Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/C8OuOurMHam6ULOHJv9GhDHbke0.roa
File: C8OuOurMHam6ULOHJv9GhDHbke0.roa (raw, json)
Hash identifier: FCUaWvRRTTPQBQKJI7hbkOja4mLEhLWKn2frcis10m4=
Subject key identifier: 0B:C3:AE:3A:EA:CC:1D:A9:BA:50:B3:87:26:FF:46:84:31:DB:91:ED
Certificate issuer: /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial: 019425FDC816C4BB5F7A2CC2578545ED0E42
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/C8OuOurMHam6ULOHJv9GhDHbke0.roa
Signing time: Thu 02 Jan 2025 07:49:36 +0000
ROA not before: Thu 02 Jan 2025 07:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47134
IP address blocks: 93.91.64.0/20 maxlen: 20
93.91.65.0/24 maxlen: 24
93.91.67.0/24 maxlen: 24
93.91.73.0/24 maxlen: 24
93.91.74.0/24 maxlen: 24
93.91.75.0/24 maxlen: 24
93.91.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c8:16:c4:bb:5f:7a:2c:c2:57:85:45:ed:0e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
Validity
Not Before: Jan 2 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bc3ae3aeacc1da9ba50b38726ff468431db91ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:47:45:0c:c0:35:7b:46:0a:f1:c2:25:fb:
f7:c9:32:d3:04:2a:9f:c9:49:97:73:25:f6:5b:6f:
3f:dc:66:fa:ad:05:39:d5:d4:20:a1:bc:5b:a3:c4:
d6:7a:b0:6a:a7:ec:2f:75:10:58:3e:3c:77:a7:7e:
51:ad:83:41:94:6a:42:b4:77:33:f0:6d:cc:f5:25:
b5:06:86:3d:c5:18:e9:35:be:87:5a:9c:d7:93:c2:
e6:23:1f:a4:bc:b5:73:b7:19:9e:65:a0:61:6a:b3:
90:1c:c6:8b:a9:5c:4c:fd:14:90:ef:56:fe:c3:a2:
0d:b0:e7:e1:fd:8e:b1:4a:d4:77:7c:b0:63:b9:be:
ef:84:be:f7:01:58:f9:54:34:7a:85:d1:b6:d7:04:
44:3d:48:df:58:2c:08:ad:83:8f:d9:a7:e6:99:80:
5e:46:2c:d6:03:2c:3d:8d:2e:02:03:ca:1c:f6:b6:
f8:d1:30:9b:e7:68:c5:88:d4:03:2d:53:fe:6b:e6:
7e:ba:8e:85:87:e7:1d:1c:96:31:87:5a:7e:94:b7:
e2:a6:98:ed:87:3c:09:4c:70:12:65:85:d4:f5:2c:
f8:31:3d:c8:40:d2:79:84:01:33:d4:eb:ea:fe:3b:
6e:ec:fc:e6:19:d4:ce:33:ac:77:24:e7:13:93:fd:
8d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C3:AE:3A:EA:CC:1D:A9:BA:50:B3:87:26:FF:46:84:31:DB:91:ED
X509v3 Authority Key Identifier:
keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/C8OuOurMHam6ULOHJv9GhDHbke0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.91.64.0/20
Signature Algorithm: sha256WithRSAEncryption
18:b9:d7:91:4b:1a:28:96:bc:76:53:13:43:58:63:ba:38:a8:
29:b5:d4:fe:cb:1d:05:4f:ce:75:c0:1e:aa:d8:5d:65:70:c8:
0c:be:d6:e0:e0:58:88:63:20:37:d7:c4:23:b6:de:26:36:2e:
03:2a:5d:66:9a:3e:5b:ba:44:bb:4e:d7:ff:29:c1:b2:f4:6d:
da:24:6b:8f:30:48:20:4e:14:cc:eb:c1:4b:1f:43:24:3a:23:
9f:44:a7:ac:70:5a:9e:62:84:b7:84:ea:60:0c:84:99:cb:75:
18:32:a7:cd:02:f1:c8:f0:ac:1a:87:4b:26:f2:6c:aa:60:7b:
84:e4:2e:ef:40:62:fe:19:85:19:6e:12:9c:12:8e:8c:06:9a:
97:33:94:07:15:09:fc:de:11:51:56:0a:cd:20:fa:25:d5:c2:
6d:60:a7:92:cd:f2:e0:96:70:16:19:9c:6a:74:26:7d:17:66:
a3:a0:f2:d5:0a:0b:5f:d8:dd:9c:4b:06:8a:98:df:82:04:29:
4f:c3:e1:d2:7e:34:65:c6:ae:c0:db:d6:d4:29:5a:d4:44:dc:
b8:18:a0:d6:f9:22:5d:99:27:d0:d8:5f:ee:42:d7:c4:bf:08:
1f:58:d9:b0:dd:25:15:c3:35:6d:e2:7d:2b:7c:d5:0e:87:ec:
67:81:93:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/cgWxLtfeizCV4VF7Q5CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYjM0ODA0ZjliNjZhNzFjMjQ3MjViMmQ3N2Y5NDkxMTIx
ODVlYjEwHhcNMjUwMTAyMDc0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmMzYWUzYWVhY2MxZGE5YmE1MGIzODcyNmZmNDY4NDMxZGI5MWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCtHRQzANXtGCvHCJfv3yTLTBCqf
yUmXcyX2W28/3Gb6rQU51dQgobxbo8TWerBqp+wvdRBYPjx3p35RrYNBlGpCtHcz
8G3M9SW1BoY9xRjpNb6HWpzXk8LmIx+kvLVztxmeZaBharOQHMaLqVxM/RSQ71b+
w6INsOfh/Y6xStR3fLBjub7vhL73AVj5VDR6hdG21wREPUjfWCwIrYOP2afmmYBe
RizWAyw9jS4CA8oc9rb40TCb52jFiNQDLVP+a+Z+uo6Fh+cdHJYxh1p+lLfippjt
hzwJTHASZYXU9Sz4MT3IQNJ5hAEz1Ovq/jtu7PzmGdTOM6x3JOcTk/2NjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAvDrjrqzB2pulCzhyb/RoQx25HtMB8GA1UdIwQY
MBaAFFGzSAT5tmpxwkclstd/lJESGF6xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83NDYwNmYtZDA3MC00MzJkLWE4NmYt
NWE3Mjg5ZWY1ZjYzLzEvQzhPdU91ck1IYW02VUxPSEp2OUdoREhia2UwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy83NDYwNmYtZDA3MC00MzJkLWE4NmYtNWE3Mjg5ZWY1ZjYz
LzEvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEXVtAMA0G
CSqGSIb3DQEBCwUAA4IBAQAYudeRSxoolrx2UxNDWGO6OKgptdT+yx0FT851wB6q
2F1lcMgMvtbg4FiIYyA318Qjtt4mNi4DKl1mmj5bukS7Ttf/KcGy9G3aJGuPMEgg
ThTM68FLH0MkOiOfRKescFqeYoS3hOpgDISZy3UYMqfNAvHI8Kwah0sm8myqYHuE
5C7vQGL+GYUZbhKcEo6MBpqXM5QHFQn83hFRVgrNIPol1cJtYKeSzfLglnAWGZxq
dCZ9F2ajoPLVCgtf2N2cSwaKmN+CBClPw+HSfjRlxq7A29bUKVrURNy4GKDW+SJd
mSfQ2F/uQtfEvwgfWNmw3SUVwzVt4n0rfNUOh+xngZOt
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:22 2025 by rpki-client