Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/OUGzudtTbJQVw_1mFk8aHx4RCVE.roa
File: OUGzudtTbJQVw_1mFk8aHx4RCVE.roa (raw, json)
Hash identifier: pnWv/Z4SyVfyPYv0oxknc3DOerNA4xLQHYB0+b/8kWY=
Subject key identifier: 39:41:B3:B9:DB:53:6C:94:15:C3:FD:66:16:4F:1A:1F:1E:11:09:51
Certificate issuer: /CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Certificate serial: 01942368E1DCD6C083864417EDDCB2008F7C
Authority key identifier: AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/OUGzudtTbJQVw_1mFk8aHx4RCVE.roa
Signing time: Wed 01 Jan 2025 19:47:43 +0000
ROA not before: Wed 01 Jan 2025 19:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43365
IP address blocks: 193.228.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:e1:dc:d6:c0:83:86:44:17:ed:dc:b2:00:8f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Validity
Not Before: Jan 1 19:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3941b3b9db536c9415c3fd66164f1a1f1e110951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:3a:03:61:27:bd:af:7b:16:3d:7c:43:af:
f0:6f:4b:be:bb:7a:f6:b7:9d:98:53:04:8b:55:86:
29:d2:b9:b8:d2:4f:5a:e0:c5:c9:0c:4f:a8:dd:6a:
2d:50:c2:4a:82:90:36:8e:07:77:cb:f0:6f:29:af:
fd:da:cf:cf:d0:0b:81:a4:5b:20:24:04:b7:c7:7d:
69:e6:4a:7f:d9:9e:c6:55:72:95:6e:7e:5a:60:fd:
e5:14:f5:84:59:18:6d:c6:32:9a:11:cf:c7:7a:44:
ef:25:fe:a5:d9:e2:a1:3b:49:73:4e:18:1c:03:7a:
72:ce:3c:7f:b6:19:5a:a7:d9:45:1c:89:eb:6b:1e:
e5:1d:6e:32:11:d4:38:b3:e9:89:46:56:ca:c6:44:
ba:97:9b:f8:61:9b:f9:b4:89:76:e4:5d:68:b6:56:
69:b6:40:34:83:ed:d1:27:77:ab:09:50:87:73:ec:
13:bd:48:79:b0:85:bc:c7:53:cd:be:17:22:43:1d:
27:c6:5a:05:89:a0:b8:7b:9c:f1:75:1c:47:4a:8a:
76:6e:33:18:c5:ea:f4:01:e2:ab:00:ec:0f:08:c3:
98:99:2a:23:21:f8:76:43:b6:c6:c2:4c:b7:78:90:
94:7a:07:ef:31:97:f8:07:80:aa:d9:70:26:6c:99:
ab:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:41:B3:B9:DB:53:6C:94:15:C3:FD:66:16:4F:1A:1F:1E:11:09:51
X509v3 Authority Key Identifier:
keyid:AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/OUGzudtTbJQVw_1mFk8aHx4RCVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:da:2e:4e:2c:6b:09:9e:5a:b7:20:c4:6a:d7:29:6f:a6:ea:
d7:8d:10:3b:38:5a:17:45:c2:10:e9:25:22:de:e8:52:6c:cf:
fe:b9:e0:57:6e:7d:f7:9b:f4:45:cf:6a:2d:ad:19:30:d8:15:
a3:76:49:80:9e:1a:b6:ac:e5:6c:cf:b9:2e:3a:3f:64:b6:26:
3b:65:b1:ec:e6:09:c6:55:3e:8d:83:ab:76:de:17:7f:62:a8:
cc:20:98:42:e1:ff:ab:ab:54:41:2c:86:3a:1c:b5:e2:bf:1e:
cf:be:ed:c4:e5:e6:1b:44:39:db:aa:6f:24:85:11:6c:11:c6:
41:fc:f7:8e:6c:37:25:b9:46:cd:76:3a:49:38:cd:d6:69:3e:
04:ee:a5:15:21:44:6b:02:25:51:53:e7:e6:e4:d3:40:69:81:
03:ed:5e:e7:05:94:6d:38:a3:ad:16:f1:06:75:4a:0c:4f:dd:
90:29:89:ed:fe:65:8d:ed:33:3f:a5:95:d4:ce:6a:38:0a:f5:
50:c8:c2:8a:78:8a:e2:3a:03:b7:56:1c:eb:bf:2b:22:bf:34:
95:31:d1:7a:12:d4:61:c5:52:ae:fa:20:99:04:47:39:64:b4:
1a:30:16:e3:34:2a:54:6d:e5:4e:74:af:37:01:89:16:7a:79:
28:ac:6d:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaOHc1sCDhkQX7dyyAI98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMGRjMTA4YjYwZjQ3YjBkOTc3MjgwOGU1ZmNjMzgxZWFh
ODFjNzgwHhcNMjUwMTAxMTk0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTQxYjNiOWRiNTM2Yzk0MTVjM2ZkNjYxNjRmMWExZjFlMTEwOTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh06A2Enva97Fj18Q6/wb0u+u3r2
t52YUwSLVYYp0rm40k9a4MXJDE+o3WotUMJKgpA2jgd3y/BvKa/92s/P0AuBpFsg
JAS3x31p5kp/2Z7GVXKVbn5aYP3lFPWEWRhtxjKaEc/HekTvJf6l2eKhO0lzThgc
A3pyzjx/thlap9lFHInrax7lHW4yEdQ4s+mJRlbKxkS6l5v4YZv5tIl25F1otlZp
tkA0g+3RJ3erCVCHc+wTvUh5sIW8x1PNvhciQx0nxloFiaC4e5zxdRxHSop2bjMY
xer0AeKrAOwPCMOYmSojIfh2Q7bGwky3eJCUegfvMZf4B4Cq2XAmbJmrBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDlBs7nbU2yUFcP9ZhZPGh8eEQlRMB8GA1UdIwQY
MBaAFK0NwQi2D0ew2XcoCOX8w4HqqBx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclEzQkNMWVBSN0RaZHlnSTVmekRnZXFvSEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wYjU4NjAtY2Q1Ny00MTgzLWI5YWUt
ZTg0Nzg1ODk0ODM4LzEvT1VHenVkdFRiSlFWd18xbUZrOGFIeDRSQ1ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wYjU4NjAtY2Q1Ny00MTgzLWI5YWUtZTg0Nzg1ODk0ODM4
LzEvclEzQkNMWVBSN0RaZHlnSTVmekRnZXFvSEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweSaMA0G
CSqGSIb3DQEBCwUAA4IBAQCn2i5OLGsJnlq3IMRq1ylvpurXjRA7OFoXRcIQ6SUi
3uhSbM/+ueBXbn33m/RFz2otrRkw2BWjdkmAnhq2rOVsz7kuOj9ktiY7ZbHs5gnG
VT6Ng6t23hd/YqjMIJhC4f+rq1RBLIY6HLXivx7Pvu3E5eYbRDnbqm8khRFsEcZB
/PeObDcluUbNdjpJOM3WaT4E7qUVIURrAiVRU+fm5NNAaYED7V7nBZRtOKOtFvEG
dUoMT92QKYnt/mWN7TM/pZXUzmo4CvVQyMKKeIriOgO3VhzrvysivzSVMdF6EtRh
xVKu+iCZBEc5ZLQaMBbjNCpUbeVOdK83AYkWenkorG1F
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:12 2025 by rpki-client