Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1ffbb2-dc4e-4cf1-b336-4a1625bc4be0/1/O6k1-BAqrQKL-v4RULaLyZj3Gn0.roa
File: O6k1-BAqrQKL-v4RULaLyZj3Gn0.roa (raw, json)
Hash identifier: hHy/i3DL0I2jJTsLDc7bskvqNsg4UXApCL0M46isawQ=
Subject key identifier: 3B:A9:35:F8:10:2A:AD:02:8B:FA:FE:11:50:B6:8B:C9:98:F7:1A:7D
Certificate issuer: /CN=07996b3ac201e8b9b81fc97a160e94914304f99a
Certificate serial: 01833042BCAC1B93C478E0F36C4C99F516F8
Authority key identifier: 07:99:6B:3A:C2:01:E8:B9:B8:1F:C9:7A:16:0E:94:91:43:04:F9:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5lrOsIB6Lm4H8l6Fg6UkUME-Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1ffbb2-dc4e-4cf1-b336-4a1625bc4be0/1/O6k1-BAqrQKL-v4RULaLyZj3Gn0.roa
Signing time: Mon 12 Sep 2022 05:53:43 +0000
ROA not before: Mon 12 Sep 2022 05:53:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 193.33.236.0/23 maxlen: 24
195.211.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:30:42:bc:ac:1b:93:c4:78:e0:f3:6c:4c:99:f5:16:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07996b3ac201e8b9b81fc97a160e94914304f99a
Validity
Not Before: Sep 12 05:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ba935f8102aad028bfafe1150b68bc998f71a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:3a:84:99:24:3a:1c:49:fc:66:a1:be:ea:
ea:48:17:aa:be:a3:01:1b:ed:86:52:c9:51:ae:ca:
3f:e0:82:d8:f5:08:55:d1:6f:b0:c2:6c:f5:4b:10:
77:42:2d:0a:09:c3:6c:97:59:85:1f:66:5a:d9:69:
84:f1:e4:69:47:ac:8e:4f:3a:6a:6c:a2:71:cc:ac:
61:68:11:0f:5a:a2:db:9f:1a:50:b5:c1:11:94:f8:
50:be:e6:12:11:4e:d0:98:58:6c:33:30:c6:de:ab:
47:94:6a:c5:ae:cc:c2:1f:0a:09:7d:32:20:fe:0a:
ca:3c:69:77:e5:32:a0:11:c0:58:55:ab:9f:ff:55:
2f:f6:f2:1d:d3:64:24:4a:1f:ab:87:5c:37:ad:81:
61:dc:1a:a3:ef:03:bd:c4:7a:e8:a7:18:7d:93:8c:
82:77:76:b0:80:1e:d7:e9:23:28:0e:da:fa:6b:31:
65:b2:f7:38:0f:c0:c3:86:18:b3:06:3f:8f:8f:08:
e4:92:12:c1:36:55:8f:0e:3e:f9:8c:89:e8:de:38:
9b:89:c9:a7:f3:fd:3d:e6:d7:51:d0:9b:eb:b3:85:
fb:3a:fd:57:8e:38:71:fe:cd:66:0d:b6:4e:2d:23:
92:cc:eb:50:a2:41:e9:40:ad:54:e8:5d:e2:be:7f:
48:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A9:35:F8:10:2A:AD:02:8B:FA:FE:11:50:B6:8B:C9:98:F7:1A:7D
X509v3 Authority Key Identifier:
keyid:07:99:6B:3A:C2:01:E8:B9:B8:1F:C9:7A:16:0E:94:91:43:04:F9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5lrOsIB6Lm4H8l6Fg6UkUME-Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1ffbb2-dc4e-4cf1-b336-4a1625bc4be0/1/O6k1-BAqrQKL-v4RULaLyZj3Gn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1ffbb2-dc4e-4cf1-b336-4a1625bc4be0/1/B5lrOsIB6Lm4H8l6Fg6UkUME-Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.236.0/23
195.211.116.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:34:57:b7:bc:01:f4:98:ac:4e:d0:35:05:66:dd:46:18:c4:
4f:41:e1:85:dd:34:98:e2:6e:79:49:a3:d9:e4:96:b2:8c:68:
86:b4:5b:ba:07:c8:7e:f5:d8:39:75:a2:c1:9b:02:50:9c:57:
ca:1b:0a:d9:ee:81:30:90:f9:bf:f9:de:d6:78:63:48:79:2d:
ca:af:79:b4:cf:5d:71:c9:5f:c5:ef:0e:6f:bc:0a:5f:f8:1e:
72:1c:52:b9:2a:c1:be:5b:25:63:be:66:88:bc:2d:f8:6c:c6:
28:69:53:8d:0e:a4:f5:09:3c:f4:43:97:3f:bd:0a:1a:cd:f8:
64:a7:e7:a3:f9:18:88:a0:4c:f5:19:ff:e0:5f:1d:a1:c4:aa:
31:cd:02:35:81:aa:31:96:cc:51:f8:87:c5:0e:1c:35:c0:ae:
29:c4:09:93:78:99:be:13:46:3b:63:08:65:70:42:97:d2:3c:
bf:ea:79:9c:40:7d:69:c2:9c:5a:7c:9c:da:1f:e6:e6:7e:dc:
35:89:60:95:de:ab:57:2b:fa:75:2e:c7:3a:d5:7f:11:1d:c9:
a1:40:b8:0c:3b:72:3c:44:be:df:ad:0b:62:47:38:37:8f:37:
a0:97:07:cf:0f:76:85:e0:5f:ac:49:77:58:33:c8:f0:74:f4:
9a:c7:0b:ad
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYMwQrysG5PEeODzbEyZ9Rb4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OTk2YjNhYzIwMWU4YjliODFmYzk3YTE2MGU5NDkxNDMw
NGY5OWEwHhcNMjIwOTEyMDU1MzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmE5MzVmODEwMmFhZDAyOGJmYWZlMTE1MGI2OGJjOTk4ZjcxYTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX86hJkkOhxJ/GahvurqSBeqvqMB
G+2GUslRrso/4ILY9QhV0W+wwmz1SxB3Qi0KCcNsl1mFH2Za2WmE8eRpR6yOTzpq
bKJxzKxhaBEPWqLbnxpQtcERlPhQvuYSEU7QmFhsMzDG3qtHlGrFrszCHwoJfTIg
/grKPGl35TKgEcBYVauf/1Uv9vId02QkSh+rh1w3rYFh3Bqj7wO9xHropxh9k4yC
d3awgB7X6SMoDtr6azFlsvc4D8DDhhizBj+PjwjkkhLBNlWPDj75jIno3jibicmn
8/095tdR0Jvrs4X7Ov1Xjjhx/s1mDbZOLSOSzOtQokHpQK1U6F3ivn9INwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDupNfgQKq0Ci/r+EVC2i8mY9xp9MB8GA1UdIwQY
MBaAFAeZazrCAei5uB/JehYOlJFDBPmaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjVsck9zSUI2TG00SDhsNkZnNlVrVU1FLVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xZmZiYjItZGM0ZS00Y2YxLWIzMzYt
NGExNjI1YmM0YmUwLzEvTzZrMS1CQXFyUUtMLXY0UlVMYUx5WmozR24wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8xZmZiYjItZGM0ZS00Y2YxLWIzMzYtNGExNjI1YmM0YmUw
LzEvQjVsck9zSUI2TG00SDhsNkZnNlVrVU1FLVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwSHsAwQC
w9N0MA0GCSqGSIb3DQEBCwUAA4IBAQC3NFe3vAH0mKxO0DUFZt1GGMRPQeGF3TSY
4m55SaPZ5JayjGiGtFu6B8h+9dg5daLBmwJQnFfKGwrZ7oEwkPm/+d7WeGNIeS3K
r3m0z11xyV/F7w5vvApf+B5yHFK5KsG+WyVjvmaIvC34bMYoaVONDqT1CTz0Q5c/
vQoazfhkp+ej+RiIoEz1Gf/gXx2hxKoxzQI1gaoxlsxR+IfFDhw1wK4pxAmTeJm+
E0Y7YwhlcEKX0jy/6nmcQH1pwpxafJzaH+bmftw1iWCV3qtXK/p1Lsc61X8RHcmh
QLgMO3I8RL7frQtiRzg3jzeglwfPD3aF4F+sSXdYM8jwdPSaxwut
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:51 2023 by rpki-client on console.sobornost.net