Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/81ac49-7ca4-40ac-8895-5a3fa92fec1c/1/OJu8aQ9aY6sKqjrBMoUzNA9MV9c.roa
File: OJu8aQ9aY6sKqjrBMoUzNA9MV9c.roa (raw, json)
Hash identifier: HH/JIC5xHMX8bM4UG8fQgdT1omMl/Ts3a9TaQ/CNzfc=
Subject key identifier: 38:9B:BC:69:0F:5A:63:AB:0A:AA:3A:C1:32:85:33:34:0F:4C:57:D7
Certificate issuer: /CN=7aeb210c4fd74db944e7dc79e3457f45b9a055f0
Certificate serial: 018CC493714DFABD460FE29B191E9A11559A
Authority key identifier: 7A:EB:21:0C:4F:D7:4D:B9:44:E7:DC:79:E3:45:7F:45:B9:A0:55:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eushDE_XTblE59x540V_RbmgVfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/81ac49-7ca4-40ac-8895-5a3fa92fec1c/1/OJu8aQ9aY6sKqjrBMoUzNA9MV9c.roa
Signing time: Mon 01 Jan 2024 10:30:46 +0000
ROA not before: Mon 01 Jan 2024 10:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51960
IP address blocks: 193.104.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:71:4d:fa:bd:46:0f:e2:9b:19:1e:9a:11:55:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aeb210c4fd74db944e7dc79e3457f45b9a055f0
Validity
Not Before: Jan 1 10:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=389bbc690f5a63ab0aaa3ac1328533340f4c57d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bb:0e:24:0c:d2:49:23:a2:b2:84:a8:38:e0:
aa:4a:b3:a1:4f:8a:97:32:67:d9:46:3d:bc:55:5d:
a0:5c:82:78:54:2d:25:0c:3f:c2:1b:10:80:92:34:
ee:b4:cb:48:34:15:4d:1d:05:28:a1:e0:52:df:9f:
4b:51:dd:57:3a:b4:21:8a:a1:9b:5f:0a:08:65:23:
4d:98:ca:22:5b:dc:69:2d:df:de:c9:d9:b8:cd:34:
23:d2:e2:21:f0:7c:60:9e:35:67:a0:79:eb:a5:7e:
26:e7:7c:a9:44:27:7b:a9:2d:29:5a:a7:d7:3d:87:
02:f6:46:20:54:4b:67:e1:ac:f7:e3:1a:ff:32:88:
e3:af:9e:76:41:b2:ae:1d:59:89:8c:55:4f:9c:53:
bc:7b:7c:91:fe:d8:3c:43:d1:56:24:a7:d7:62:ca:
c6:e1:4d:e5:b1:5f:37:53:e6:e1:85:47:e3:53:8c:
27:de:a3:3c:50:2b:64:5a:d1:ce:61:43:ce:b8:30:
36:e3:82:2f:7e:c3:51:0d:32:5f:4d:8d:8a:23:f8:
36:28:b0:83:97:87:55:a3:5a:69:54:5c:97:27:17:
fb:92:1f:47:e4:1a:70:e3:c9:73:ad:86:a2:85:dd:
f0:69:c7:fb:4a:60:ad:2d:75:cf:cc:8a:7c:79:df:
88:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9B:BC:69:0F:5A:63:AB:0A:AA:3A:C1:32:85:33:34:0F:4C:57:D7
X509v3 Authority Key Identifier:
keyid:7A:EB:21:0C:4F:D7:4D:B9:44:E7:DC:79:E3:45:7F:45:B9:A0:55:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eushDE_XTblE59x540V_RbmgVfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/81ac49-7ca4-40ac-8895-5a3fa92fec1c/1/OJu8aQ9aY6sKqjrBMoUzNA9MV9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/81ac49-7ca4-40ac-8895-5a3fa92fec1c/1/eushDE_XTblE59x540V_RbmgVfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f4:ad:b4:e0:6d:64:11:e8:ff:44:c3:62:8f:fa:14:0a:d4:
ab:91:1f:42:c2:e9:bd:97:ac:16:43:33:86:c5:41:ed:eb:3e:
14:b6:e9:36:56:db:03:99:23:6f:f1:3a:b7:57:e2:86:9d:41:
19:ad:2b:04:20:ed:82:97:7e:47:89:6a:4c:ee:df:97:26:1e:
5c:a6:02:ed:0a:dc:37:6f:ca:d7:6a:92:2d:8a:c1:df:0d:aa:
96:e1:95:af:ed:ab:fe:3c:49:6e:9f:ce:b5:c3:05:f3:38:66:
dc:09:54:ee:a3:7c:7d:dc:9f:3e:05:0c:7d:d8:43:70:6d:c0:
b2:fe:e6:bf:12:bd:5d:2f:73:05:14:4d:9c:c4:0d:bf:17:e5:
3e:6b:75:e7:6a:83:f7:b6:3e:86:5d:6e:d5:69:ae:40:d1:6a:
c2:0d:03:df:7e:94:26:c2:1f:72:bd:7b:06:f7:db:b1:fd:cc:
68:18:16:16:5c:14:8c:e3:56:a9:6e:6a:ab:43:1e:40:15:25:
de:8d:56:2d:a1:6d:37:96:57:cd:56:62:6e:61:62:63:96:79:
de:85:cf:c5:d4:a3:75:27:d5:db:dc:cc:09:ed:c4:44:87:d4:
00:00:6a:15:c7:76:fc:e9:33:61:c9:ca:2b:79:26:d9:11:9b:
80:be:2c:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk3FN+r1GD+KbGR6aEVWaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZWIyMTBjNGZkNzRkYjk0NGU3ZGM3OWUzNDU3ZjQ1Yjlh
MDU1ZjAwHhcNMjQwMTAxMTAzMDQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODliYmM2OTBmNWE2M2FiMGFhYTNhYzEzMjg1MzMzNDBmNGM1N2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbsOJAzSSSOisoSoOOCqSrOhT4qX
MmfZRj28VV2gXIJ4VC0lDD/CGxCAkjTutMtINBVNHQUooeBS359LUd1XOrQhiqGb
XwoIZSNNmMoiW9xpLd/eydm4zTQj0uIh8HxgnjVnoHnrpX4m53ypRCd7qS0pWqfX
PYcC9kYgVEtn4az34xr/Mojjr552QbKuHVmJjFVPnFO8e3yR/tg8Q9FWJKfXYsrG
4U3lsV83U+bhhUfjU4wn3qM8UCtkWtHOYUPOuDA244IvfsNRDTJfTY2KI/g2KLCD
l4dVo1ppVFyXJxf7kh9H5Bpw48lzrYaihd3wacf7SmCtLXXPzIp8ed+IWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDibvGkPWmOrCqo6wTKFMzQPTFfXMB8GA1UdIwQY
MBaAFHrrIQxP1025ROfceeNFf0W5oFXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXVzaERFX1hUYmxFNTl4NTQwVl9SYm1nVmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS84MWFjNDktN2NhNC00MGFjLTg4OTUt
NWEzZmE5MmZlYzFjLzEvT0p1OGFROWFZNnNLcWpyQk1vVXpOQTlNVjljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS84MWFjNDktN2NhNC00MGFjLTg4OTUtNWEzZmE5MmZlYzFj
LzEvZXVzaERFX1hUYmxFNTl4NTQwVl9SYm1nVmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWgFMA0G
CSqGSIb3DQEBCwUAA4IBAQCx9K204G1kEej/RMNij/oUCtSrkR9Cwum9l6wWQzOG
xUHt6z4Utuk2VtsDmSNv8Tq3V+KGnUEZrSsEIO2Cl35HiWpM7t+XJh5cpgLtCtw3
b8rXapItisHfDaqW4ZWv7av+PElun861wwXzOGbcCVTuo3x93J8+BQx92ENwbcCy
/ua/Er1dL3MFFE2cxA2/F+U+a3XnaoP3tj6GXW7Vaa5A0WrCDQPffpQmwh9yvXsG
99ux/cxoGBYWXBSM41apbmqrQx5AFSXejVYtoW03llfNVmJuYWJjlnnehc/F1KN1
J9Xb3MwJ7cREh9QAAGoVx3b86TNhycoreSbZEZuAvizi
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:06 2024 by rpki-client on console-ams.rpki-client.org