Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/ouo267dSlLznMI9vKQqz-AZYNWg.roa
File: ouo267dSlLznMI9vKQqz-AZYNWg.roa (raw, json)
Hash identifier: zlSoo8P2oxNbKGPhoJCcuB1Nm21ZI/szjt14xojWUSQ=
Subject key identifier: A2:EA:36:EB:B7:52:94:BC:E7:30:8F:6F:29:0A:B3:F8:06:58:35:68
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 01941F8C3C891179010ED6D6E8FAD51378E0
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/ouo267dSlLznMI9vKQqz-AZYNWg.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12903
IP address blocks: 91.188.192.0/22 maxlen: 24
193.218.113.0/24 maxlen: 24
194.29.208.0/21 maxlen: 24
217.68.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3c:89:11:79:01:0e:d6:d6:e8:fa:d5:13:78:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2ea36ebb75294bce7308f6f290ab3f806583568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:36:86:6b:fd:8b:2f:ab:e2:46:44:31:09:
bd:a5:87:cb:78:d5:db:63:cd:ce:97:01:ce:f9:02:
a7:56:a5:68:e5:c6:9d:26:37:e3:db:e6:e0:94:d5:
39:73:10:50:5b:21:86:2a:8d:06:7b:41:8c:14:dd:
a3:2b:be:57:ee:ae:bc:34:c7:b0:47:9f:c3:95:db:
a4:89:84:6d:c9:8b:07:5e:27:78:38:f8:69:c2:14:
6d:bc:b9:85:9c:6a:7b:99:2c:9d:99:8f:39:ad:95:
4f:09:d7:96:d5:5e:97:36:b8:85:27:18:49:cc:8a:
79:b8:bc:5f:71:5e:44:fe:b0:e5:9d:4c:67:1c:b5:
74:0c:00:bd:98:36:ae:00:a4:77:47:28:dd:13:34:
b3:8c:c0:bc:24:26:f4:5b:10:91:63:af:3e:cc:48:
5d:3c:bd:3d:02:22:85:d1:51:41:7e:8a:73:a3:9a:
ca:7a:f4:fd:53:60:a7:a0:a2:41:26:89:10:5b:7b:
e6:4f:67:dd:28:64:fb:1f:08:f3:1e:54:16:0e:bf:
4d:17:08:5a:10:f4:59:97:fe:cd:f2:94:d1:3e:c7:
d7:d2:3c:bf:89:cb:cb:6e:1f:71:14:52:f1:f9:66:
eb:4c:0d:fd:e4:68:dd:84:4f:7c:83:cf:1f:2a:90:
29:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EA:36:EB:B7:52:94:BC:E7:30:8F:6F:29:0A:B3:F8:06:58:35:68
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/ouo267dSlLznMI9vKQqz-AZYNWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.192.0/22
193.218.113.0/24
194.29.208.0/21
217.68.208.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:60:93:10:d6:17:1b:e6:20:17:9e:d0:f8:86:bd:02:ea:7a:
d3:bc:8d:60:6d:8c:12:47:91:25:f6:50:50:7b:79:0f:dc:2c:
fd:29:d0:56:6d:7d:ad:b8:e0:ed:a9:79:af:c1:16:f5:ab:f8:
0a:d7:4a:06:79:ec:e6:91:52:87:f3:04:5b:90:39:fb:97:99:
54:6a:d0:3f:94:53:d8:b4:fa:2e:2c:92:d4:58:3b:81:b1:68:
5e:1a:2c:d8:3a:b3:29:1a:bf:a1:3c:01:c9:0d:c2:4a:66:b2:
45:72:62:b0:cb:f0:b7:c8:7e:64:b5:bb:b7:97:65:f3:28:9b:
4e:9b:cd:cd:6d:0d:6d:a1:a7:cb:d8:d4:59:72:a4:ca:5d:ce:
57:95:c7:49:51:4c:2f:16:b7:a9:46:6f:b9:c0:46:29:f0:b1:
cb:d2:38:95:1f:a0:91:60:ac:9e:4f:26:5d:d5:83:dd:8c:58:
0d:a8:df:ac:81:97:49:29:c3:83:af:78:57:f7:50:14:a7:16:
75:4a:e2:e5:6c:cd:43:cb:90:5f:ea:06:a9:0d:1c:90:7a:b2:
ce:8c:ed:5c:5f:fd:22:9f:16:c6:5b:2e:db:e5:c7:a6:a7:25:
9c:c0:66:eb:09:27:7c:27:91:99:91:b8:b2:9c:92:9e:44:bc:
e2:e7:ef:42
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQfjDyJEXkBDtbW6PrVE3jgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZGE4NjliYTAzMzc0YTE5MmM4ZTNiZGNlOTUwYTkwMDI3
YWRjYWYwHhcNMjUwMTAxMDE0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmVhMzZlYmI3NTI5NGJjZTczMDhmNmYyOTBhYjNmODA2NTgzNTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9Y2hmv9iy+r4kZEMQm9pYfLeNXb
Y83OlwHO+QKnVqVo5cadJjfj2+bglNU5cxBQWyGGKo0Ge0GMFN2jK75X7q68NMew
R5/DldukiYRtyYsHXid4OPhpwhRtvLmFnGp7mSydmY85rZVPCdeW1V6XNriFJxhJ
zIp5uLxfcV5E/rDlnUxnHLV0DAC9mDauAKR3RyjdEzSzjMC8JCb0WxCRY68+zEhd
PL09AiKF0VFBfopzo5rKevT9U2CnoKJBJokQW3vmT2fdKGT7HwjzHlQWDr9NFwha
EPRZl/7N8pTRPsfX0jy/icvLbh9xFFLx+WbrTA395GjdhE98g88fKpAp4wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKLqNuu3UpS85zCPbykKs/gGWDVoMB8GA1UdIwQY
MBaAFBTahpugM3Shksjjvc6VCpACetyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xOGU1YTktMTIzZi00OGFkLTkxYzUt
ZjYwMDc0ODJmYTkzLzEvb3VvMjY3ZFNsTHpuTUk5dktRcXotQVpZTldnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xOGU1YTktMTIzZi00OGFkLTkxYzUtZjYwMDc0ODJmYTkz
LzEvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCW7zAAwQA
wdpxAwQDwh3QAwQE2UTQMA0GCSqGSIb3DQEBCwUAA4IBAQB+YJMQ1hcb5iAXntD4
hr0C6nrTvI1gbYwSR5El9lBQe3kP3Cz9KdBWbX2tuODtqXmvwRb1q/gK10oGeezm
kVKH8wRbkDn7l5lUatA/lFPYtPouLJLUWDuBsWheGizYOrMpGr+hPAHJDcJKZrJF
cmKwy/C3yH5ktbu3l2XzKJtOm83NbQ1toafL2NRZcqTKXc5XlcdJUUwvFrepRm+5
wEYp8LHL0jiVH6CRYKyeTyZd1YPdjFgNqN+sgZdJKcODr3hX91AUpxZ1SuLlbM1D
y5Bf6gapDRyQerLOjO1cX/0inxbGWy7b5cempyWcwGbrCSd8J5GZkbiynJKeRLzi
5+9C
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:42 2025 by rpki-client