7f:65:c5:0d:c6:ba:8a:98:d1:91:77:18:fe:a7:b9:44:6c:
95:c8:23:0e:b7:77:f5:48:4a:f3:dd:55:d2:a0:8c:1f:9d:91:
e4:f1:22:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYP+ptwX/rnUU9jDHn3TyCswMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YjYwYTZkNzdjNGNhYzhmMTAyZDgxMGJlMzMwYjNkMzkx
ZWZlOTMwHhcNMjIxMDIyMDc0NDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDAzYTA3OTgzZGZhOTkwMzk5YjViMzIzYTU1YmY3YjI4MzM2YzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWT1vcgGUug9Gbovcdgp1CmO2I9U
QnDukNXogQcRNE//gJBcHS+emjwB6Go6TtHVRP+vhMZJmDCelo0c5yagoU3Smh6J
s+mAtHKEdSOENHOccNZAfruLlXNC90OfaM0ssTA60I6fuBWaxiJDqKF0Qu4t4HOx
ts6IRxOub7j8ItIhIzUwK5+PlhB0sWG+4579/bvWmX/hdHajuP3Q3Iad30337Pde
mULUP76qzRFxMJLncdPzHE93d+3ehbSpzOyW4cnKjEOpvq+QsCP4PbTssFMy0uoP
Q+Xa9+Kjd5wZECSx0SLc1X4HieBmQY+s3rt5YNCFKV57mpDhBg7P5JBZbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA0DoHmD36mQOZtbMjpVv3soM2wEMB8GA1UdIwQY
MBaAFGm2Cm13xMrI8QLYEL4zCz05Hv6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWJZS2JYZkV5c2p4QXRnUXZqTUxQVGtlX3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81ZmY0ZmYtNWJmZS00MTIzLWExNTIt
NGFkOTkxNGJiYTY4LzEvRFFPZ2VZUGZxWkE1bTFzeU9sV19leWd6YkFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy81ZmY0ZmYtNWJmZS00MTIzLWExNTItNGFkOTkxNGJiYTY4
LzEvYWJZS2JYZkV5c2p4QXRnUXZqTUxQVGtlX3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8rRMA0G
CSqGSIb3DQEBCwUAA4IBAQAzIiueU2Rvbf1rqSWoB7AE5sJ3qZ7bUyP/YDiCk0hV
DjXCh31Fu0r5UZMlL/Qlq57MEC5l/GWemNKqZqXF3zT4isnZbHxvw7Lg4VbzTK3T
4vGRHq/hGb0rhX3RQkzhaY/P+lNwdpTMt6Mv14fMyVg+g01w4LidH4oYekvdmTg6
T6AzLOlhgigs53YI+2gpmiWItvIui9HG8KckYSwdP9xXY9Id0AojvaMsNoaygX1Z
ou2PyPjeQM/zOwDh3rPCnd6iP/6q2hUL2CoMh6WsSuKKBft5RvROkby3f2XFDca6
ipjRkXcY/qe5RGyVyCMOt3f1SErz3VXSoIwfnZHk8SL5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:18 2024 by rpki-client on console-fra.rpki-client.org