Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/OUvkOlpyy8eCqioGl1CZv48lMJw.roa
File: OUvkOlpyy8eCqioGl1CZv48lMJw.roa (raw, json)
Hash identifier: sCYTxGnxKa9TxyHx2sWGWvVvnVDPzmO7ZhBObZEAs2U=
Subject key identifier: 39:4B:E4:3A:5A:72:CB:C7:82:AA:2A:06:97:50:99:BF:8F:25:30:9C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FDFB40392F4A32CDCBA19C4E3020DCCB8
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/OUvkOlpyy8eCqioGl1CZv48lMJw.roa
Signing time: Mon 03 Jun 2024 20:04:27 +0000
ROA not before: Mon 03 Jun 2024 20:04:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:dfb3:c20d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:df:b4:03:92:f4:a3:2c:dc:ba:19:c4:e3:02:0d:cc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 3 20:04:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=394be43a5a72cbc782aa2a06975099bf8f25309c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:71:29:9e:7e:62:3f:07:e1:ba:66:f6:af:
7a:08:ac:7f:be:17:32:90:a7:5d:a8:f8:8e:de:d2:
87:c8:7a:b5:62:6a:85:41:91:90:f1:33:d1:83:5a:
6d:31:67:5a:c3:99:07:d8:3f:69:fa:69:31:93:bc:
f5:30:ef:e6:51:94:49:55:9d:27:16:12:d7:ac:aa:
13:28:de:d8:f5:55:53:50:b6:4e:15:50:c0:e3:20:
7c:7f:23:e9:7c:bf:e5:ea:5b:ee:fd:d1:66:6c:7f:
87:36:30:8d:3a:67:95:93:df:3a:18:74:0a:f6:9b:
0c:c2:bf:db:0f:76:1f:f9:99:ad:4a:fc:72:84:35:
67:a2:29:24:fe:ca:6b:a9:90:b7:ae:44:c4:2b:42:
ff:09:8e:cd:ce:cb:64:d4:79:a3:fd:42:1f:3c:4c:
dc:6f:3b:a0:17:8d:b3:35:d8:5f:25:5c:1a:4a:72:
f3:60:f8:2b:c8:70:f7:36:08:76:8a:b3:86:aa:d8:
e8:57:90:a2:07:1a:3b:26:20:e1:8e:08:e3:70:44:
3c:c5:ab:e5:77:93:a0:d4:50:42:e2:27:d8:5d:7e:
7a:50:05:44:84:65:9f:dd:71:1f:dc:17:3f:2c:8a:
36:98:06:15:07:3e:1d:51:e6:12:ea:84:99:29:42:
de:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4B:E4:3A:5A:72:CB:C7:82:AA:2A:06:97:50:99:BF:8F:25:30:9C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/OUvkOlpyy8eCqioGl1CZv48lMJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:c6:d7:58:3a:4d:2a:62:2e:01:0e:98:25:dd:db:19:18:2d:
72:13:11:b3:2c:d5:22:ee:22:13:a0:84:6a:a0:7a:5d:85:51:
af:7e:fa:89:65:04:5c:f2:c5:28:6b:c2:33:57:a8:79:e8:4f:
37:68:8d:a1:a4:d8:be:52:4a:c0:54:c2:30:41:3c:92:d4:2b:
f9:46:96:1c:09:15:7d:1e:4e:3f:97:2b:27:84:94:b4:31:4c:
26:95:89:b8:40:b3:67:30:35:67:f9:a4:13:91:9c:df:90:c1:
be:8d:c2:cd:11:54:56:70:7d:84:19:1a:95:ea:e0:b5:60:20:
1e:05:df:62:03:f8:4f:5f:f8:b0:6b:a1:48:ec:3d:ea:db:b6:
d6:02:06:f3:1a:6f:a5:4f:e8:4f:d6:f6:d4:49:6f:cc:27:f5:
45:99:a7:1f:e2:a2:70:63:93:56:47:55:b2:34:b1:52:d6:9f:
e2:fa:d6:e1:3c:87:bd:85:1a:12:30:79:13:12:f5:4e:28:3b:
42:d9:a8:c6:e9:8f:d2:9f:da:71:00:0f:c8:d5:51:3f:0a:64:
20:e6:69:0e:f0:f4:ac:16:fd:e6:6e:48:8a:6c:b9:04:8f:be:
92:4a:2f:ea:48:89:e3:b9:87:b2:4b:e8:7b:66:23:0e:18:34:
8a:80:6e:cc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY/ftAOS9KMs3LoZxOMCDcy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjAzMjAwNDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTRiZTQzYTVhNzJjYmM3ODJhYTJhMDY5NzUwOTliZjhmMjUzMDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1VxKZ5+Yj8H4bpm9q96CKx/vhcy
kKddqPiO3tKHyHq1YmqFQZGQ8TPRg1ptMWdaw5kH2D9p+mkxk7z1MO/mUZRJVZ0n
FhLXrKoTKN7Y9VVTULZOFVDA4yB8fyPpfL/l6lvu/dFmbH+HNjCNOmeVk986GHQK
9psMwr/bD3Yf+ZmtSvxyhDVnoikk/sprqZC3rkTEK0L/CY7Nzstk1Hmj/UIfPEzc
bzugF42zNdhfJVwaSnLzYPgryHD3Ngh2irOGqtjoV5CiBxo7JiDhjgjjcEQ8xavl
d5Og1FBC4ifYXX56UAVEhGWf3XEf3Bc/LIo2mAYVBz4dUeYS6oSZKULeEQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDlL5DpacsvHgqoqBpdQmb+PJTCcMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvT1V2a09scHl5OGVDcWlvR2wxQ1p2NDhsTUp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABzG11g6TSpiLgEOmCXd
2xkYLXITEbMs1SLuIhOghGqgel2FUa9++ollBFzyxShrwjNXqHnoTzdojaGk2L5S
SsBUwjBBPJLUK/lGlhwJFX0eTj+XKyeElLQxTCaVibhAs2cwNWf5pBORnN+Qwb6N
ws0RVFZwfYQZGpXq4LVgIB4F32ID+E9f+LBroUjsPerbttYCBvMab6VP6E/W9tRJ
b8wn9UWZpx/ionBjk1ZHVbI0sVLWn+L61uE8h72FGhIweRMS9U4oO0LZqMbpj9Kf
2nEAD8jVUT8KZCDmaQ7w9KwW/eZuSIpsuQSPvpJKL+pIieO5h7JL6HtmIw4YNIqA
bsw=
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:08:57 2025 by rpki-client