Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/OuQJP3rTcu0if4kJ5A5ZWqxKYpo.roa
File: OuQJP3rTcu0if4kJ5A5ZWqxKYpo.roa (raw, json)
Hash identifier: UN46ctiu4ND9IXGCd4EhP/dQ+ESw5QeLedCQ9yxaLnU=
Subject key identifier: 3A:E4:09:3F:7A:D3:72:ED:22:7F:89:09:E4:0E:59:5A:AC:4A:62:9A
Certificate issuer: /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial: 019428235E6C39E6E5C902E6C65DE0AA3822
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/OuQJP3rTcu0if4kJ5A5ZWqxKYpo.roa
Signing time: Thu 02 Jan 2025 17:49:54 +0000
ROA not before: Thu 02 Jan 2025 17:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 193.39.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:5e:6c:39:e6:e5:c9:02:e6:c6:5d:e0:aa:38:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Validity
Not Before: Jan 2 17:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ae4093f7ad372ed227f8909e40e595aac4a629a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:88:b2:de:2f:39:00:e6:ad:23:2f:7f:ec:
69:2a:c3:a6:39:64:c4:44:fe:80:6a:6b:95:0f:cf:
8b:fb:4c:d2:02:ee:19:f6:ee:ac:c2:66:78:fa:e2:
ff:a2:c8:8f:4f:24:a9:16:d6:48:d5:70:d8:76:05:
29:b3:3e:73:d9:92:c6:81:82:de:60:30:c1:bd:2a:
92:a9:29:8d:0e:b2:37:f8:cc:7b:80:78:7c:f0:00:
ef:6e:0f:86:b9:9d:4f:fe:6d:49:89:75:e7:4f:ed:
12:ee:cc:d6:38:76:2e:ce:7e:03:27:6d:b9:80:ad:
a3:e1:f6:c7:85:08:f3:20:76:44:f0:36:8f:29:d0:
65:37:5c:1e:dc:da:76:09:9a:26:ae:29:4a:93:65:
7a:6d:1c:c2:2a:2c:4c:de:e3:25:8a:3f:fc:e5:80:
5a:b9:09:e9:40:d3:dc:d5:e4:c8:d2:f1:7c:ab:99:
cb:48:92:fa:88:fb:bd:6c:ab:76:4a:9a:c9:50:58:
26:d0:f0:24:d6:0b:66:3d:e0:f2:84:39:10:98:d2:
33:51:01:fa:10:77:4a:c2:77:1d:03:30:5e:62:ac:
4a:61:5c:bb:b7:db:85:91:69:7f:85:02:07:df:21:
c7:74:bf:51:69:b8:2b:1d:fa:24:00:f8:cc:ed:fc:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E4:09:3F:7A:D3:72:ED:22:7F:89:09:E4:0E:59:5A:AC:4A:62:9A
X509v3 Authority Key Identifier:
keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/OuQJP3rTcu0if4kJ5A5ZWqxKYpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.188.0/22
Signature Algorithm: sha256WithRSAEncryption
04:01:b9:d7:40:a0:51:73:0f:da:cd:32:32:00:7d:aa:5f:07:
12:2d:c9:36:59:8e:9f:bf:ac:fe:64:2c:d0:eb:93:54:b9:0d:
7b:af:3d:25:e0:95:62:c0:47:0e:89:b2:97:ff:7c:5a:36:d9:
b0:12:81:f7:12:7f:02:98:39:14:9f:c6:26:2a:7b:d9:e2:38:
d2:28:80:4b:ad:a7:6d:e4:cf:2b:dc:07:39:d5:7f:ee:b7:f6:
95:e7:be:50:e5:5b:77:95:25:5b:58:5f:e5:45:cc:30:16:f6:
54:47:f4:5b:28:55:fd:be:9e:e4:85:e5:23:17:5b:fc:bc:0b:
56:ba:82:e0:69:12:61:c8:3d:db:56:c5:00:ff:45:12:66:33:
6f:93:e9:96:6f:cc:0f:8a:c4:34:ad:3a:7c:07:71:5f:e0:8f:
9e:a0:78:99:ea:e3:db:2c:56:ba:05:5f:6c:bf:c6:30:7d:13:
3e:4d:c0:65:42:ee:b6:2a:a0:4e:8d:b9:37:bd:9f:e0:97:9b:
69:08:fe:91:19:bf:17:e0:ab:b9:5f:1b:42:54:73:05:06:5f:
b2:20:06:61:06:6e:84:b6:8a:e5:ad:b5:4b:18:74:72:e3:f1:
8b:0a:00:1a:59:34:7a:4a:08:d7:3b:16:13:12:42:fa:d5:0f:
17:33:69:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI15sOeblyQLmxl3gqjgiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MjFhMzlhZWQ5ZGE0ZWUzYWI2NjM5ZDI0NDUwOGZhMWU4
ZDIwZjYwHhcNMjUwMTAyMTc0OTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWU0MDkzZjdhZDM3MmVkMjI3Zjg5MDllNDBlNTk1YWFjNGE2MjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO6Ist4vOQDmrSMvf+xpKsOmOWTE
RP6AamuVD8+L+0zSAu4Z9u6swmZ4+uL/osiPTySpFtZI1XDYdgUpsz5z2ZLGgYLe
YDDBvSqSqSmNDrI3+Mx7gHh88ADvbg+GuZ1P/m1JiXXnT+0S7szWOHYuzn4DJ225
gK2j4fbHhQjzIHZE8DaPKdBlN1we3Np2CZomrilKk2V6bRzCKixM3uMlij/85YBa
uQnpQNPc1eTI0vF8q5nLSJL6iPu9bKt2SprJUFgm0PAk1gtmPeDyhDkQmNIzUQH6
EHdKwncdAzBeYqxKYVy7t9uFkWl/hQIH3yHHdL9RabgrHfokAPjM7fzUUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDrkCT9603LtIn+JCeQOWVqsSmKaMB8GA1UdIwQY
MBaAFIgho5rtnaTuOrZjnSRFCPoejSD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAt
ZjYwZDZmNzE4MmExLzEvT3VRSlAzclRjdTBpZjRrSjVBNVpXcXhLWXBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAtZjYwZDZmNzE4MmEx
LzEvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSe8MA0G
CSqGSIb3DQEBCwUAA4IBAQAEAbnXQKBRcw/azTIyAH2qXwcSLck2WY6fv6z+ZCzQ
65NUuQ17rz0l4JViwEcOibKX/3xaNtmwEoH3En8CmDkUn8YmKnvZ4jjSKIBLradt
5M8r3Ac51X/ut/aV575Q5Vt3lSVbWF/lRcwwFvZUR/RbKFX9vp7kheUjF1v8vAtW
uoLgaRJhyD3bVsUA/0USZjNvk+mWb8wPisQ0rTp8B3Ff4I+eoHiZ6uPbLFa6BV9s
v8YwfRM+TcBlQu62KqBOjbk3vZ/gl5tpCP6RGb8X4Ku5XxtCVHMFBl+yIAZhBm6E
torlrbVLGHRy4/GLCgAaWTR6SgjXOxYTEkL61Q8XM2mE
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:32:56 2025 by rpki-client