Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/OuZ8JDELlHkmy4mAtHa6xO8-sIs.roa
File: OuZ8JDELlHkmy4mAtHa6xO8-sIs.roa (raw, json)
Hash identifier: aXzQWtpmM3zc6oPTdegEkGjN2vqa86UKjlrfO4yewcg=
Subject key identifier: 3A:E6:7C:24:31:0B:94:79:26:CB:89:80:B4:76:BA:C4:EF:3E:B0:8B
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 019425FC3E1EB6C8AD0142D69091DF6978CD
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/OuZ8JDELlHkmy4mAtHa6xO8-sIs.roa
Signing time: Thu 02 Jan 2025 07:47:55 +0000
ROA not before: Thu 02 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211392
IP address blocks: 91.192.106.0/23 maxlen: 23
91.192.106.0/24 maxlen: 24
91.193.58.0/23 maxlen: 23
91.193.59.0/24 maxlen: 24
193.106.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:3e:1e:b6:c8:ad:01:42:d6:90:91:df:69:78:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Jan 2 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ae67c24310b947926cb8980b476bac4ef3eb08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:80:92:af:4b:47:88:39:69:64:f1:62:24:a8:
14:36:ac:49:e5:f0:ca:96:4c:3b:b8:0b:3e:79:ef:
04:7f:86:10:9b:7b:23:48:e4:71:af:1c:83:0d:80:
79:5e:8c:b1:69:32:81:a9:76:98:6b:e2:5a:ac:a0:
3f:84:ac:34:19:08:66:98:5f:a1:31:7f:8a:ea:d7:
fe:b1:54:14:b1:cf:53:38:19:f7:ae:ed:d0:84:0c:
67:51:81:9e:fc:7f:91:bf:ea:43:fc:c2:45:2a:34:
3a:da:4f:5b:cd:37:dc:75:d0:cc:ba:4a:74:c0:6b:
19:f0:8d:0d:13:8e:69:c0:af:a1:c9:42:32:59:49:
bb:16:da:4f:1d:10:5c:64:d3:b2:29:50:38:89:2f:
d1:39:b3:83:d8:dc:d0:c4:11:c2:a6:17:2f:f1:a5:
62:ad:a0:b4:cc:5e:f1:f7:99:7e:9f:37:20:ce:2a:
ac:58:0b:af:20:a2:f6:26:78:42:4f:18:54:1d:90:
ec:fe:fd:5a:c1:f5:be:4f:43:39:d1:47:dc:49:be:
e9:a2:f0:38:2c:ba:8f:9f:9e:da:b4:e5:2c:3a:49:
d5:b7:fe:1c:1b:f8:36:f4:d0:62:ff:c1:cc:82:35:
94:26:27:9a:85:28:a7:33:fd:78:bd:50:24:8c:6d:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E6:7C:24:31:0B:94:79:26:CB:89:80:B4:76:BA:C4:EF:3E:B0:8B
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/OuZ8JDELlHkmy4mAtHa6xO8-sIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.106.0/23
91.193.58.0/23
193.106.189.0/24
Signature Algorithm: sha256WithRSAEncryption
90:0c:31:96:6b:78:f3:8b:18:e5:ba:d2:1e:23:31:22:a7:6f:
f2:59:7a:24:bc:46:c7:9c:5b:f6:36:56:e6:95:46:aa:8b:be:
14:68:27:62:79:46:f1:4e:5f:81:b9:4c:09:65:0a:6c:37:07:
dc:73:c9:2b:df:f2:2c:68:b2:8b:12:d1:b4:5b:52:3f:6a:e6:
cf:55:a0:de:16:aa:80:ef:f2:c4:27:e5:07:5c:e5:9e:bd:f7:
76:bf:4f:55:c7:3b:15:57:0f:f7:c8:90:4c:97:c4:7b:50:10:
f5:7a:87:fb:e0:b2:90:9c:11:c0:07:8f:46:dc:e1:68:80:e5:
40:79:de:d9:74:65:67:f7:80:a0:fd:43:b0:21:a2:4b:6e:7a:
97:10:16:f1:62:2a:ac:62:db:a1:13:b8:49:61:7a:05:49:34:
94:4d:af:bc:b7:bf:f1:1f:8b:d1:f1:04:f1:bb:ac:70:50:4c:
7c:39:64:98:c3:7e:5c:88:2b:9d:98:64:f5:ef:a8:6e:81:55:
ab:d6:28:3d:b9:ef:55:7c:b1:7b:6d:55:c9:5b:b0:60:08:45:
44:df:46:ea:c5:cc:a0:86:96:c8:8b:53:27:89:df:b3:8e:6d:
1a:58:c1:00:f1:04:44:b1:01:7a:c2:6d:d8:2b:5f:6c:62:ae:
36:da:92:82
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQl/D4etsitAULWkJHfaXjNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTQ2MWMyMTFiZjM1NTFjNTUwN2M5MzBiNDIwNGM2ZWM0
M2IzMjIwHhcNMjUwMTAyMDc0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWU2N2MyNDMxMGI5NDc5MjZjYjg5ODBiNDc2YmFjNGVmM2ViMDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ICSr0tHiDlpZPFiJKgUNqxJ5fDK
lkw7uAs+ee8Ef4YQm3sjSORxrxyDDYB5XoyxaTKBqXaYa+JarKA/hKw0GQhmmF+h
MX+K6tf+sVQUsc9TOBn3ru3QhAxnUYGe/H+Rv+pD/MJFKjQ62k9bzTfcddDMukp0
wGsZ8I0NE45pwK+hyUIyWUm7FtpPHRBcZNOyKVA4iS/RObOD2NzQxBHCphcv8aVi
raC0zF7x95l+nzcgziqsWAuvIKL2JnhCTxhUHZDs/v1awfW+T0M50UfcSb7povA4
LLqPn57atOUsOknVt/4cG/g29NBi/8HMgjWUJieahSinM/14vVAkjG10uQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDrmfCQxC5R5JsuJgLR2usTvPrCLMB8GA1UdIwQY
MBaAFN6UYcIRvzVRxVB8kwtCBMbsQ7MiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2Zjct
ODIwMmE0NjdkNzUzLzEvT3VaOEpERUxsSGtteTRtQXRIYTZ4Tzgtc0lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2ZjctODIwMmE0NjdkNzUz
LzEvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW8BqAwQB
W8E6AwQAwWq9MA0GCSqGSIb3DQEBCwUAA4IBAQCQDDGWa3jzixjlutIeIzEip2/y
WXokvEbHnFv2NlbmlUaqi74UaCdieUbxTl+BuUwJZQpsNwfcc8kr3/IsaLKLEtG0
W1I/aubPVaDeFqqA7/LEJ+UHXOWevfd2v09VxzsVVw/3yJBMl8R7UBD1eof74LKQ
nBHAB49G3OFogOVAed7ZdGVn94Cg/UOwIaJLbnqXEBbxYiqsYtuhE7hJYXoFSTSU
Ta+8t7/xH4vR8QTxu6xwUEx8OWSYw35ciCudmGT176hugVWr1ig9ue9VfLF7bVXJ
W7BgCEVE30bqxcyghpbIi1Mnid+zjm0aWMEA8QREsQF6wm3YK19sYq422pKC
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:28:02 2025 by rpki-client