Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/O9190WA1y5d-K_bLQnq73iNBbV0.roa
File: O9190WA1y5d-K_bLQnq73iNBbV0.roa (raw, json)
Hash identifier: 1mEERv6IY5dRWQ1jjxFaNK+50Yzpd8g5ly6dV/l6yHs=
Subject key identifier: 3B:DD:7D:D1:60:35:CB:97:7E:2B:F6:CB:42:7A:BB:DE:23:41:6D:5D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190AA4396723EED003731DAFD1111801D35
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/O9190WA1y5d-K_bLQnq73iNBbV0.roa
Signing time: Sat 13 Jul 2024 04:04:34 +0000
ROA not before: Sat 13 Jul 2024 04:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:aa43:910d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:aa:43:96:72:3e:ed:00:37:31:da:fd:11:11:80:1d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 13 04:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bdd7dd16035cb977e2bf6cb427abbde23416d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f3:7a:13:c0:97:68:cf:60:1d:e5:c0:92:da:
2c:7b:88:35:74:01:46:2a:70:99:ae:0a:3a:da:12:
bf:50:46:de:10:ad:4c:87:47:29:50:eb:d3:71:43:
32:24:97:90:b3:2c:43:ec:03:c3:01:a1:98:08:21:
aa:c9:4f:1b:e2:77:4e:04:41:50:6d:5e:5e:9b:10:
54:93:24:f8:d7:01:4e:e5:63:88:5f:f5:d5:99:f8:
91:5c:6f:eb:75:83:b4:dc:38:b2:0a:e3:3a:41:0c:
59:02:c4:50:84:6c:35:10:ac:42:91:63:31:3d:19:
1b:45:c8:ab:5e:01:58:bf:ce:f8:6b:95:c7:10:7b:
e5:f2:7c:de:8c:52:0a:75:fe:28:1e:b9:1c:16:3c:
c1:5a:18:a3:21:a2:d4:fb:af:16:da:2c:d9:e7:ed:
b9:a0:20:c8:c9:00:60:80:3f:df:4c:f6:b1:e6:0c:
54:48:86:e4:bf:c6:37:9d:a6:85:1c:72:78:0c:b2:
6a:54:ee:99:ac:de:20:97:94:f4:29:5b:dc:c9:35:
41:6f:94:56:23:8f:dd:cf:23:2a:41:54:d9:ef:cf:
3a:d9:0f:a8:78:24:be:4b:f1:bb:49:32:1b:f9:76:
80:77:c5:00:81:46:a1:97:d5:d2:d5:79:f8:5e:6a:
a2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DD:7D:D1:60:35:CB:97:7E:2B:F6:CB:42:7A:BB:DE:23:41:6D:5D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/O9190WA1y5d-K_bLQnq73iNBbV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:9f:bc:dd:f4:8b:9a:a9:e9:6e:9c:2e:8a:8e:ed:8d:e1:ef:
d4:76:30:70:11:a9:52:42:42:20:8c:7b:0a:68:93:38:39:02:
56:10:df:e8:f2:b0:18:74:33:2f:4b:3c:16:2f:d7:78:db:55:
22:27:29:85:10:8b:7b:9c:ea:fc:07:94:dc:47:39:b0:e1:e0:
96:c7:92:1c:c1:5d:5f:ac:3f:9b:1a:1a:29:1f:3e:89:a7:18:
c2:6d:eb:73:f6:34:c7:e6:74:5f:75:30:01:cb:f9:00:9b:8b:
03:37:26:92:45:f0:4a:bc:80:30:a2:a0:a2:77:d3:ce:2c:a0:
3e:72:e6:c1:c3:19:fc:df:4d:0e:d2:51:60:f5:8e:0b:78:a3:
a7:e2:c2:92:da:d7:f8:40:54:c1:98:b3:a4:c8:3d:9e:01:b8:
30:b9:9d:23:d0:a7:50:ea:a8:b3:18:53:a8:0f:46:b3:a8:67:
c0:50:22:46:70:c9:9c:55:92:9c:d2:98:e6:ee:53:98:ef:19:
d6:e3:38:c7:3a:91:ae:23:e1:f1:89:99:63:fe:3f:b4:61:a7:
e3:00:96:1a:76:72:15:08:ed:d9:4a:a5:c9:b4:ca:c5:60:dc:
7b:f4:a8:15:48:25:df:13:7f:02:ba:c9:32:ec:5b:a3:f2:99:
66:ab:79:4a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZCqQ5ZyPu0ANzHa/RERgB01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNzEzMDQwNDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmRkN2RkMTYwMzVjYjk3N2UyYmY2Y2I0MjdhYmJkZTIzNDE2ZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfN6E8CXaM9gHeXAktose4g1dAFG
KnCZrgo62hK/UEbeEK1Mh0cpUOvTcUMyJJeQsyxD7APDAaGYCCGqyU8b4ndOBEFQ
bV5emxBUkyT41wFO5WOIX/XVmfiRXG/rdYO03DiyCuM6QQxZAsRQhGw1EKxCkWMx
PRkbRcirXgFYv874a5XHEHvl8nzejFIKdf4oHrkcFjzBWhijIaLU+68W2izZ5+25
oCDIyQBggD/fTPax5gxUSIbkv8Y3naaFHHJ4DLJqVO6ZrN4gl5T0KVvcyTVBb5RW
I4/dzyMqQVTZ78862Q+oeCS+S/G7STIb+XaAd8UAgUahl9XS1Xn4XmqiswIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDvdfdFgNcuXfiv2y0J6u94jQW1dMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvTzkxOTBXQTF5NWQtS19iTFFucTczaU5CYlYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADyfvN30i5qp6W6cLoqO
7Y3h79R2MHARqVJCQiCMewpokzg5AlYQ3+jysBh0My9LPBYv13jbVSInKYUQi3uc
6vwHlNxHObDh4JbHkhzBXV+sP5saGikfPomnGMJt63P2NMfmdF91MAHL+QCbiwM3
JpJF8Eq8gDCioKJ3084soD5y5sHDGfzfTQ7SUWD1jgt4o6fiwpLa1/hAVMGYs6TI
PZ4BuDC5nSPQp1DqqLMYU6gPRrOoZ8BQIkZwyZxVkpzSmObuU5jvGdbjOMc6ka4j
4fGJmWP+P7Rhp+MAlhp2chUI7dlKpcm0ysVg3Hv0qBVIJd8TfwK6yTLsW6PymWar
eUo=
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:05:37 2025 by rpki-client