Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8c0c82-1959-41aa-a827-06e864dfe253/1/OUIkOeoVEyVDwylHK8vqusv5PEo.roa
File: OUIkOeoVEyVDwylHK8vqusv5PEo.roa (raw, json)
Hash identifier: htXOI41RJHqrxpfFWM2XPbLPMCqYj4mllUXc37WHQ+8=
Subject key identifier: 39:42:24:39:EA:15:13:25:43:C3:29:47:2B:CB:EA:BA:CB:F9:3C:4A
Certificate issuer: /CN=0bf275af698a207079d9b7d7fcf32815a3f6192d
Certificate serial: 01856D5CEA972FC0319D65117DC9404870DD
Authority key identifier: 0B:F2:75:AF:69:8A:20:70:79:D9:B7:D7:FC:F3:28:15:A3:F6:19:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_J1r2mKIHB52bfX_PMoFaP2GS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8c0c82-1959-41aa-a827-06e864dfe253/1/OUIkOeoVEyVDwylHK8vqusv5PEo.roa
Signing time: Sun 01 Jan 2023 12:44:43 +0000
ROA not before: Sun 01 Jan 2023 12:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.1.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:ea:97:2f:c0:31:9d:65:11:7d:c9:40:48:70:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf275af698a207079d9b7d7fcf32815a3f6192d
Validity
Not Before: Jan 1 12:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39422439ea15132543c329472bcbeabacbf93c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bc:ab:d5:49:40:f1:d2:87:21:28:cd:17:10:
86:38:6d:2d:0e:d8:e7:4c:0b:d9:28:92:f6:26:4a:
8c:d2:49:f0:98:57:c6:c4:85:a0:e3:ec:64:5f:f6:
78:cd:a8:64:70:d0:e8:2c:07:f0:75:8f:3d:75:82:
f0:21:8c:7a:3f:46:f7:55:10:7f:58:50:a9:13:77:
ee:d0:2e:b1:b0:34:fd:9d:b0:00:c4:eb:2d:92:67:
9b:e8:11:26:7a:a9:be:5b:35:98:ee:21:db:34:62:
e2:d6:31:1d:5b:62:45:06:f2:4d:ce:92:bb:98:41:
61:91:bd:be:76:9f:62:f3:3e:94:c5:da:d4:b6:dc:
0a:43:d4:2b:fb:90:f4:27:57:a6:2b:18:9e:89:08:
75:d4:b7:8d:bf:4f:aa:77:8a:71:f5:72:43:ba:b4:
d0:02:e9:0e:85:a9:58:54:87:5a:b5:bf:bd:3b:fd:
6e:95:27:c5:a9:fe:68:e9:40:d3:c5:d0:d7:9c:9c:
da:45:5d:19:f8:98:4c:d4:81:22:7c:76:78:ca:d6:
31:36:55:8d:93:13:b6:61:24:da:5a:ab:20:0e:6a:
02:4e:30:e1:8e:31:9d:5a:ea:c2:7c:fa:9c:e4:19:
9d:96:ed:3b:d9:e3:d3:2e:6c:da:32:c3:d4:1d:72:
42:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:42:24:39:EA:15:13:25:43:C3:29:47:2B:CB:EA:BA:CB:F9:3C:4A
X509v3 Authority Key Identifier:
keyid:0B:F2:75:AF:69:8A:20:70:79:D9:B7:D7:FC:F3:28:15:A3:F6:19:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_J1r2mKIHB52bfX_PMoFaP2GS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8c0c82-1959-41aa-a827-06e864dfe253/1/OUIkOeoVEyVDwylHK8vqusv5PEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8c0c82-1959-41aa-a827-06e864dfe253/1/C_J1r2mKIHB52bfX_PMoFaP2GS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.40.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:77:68:c3:18:4f:2c:f6:46:c9:d4:e3:a1:7d:16:31:c5:ec:
c4:e0:f3:7c:d5:be:77:60:8b:11:5d:9c:40:15:5c:ac:c0:02:
f0:b3:b8:64:4b:ac:59:1e:eb:db:90:f1:37:cb:9a:fe:5d:3a:
67:92:8b:91:47:24:15:25:6b:85:ce:80:e4:e6:db:f0:3f:d7:
1c:a4:5b:5e:74:3b:12:6a:5f:ad:90:e4:0c:e3:f8:eb:cf:e8:
2d:3f:36:84:22:a0:7f:2c:96:51:ee:4c:20:41:ce:7b:d8:8a:
68:5d:83:0a:be:89:1b:2a:56:2a:84:3f:1b:11:48:a6:a1:3d:
d1:30:0b:1a:11:30:b7:ec:5a:aa:44:84:44:1a:5a:ab:41:04:
de:2a:8b:95:4f:f2:12:b8:63:c6:9b:97:06:56:da:26:95:f8:
25:90:03:2a:f3:a9:ed:18:ce:d4:bb:7a:4b:cd:99:64:a4:70:
2a:ba:9e:b6:89:3b:6e:cd:8c:ee:43:58:7b:a8:fe:f9:e2:99:
ab:6f:43:b2:f0:51:8a:18:aa:37:1a:ba:cf:03:62:02:ab:48:
81:60:74:98:74:6b:cb:dd:4e:96:45:99:cb:47:88:a8:a3:64:
98:89:88:8c:2b:7f:33:ea:94:bc:61:9d:8b:b4:cb:2e:9e:32:
7b:bf:01:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtXOqXL8AxnWURfclASHDdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjI3NWFmNjk4YTIwNzA3OWQ5YjdkN2ZjZjMyODE1YTNm
NjE5MmQwHhcNMjMwMTAxMTI0NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTQyMjQzOWVhMTUxMzI1NDNjMzI5NDcyYmNiZWFiYWNiZjkzYzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLyr1UlA8dKHISjNFxCGOG0tDtjn
TAvZKJL2JkqM0knwmFfGxIWg4+xkX/Z4zahkcNDoLAfwdY89dYLwIYx6P0b3VRB/
WFCpE3fu0C6xsDT9nbAAxOstkmeb6BEmeqm+WzWY7iHbNGLi1jEdW2JFBvJNzpK7
mEFhkb2+dp9i8z6UxdrUttwKQ9Qr+5D0J1emKxieiQh11LeNv0+qd4px9XJDurTQ
AukOhalYVIdatb+9O/1ulSfFqf5o6UDTxdDXnJzaRV0Z+JhM1IEifHZ4ytYxNlWN
kxO2YSTaWqsgDmoCTjDhjjGdWurCfPqc5Bmdlu072ePTLmzaMsPUHXJCSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDlCJDnqFRMlQ8MpRyvL6rrL+TxKMB8GA1UdIwQY
MBaAFAvyda9piiBwedm31/zzKBWj9hktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19KMXIybUtJSEI1MmJmWF9QTW9GYVAyR1MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi84YzBjODItMTk1OS00MWFhLWE4Mjct
MDZlODY0ZGZlMjUzLzEvT1VJa09lb1ZFeVZEd3lsSEs4dnF1c3Y1UEVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi84YzBjODItMTk1OS00MWFhLWE4MjctMDZlODY0ZGZlMjUz
LzEvQ19KMXIybUtJSEI1MmJmWF9QTW9GYVAyR1MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQEoMA0G
CSqGSIb3DQEBCwUAA4IBAQAMd2jDGE8s9kbJ1OOhfRYxxezE4PN81b53YIsRXZxA
FVyswALws7hkS6xZHuvbkPE3y5r+XTpnkouRRyQVJWuFzoDk5tvwP9ccpFtedDsS
al+tkOQM4/jrz+gtPzaEIqB/LJZR7kwgQc572IpoXYMKvokbKlYqhD8bEUimoT3R
MAsaETC37FqqRIREGlqrQQTeKouVT/ISuGPGm5cGVtomlfglkAMq86ntGM7Uu3pL
zZlkpHAqup62iTtuzYzuQ1h7qP754pmrb0Oy8FGKGKo3GrrPA2ICq0iBYHSYdGvL
3U6WRZnLR4ioo2SYiYiMK38z6pS8YZ2LtMsunjJ7vwF5
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:24 2023 by rpki-client on console.sobornost.net