Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/osgJC1j873fUuICkEREfgiPJqL4.roa
File: osgJC1j873fUuICkEREfgiPJqL4.roa (raw, json)
Hash identifier: zVB8fV5Ug3WHZPkxIRefMnGWpQ+cjsymHV6dUGE8Z54=
Subject key identifier: A2:C8:09:0B:58:FC:EF:77:D4:B8:80:A4:11:11:1F:82:23:C9:A8:BE
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 0195D16DD2C300AB5D314316270685317E32
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/osgJC1j873fUuICkEREfgiPJqL4.roa
Signing time: Wed 26 Mar 2025 07:49:50 +0000
ROA not before: Wed 26 Mar 2025 07:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 62.164.192.0/24 maxlen: 24
62.164.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:6d:d2:c3:00:ab:5d:31:43:16:27:06:85:31:7e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Mar 26 07:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2c8090b58fcef77d4b880a411111f8223c9a8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:18:bc:63:6b:7c:61:42:9d:3a:ef:da:1c:
59:b4:3f:c0:2d:00:2a:74:f5:10:ca:36:c9:38:9d:
5e:fa:32:23:dd:1c:a5:88:a9:f6:31:c9:eb:8a:50:
ef:d1:f6:2e:3f:42:a1:07:3d:60:cd:23:c0:68:69:
0e:d9:18:96:58:e0:a3:73:b1:b7:aa:2e:94:5b:02:
5f:60:d7:51:dc:8c:10:ad:61:85:01:71:7b:18:e4:
18:8a:69:08:25:45:75:33:32:a8:97:37:6d:f9:ee:
55:75:39:0d:2d:d3:d1:e3:ce:f5:ff:6a:bb:f8:ef:
1b:77:6b:da:e8:34:90:b4:dd:01:4f:ad:e8:59:33:
3c:e2:81:ac:00:15:bc:bc:ca:5e:c0:5e:8f:b0:a1:
ff:3f:86:d1:80:6f:c7:23:41:c1:8b:53:d8:42:93:
ac:a8:88:0e:1b:7b:5e:18:84:56:18:64:d7:cf:0a:
0e:d7:a0:82:b0:f9:bb:d3:20:e9:4f:2e:0f:54:26:
cd:b3:82:2b:d0:8c:24:f2:f0:f4:b5:24:66:8c:36:
c2:a2:66:08:68:3c:c1:9d:27:32:5d:1a:30:d0:41:
52:4f:f2:11:db:c8:37:f4:17:ea:fa:14:bd:8c:01:
08:71:f3:65:ad:2e:13:f7:73:7d:8c:19:f5:9a:9e:
c6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C8:09:0B:58:FC:EF:77:D4:B8:80:A4:11:11:1F:82:23:C9:A8:BE
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/osgJC1j873fUuICkEREfgiPJqL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.192.0/24
62.164.195.0/24
Signature Algorithm: sha256WithRSAEncryption
74:49:b7:9a:39:cd:47:a1:bc:a7:30:d4:9b:cd:99:a5:c9:8e:
b8:97:2f:6e:ad:28:9c:fb:30:3e:1e:bc:3e:08:d4:d6:0d:74:
4e:ff:03:0d:61:48:0f:a5:ca:f5:14:9f:7a:b7:a9:0b:a9:32:
1f:e4:b2:c6:5b:f7:7b:8d:fc:1f:22:03:1f:3d:fe:df:7d:f0:
33:c3:50:48:13:9e:19:e1:87:d4:a1:ef:ec:72:61:8d:5f:00:
4f:27:66:08:8d:e9:d0:fb:53:ea:35:c8:d3:07:b6:0a:e0:40:
8f:1d:62:b8:c3:7e:23:03:c1:5a:80:9d:7b:13:08:d8:c7:30:
b2:24:ec:6d:60:23:2c:ed:c0:60:ad:85:eb:ca:00:9a:86:4e:
11:2f:1c:04:bb:5a:03:c1:9b:0b:6c:c7:7b:18:83:7b:5b:ee:
05:6c:9a:52:8d:3e:6c:f9:bc:9f:a1:d2:4d:79:5f:f2:86:31:
c7:93:af:8a:b5:b8:74:57:d0:96:de:9d:c2:18:f3:58:f1:93:
b6:e6:58:50:11:44:23:70:45:c0:80:89:1f:5e:c2:b2:dd:02:
64:af:32:d7:82:d9:70:8a:71:c6:67:d7:53:be:07:01:85:2e:
27:f6:0f:6e:fc:79:35:56:2b:e6:fc:00:6c:8b:90:8d:08:61:
ca:51:12:b2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZXRbdLDAKtdMUMWJwaFMX4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk
MmRkNTIwHhcNMjUwMzI2MDc0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmM4MDkwYjU4ZmNlZjc3ZDRiODgwYTQxMTExMWY4MjIzYzlhOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QoYvGNrfGFCnTrv2hxZtD/ALQAq
dPUQyjbJOJ1e+jIj3RyliKn2McnrilDv0fYuP0KhBz1gzSPAaGkO2RiWWOCjc7G3
qi6UWwJfYNdR3IwQrWGFAXF7GOQYimkIJUV1MzKolzdt+e5VdTkNLdPR4871/2q7
+O8bd2va6DSQtN0BT63oWTM84oGsABW8vMpewF6PsKH/P4bRgG/HI0HBi1PYQpOs
qIgOG3teGIRWGGTXzwoO16CCsPm70yDpTy4PVCbNs4Ir0Iwk8vD0tSRmjDbComYI
aDzBnScyXRow0EFST/IR28g39Bfq+hS9jAEIcfNlrS4T93N9jBn1mp7GwwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKLICQtY/O931LiApBERH4Ijyai+MB8GA1UdIwQY
MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt
YWRlZDFjNDY5ZWFmLzEvb3NnSkMxajg3M2ZVdUlDa0VSRWZnaVBKcUw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm
LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPqTAAwQA
PqTDMA0GCSqGSIb3DQEBCwUAA4IBAQB0SbeaOc1HobynMNSbzZmlyY64ly9urSic
+zA+Hrw+CNTWDXRO/wMNYUgPpcr1FJ96t6kLqTIf5LLGW/d7jfwfIgMfPf7fffAz
w1BIE54Z4YfUoe/scmGNXwBPJ2YIjenQ+1PqNcjTB7YK4ECPHWK4w34jA8FagJ17
EwjYxzCyJOxtYCMs7cBgrYXrygCahk4RLxwEu1oDwZsLbMd7GIN7W+4FbJpSjT5s
+byfodJNeV/yhjHHk6+Ktbh0V9CW3p3CGPNY8ZO25lhQEUQjcEXAgIkfXsKy3QJk
rzLXgtlwinHGZ9dTvgcBhS4n9g9u/Hk1Vivm/ABsi5CNCGHKURKy
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:18:01 2025 by rpki-client