Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b71d88-2ead-4838-9955-8369dd531af5/1/OxMNzgCk3hf6aICDMOF-fE1rKDM.roa
File: OxMNzgCk3hf6aICDMOF-fE1rKDM.roa (raw, json)
Hash identifier: NW0W43kWVm3UO6yd8waWRYJcobT0JyYKcR/pQMhgcoI=
Subject key identifier: 3B:13:0D:CE:00:A4:DE:17:FA:68:80:83:30:E1:7E:7C:4D:6B:28:33
Certificate issuer: /CN=1a3bfeb521f66e57248326cfff55becefddd0fcd
Certificate serial: 012D5F73
Authority key identifier: 1A:3B:FE:B5:21:F6:6E:57:24:83:26:CF:FF:55:BE:CE:FD:DD:0F:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gjv-tSH2blckgybP_1W-zv3dD80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b71d88-2ead-4838-9955-8369dd531af5/1/OxMNzgCk3hf6aICDMOF-fE1rKDM.roa
Signing time: Tue 01 Feb 2022 21:12:27 +0000
ROA not before: Tue 01 Feb 2022 21:12:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24843
IP address blocks: 193.8.206.0/24 maxlen: 24
193.8.206.0/23 maxlen: 23
193.8.220.0/23 maxlen: 23
193.8.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19750771 (0x12d5f73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3bfeb521f66e57248326cfff55becefddd0fcd
Validity
Not Before: Feb 1 21:12:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b130dce00a4de17fa68808330e17e7c4d6b2833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:eb:c0:cc:9f:45:ac:91:49:8c:2e:60:ab:24:
36:4d:9b:d6:2a:fa:88:bc:b3:d5:ef:3a:6d:be:f4:
2c:62:90:e9:d8:bf:09:34:fb:c1:3c:2f:b1:5c:a1:
0a:d9:90:56:7b:d1:20:95:11:28:d5:1b:f0:9e:ae:
90:45:a5:d3:ec:90:80:f2:d0:ab:9c:66:c4:93:cc:
51:7d:80:fd:bb:86:c3:31:5f:59:53:5c:91:0f:d2:
b6:ac:6a:cd:c4:ac:1b:92:e0:6b:c3:37:78:9e:39:
cc:bc:05:04:c0:c4:da:8c:86:ff:f7:a5:c0:dc:f3:
48:f7:83:07:d3:df:02:b0:e5:33:8f:71:54:3a:13:
7b:ed:7c:20:cf:af:39:23:a6:5c:6e:95:a1:cd:fc:
45:1e:56:56:da:03:ff:6f:78:f2:62:b0:2e:fc:34:
e2:1d:76:d9:53:0b:07:35:6e:ac:c6:92:ff:3c:51:
ac:44:cb:1a:e3:cb:2a:1d:0f:b9:4f:1d:c6:90:9d:
d0:cc:f9:35:8e:cf:2e:97:35:1f:2d:63:eb:17:46:
f2:c5:21:f3:d0:30:91:52:f6:13:34:48:7d:fe:a8:
a1:91:f5:21:dd:2b:c5:00:24:98:c4:be:74:03:bc:
6c:bf:3e:83:ec:5b:ef:4d:85:7e:bd:c8:f9:64:e4:
4e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:13:0D:CE:00:A4:DE:17:FA:68:80:83:30:E1:7E:7C:4D:6B:28:33
X509v3 Authority Key Identifier:
keyid:1A:3B:FE:B5:21:F6:6E:57:24:83:26:CF:FF:55:BE:CE:FD:DD:0F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gjv-tSH2blckgybP_1W-zv3dD80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b71d88-2ead-4838-9955-8369dd531af5/1/OxMNzgCk3hf6aICDMOF-fE1rKDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b71d88-2ead-4838-9955-8369dd531af5/1/Gjv-tSH2blckgybP_1W-zv3dD80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.206.0/23
193.8.220.0/23
Signature Algorithm: sha256WithRSAEncryption
39:17:1f:72:db:12:fd:91:3b:5b:b4:ba:dd:15:b8:16:43:78:
85:4c:8a:39:69:c6:bb:39:b8:dc:9c:7e:e4:bb:f8:7c:c7:95:
87:4d:25:35:d9:c2:f8:8e:4f:28:46:64:ea:c9:8e:3a:69:b3:
a7:3b:d1:aa:a0:df:14:fa:2b:59:cd:f8:5f:38:e0:c6:0a:a8:
7f:e4:92:b7:fe:9a:14:19:a8:27:1e:84:56:80:e3:a6:29:fd:
78:85:99:83:c8:25:23:e7:c6:09:3a:7d:e7:3a:bc:ee:80:4f:
99:a6:2f:89:90:14:96:30:8b:5a:61:1d:e8:0b:ba:7c:44:68:
2c:e4:96:92:a8:2a:35:aa:7f:ab:9d:1c:3b:22:bf:79:43:99:
fe:f4:76:0d:6e:bf:f2:0a:3f:f1:ae:87:cf:fa:34:33:d6:0d:
0b:6e:f3:af:84:76:dc:ed:ce:ca:3d:18:01:55:a9:61:b5:1e:
61:50:96:cc:83:46:3e:33:18:87:f1:fa:09:a4:26:e2:c1:dd:
0d:2b:b7:d2:1c:e8:51:df:5e:13:b6:e9:fd:9f:b8:dd:6c:a8:
9c:0d:35:30:e2:23:8a:07:ce:74:74:73:f6:2c:49:33:93:ee:
2b:aa:6f:09:27:5d:3c:5a:31:77:69:75:85:bd:b1:90:b9:84:
50:f1:e9:ef
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAS1fczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YTNiZmViNTIxZjY2ZTU3MjQ4MzI2Y2ZmZjU1YmVjZWZkZGQwZmNkMB4XDTIyMDIw
MTIxMTIyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2IxMzBkY2UwMGE0
ZGUxN2ZhNjg4MDgzMzBlMTdlN2M0ZDZiMjgzMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANzrwMyfRayRSYwuYKskNk2b1ir6iLyz1e86bb70LGKQ6di/
CTT7wTwvsVyhCtmQVnvRIJURKNUb8J6ukEWl0+yQgPLQq5xmxJPMUX2A/buGwzFf
WVNckQ/StqxqzcSsG5Lga8M3eJ45zLwFBMDE2oyG//elwNzzSPeDB9PfArDlM49x
VDoTe+18IM+vOSOmXG6Voc38RR5WVtoD/2948mKwLvw04h122VMLBzVurMaS/zxR
rETLGuPLKh0PuU8dxpCd0Mz5NY7PLpc1Hy1j6xdG8sUh89AwkVL2EzRIff6ooZH1
Id0rxQAkmMS+dAO8bL8+g+xb702Ffr3I+WTkTksCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQ7Ew3OAKTeF/pogIMw4X58TWsoMzAfBgNVHSMEGDAWgBQaO/61IfZuVySD
Js//Vb7O/d0PzTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dqdi10U0gyYmxja2d5YlBfMVctenYzZEQ4MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzUvYjcxZDg4LTJlYWQtNDgzOC05OTU1LTgzNjlkZDUzMWFmNS8x
L094TU56Z0NrM2hmNmFJQ0RNT0YtZkUxcktETS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUv
YjcxZDg4LTJlYWQtNDgzOC05OTU1LTgzNjlkZDUzMWFmNS8xL0dqdi10U0gyYmxj
a2d5YlBfMVctenYzZEQ4MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAcEIzgMEAcEI3DANBgkqhkiG9w0B
AQsFAAOCAQEAORcfctsS/ZE7W7S63RW4FkN4hUyKOWnGuzm43Jx+5Lv4fMeVh00l
NdnC+I5PKEZk6smOOmmzpzvRqqDfFPorWc34Xzjgxgqof+SSt/6aFBmoJx6EVoDj
pin9eIWZg8glI+fGCTp95zq87oBPmaYviZAUljCLWmEd6Au6fERoLOSWkqgqNap/
q50cOyK/eUOZ/vR2DW6/8go/8a6Hz/o0M9YNC27zr4R23O3Oyj0YAVWpYbUeYVCW
zINGPjMYh/H6CaQm4sHdDSu30hzoUd9eE7bp/Z+43WyonA01MOIjigfOdHRz9ixJ
M5PuK6pvCSddPFoxd2l1hb2xkLmEUPHp7w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:19:50 2025 by rpki-client