Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/_okiIV1aB-es0C6UMFAFgVyCBuM.roa
File: _okiIV1aB-es0C6UMFAFgVyCBuM.roa (raw, json)
Hash identifier: uCYvrJ0QNcnuf1TlVbrRKLeOuBIwV8WXL1SWnUDknRg=
Subject key identifier: FE:89:22:21:5D:5A:07:E7:AC:D0:2E:94:30:50:05:81:5C:82:06:E3
Certificate issuer: /CN=21db69b104ba7c7f912cd725916bf47dd8bb0367
Certificate serial: 01862BD38BCE40B97A82CF9DF63A4D784F5A
Authority key identifier: 21:DB:69:B1:04:BA:7C:7F:91:2C:D7:25:91:6B:F4:7D:D8:BB:03:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IdtpsQS6fH-RLNclkWv0fdi7A2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/_okiIV1aB-es0C6UMFAFgVyCBuM.roa
Signing time: Tue 07 Feb 2023 12:22:09 +0000
ROA not before: Tue 07 Feb 2023 12:22:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 18254
IP address blocks: 93.93.244.0/22 maxlen: 24
93.93.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2b:d3:8b:ce:40:b9:7a:82:cf:9d:f6:3a:4d:78:4f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21db69b104ba7c7f912cd725916bf47dd8bb0367
Validity
Not Before: Feb 7 12:22:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe8922215d5a07e7acd02e94305005815c8206e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:4c:23:22:8e:22:e6:b8:e8:8d:52:db:82:
35:e8:f6:dc:4b:a7:5c:40:70:d7:df:f6:a7:fd:3d:
2f:fe:47:d7:f4:ab:c6:1b:f5:0f:85:87:fb:9d:57:
63:61:cc:d7:14:7f:87:77:b1:68:aa:50:21:e2:8d:
18:ca:26:56:54:56:a2:98:ec:8f:f4:b8:ab:b6:4c:
20:0e:df:ad:6e:3a:ea:6d:7a:e6:eb:6d:3c:a1:96:
59:6e:2a:dd:c6:34:f7:1b:71:90:8f:e2:7a:4e:78:
ad:08:ff:fd:e2:8d:5b:d9:13:03:d0:ce:b3:69:36:
9d:55:85:00:33:a3:0a:2f:61:1b:01:d9:dd:c1:c2:
dd:54:e0:04:c6:65:89:89:a7:d2:95:46:ef:d1:c0:
81:61:2b:da:8c:a9:33:ce:06:d8:7d:80:d6:56:91:
eb:57:1d:d2:76:10:d4:c9:e5:80:c8:10:36:4a:f6:
75:c6:b6:46:8d:32:45:d2:38:44:2f:d0:70:d0:f5:
33:4a:cd:98:a7:b4:36:30:7f:89:4d:b3:51:90:ca:
4b:2d:4b:59:54:2b:17:22:60:cf:ce:0b:cf:10:2f:
66:f7:61:f2:55:42:1e:a1:11:59:74:43:14:90:3c:
9d:d2:2c:98:4b:7c:43:94:ef:91:1d:43:85:ef:fa:
04:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:89:22:21:5D:5A:07:E7:AC:D0:2E:94:30:50:05:81:5C:82:06:E3
X509v3 Authority Key Identifier:
keyid:21:DB:69:B1:04:BA:7C:7F:91:2C:D7:25:91:6B:F4:7D:D8:BB:03:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdtpsQS6fH-RLNclkWv0fdi7A2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/_okiIV1aB-es0C6UMFAFgVyCBuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/IdtpsQS6fH-RLNclkWv0fdi7A2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.244.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:c5:d6:f5:c8:27:3e:12:59:b3:22:5d:90:9f:44:44:fd:c0:
98:ec:62:ec:a1:b1:b7:f9:0f:93:1d:d3:da:f4:cd:60:55:f7:
7c:3f:33:e7:b5:ec:77:25:7d:86:85:a5:4f:d9:0c:1c:60:99:
5b:ea:15:30:2c:33:df:a5:ec:07:5b:ff:53:02:a7:fe:bc:45:
6f:91:17:14:83:41:55:84:04:ce:20:1d:04:16:fa:71:5f:7e:
07:a3:a6:af:0e:9d:4c:c9:33:63:ba:9b:36:0c:1c:7b:8a:89:
15:2c:14:89:3d:b0:0f:5d:c3:1a:e1:fb:1a:59:27:4b:af:6d:
b8:e2:af:ba:1c:5b:07:a7:75:4d:31:11:d7:5e:a1:01:4c:04:
3a:c9:93:12:10:3e:3a:38:67:c8:11:83:cd:30:26:74:08:99:
4a:ce:03:06:2d:c4:04:9d:be:cd:48:82:45:07:2f:fc:a8:52:
fa:16:7c:82:a7:bd:09:ef:84:3c:f1:5d:fc:47:6d:1f:d1:39:
cb:db:6e:87:32:df:2b:68:10:fc:cd:73:17:58:79:0b:3f:c3:
c0:ba:c9:21:b7:3e:62:67:c4:11:4c:8e:07:cb:59:69:c9:d9:
5c:cd:ed:91:e4:a1:40:75:60:58:b9:28:e4:a7:0b:5d:3c:d1:
27:14:8b:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYr04vOQLl6gs+d9jpNeE9aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZGI2OWIxMDRiYTdjN2Y5MTJjZDcyNTkxNmJmNDdkZDhi
YjAzNjcwHhcNMjMwMjA3MTIyMjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTg5MjIyMTVkNWEwN2U3YWNkMDJlOTQzMDUwMDU4MTVjODIwNmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7ZMIyKOIua46I1S24I16PbcS6dc
QHDX3/an/T0v/kfX9KvGG/UPhYf7nVdjYczXFH+Hd7FoqlAh4o0YyiZWVFaimOyP
9LirtkwgDt+tbjrqbXrm6208oZZZbirdxjT3G3GQj+J6TnitCP/94o1b2RMD0M6z
aTadVYUAM6MKL2EbAdndwcLdVOAExmWJiafSlUbv0cCBYSvajKkzzgbYfYDWVpHr
Vx3SdhDUyeWAyBA2SvZ1xrZGjTJF0jhEL9Bw0PUzSs2Yp7Q2MH+JTbNRkMpLLUtZ
VCsXImDPzgvPEC9m92HyVUIeoRFZdEMUkDyd0iyYS3xDlO+RHUOF7/oEtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP6JIiFdWgfnrNAulDBQBYFcggbjMB8GA1UdIwQY
MBaAFCHbabEEunx/kSzXJZFr9H3YuwNnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWR0cHNRUzZmSC1STE5jbGtXdjBmZGk3QTJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hNWM2ZWMtOWY4MS00MzIyLTgyMzkt
ZWY0MzRiMWZhYzBlLzEvX29raUlWMWFCLWVzMEM2VU1GQUZnVnlDQnVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hNWM2ZWMtOWY4MS00MzIyLTgyMzktZWY0MzRiMWZhYzBl
LzEvSWR0cHNRUzZmSC1STE5jbGtXdjBmZGk3QTJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXV30MA0G
CSqGSIb3DQEBCwUAA4IBAQC1xdb1yCc+ElmzIl2Qn0RE/cCY7GLsobG3+Q+THdPa
9M1gVfd8PzPntex3JX2GhaVP2QwcYJlb6hUwLDPfpewHW/9TAqf+vEVvkRcUg0FV
hATOIB0EFvpxX34Ho6avDp1MyTNjups2DBx7iokVLBSJPbAPXcMa4fsaWSdLr224
4q+6HFsHp3VNMRHXXqEBTAQ6yZMSED46OGfIEYPNMCZ0CJlKzgMGLcQEnb7NSIJF
By/8qFL6FnyCp70J74Q88V38R20f0TnL226HMt8raBD8zXMXWHkLP8PAuskhtz5i
Z8QRTI4Hy1lpydlcze2R5KFAdWBYuSjkpwtdPNEnFItf
-----END CERTIFICATE-----
Generated at Wed Dec 20 11:13:06 2023 by rpki-client on console-fra.rpki-client.org