Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oKvuWq8MCD7E6SGUO-qtqNOpeps.roa
File: oKvuWq8MCD7E6SGUO-qtqNOpeps.roa (raw, json)
Hash identifier: RclRiZ7YitB8UpLwzJIIkdgNQCEkzVJgqKuHq11EdPM=
Subject key identifier: A0:AB:EE:5A:AF:0C:08:3E:C4:E9:21:94:3B:EA:AD:A8:D3:A9:7A:9B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0191E22B86748CC357A03CF980AC2683D58F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oKvuWq8MCD7E6SGUO-qtqNOpeps.roa
Signing time: Wed 11 Sep 2024 17:39:48 +0000
ROA not before: Wed 11 Sep 2024 17:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 11798
IP address blocks: 150.241.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e2:2b:86:74:8c:c3:57:a0:3c:f9:80:ac:26:83:d5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 11 17:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0abee5aaf0c083ec4e921943beaada8d3a97a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:5d:1a:d3:30:11:6c:32:40:e9:9f:46:52:
f4:80:98:14:ed:fc:c9:16:ce:17:e0:4e:4e:2d:cd:
7a:62:24:86:d2:35:a8:fe:23:50:7b:39:3d:b0:19:
93:2e:1c:d9:31:db:01:ab:6d:2f:2e:f5:d8:c4:73:
a9:58:78:f3:d0:c1:74:66:de:e3:c0:39:b3:b1:fc:
03:af:4e:0b:6f:c8:6b:f2:99:2b:7c:b4:a3:30:a5:
e1:dc:0c:b7:da:b7:45:50:89:4d:17:f9:48:94:93:
2b:f1:d7:76:41:26:4e:b5:c6:45:03:a5:28:b6:cc:
71:ee:d1:89:a8:a2:4b:74:2e:25:36:44:a4:58:ad:
5b:98:0e:7f:33:74:2d:32:ae:8b:19:80:3a:e1:39:
e9:6f:c2:73:c4:d7:04:a3:e7:17:09:1a:30:60:39:
07:e9:0f:0e:c1:3a:44:3e:33:7d:fe:eb:30:3a:0a:
e3:bc:09:ec:cf:22:cd:eb:d1:13:cb:db:25:7d:b2:
fd:b0:ad:9e:93:8f:c5:7c:8b:b0:d1:54:9f:0d:12:
2d:92:a4:73:8e:1e:69:0d:8f:0c:c3:a8:b4:bd:f6:
c7:f3:49:bb:c1:c9:1a:c6:77:76:56:b0:44:04:d8:
ad:99:e2:d6:72:1d:7f:b6:63:5c:0b:ac:ea:0c:4b:
d8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AB:EE:5A:AF:0C:08:3E:C4:E9:21:94:3B:EA:AD:A8:D3:A9:7A:9B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oKvuWq8MCD7E6SGUO-qtqNOpeps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7e:cf:fb:04:a2:1f:fb:37:52:3c:28:2d:a3:cc:36:1a:55:11:
21:c1:b2:0f:e2:ea:57:eb:13:a4:9a:eb:3b:9f:4b:48:9c:a0:
f4:04:7b:6a:83:69:30:8f:08:83:ee:ec:ea:04:6e:5e:76:bb:
b1:b1:a0:75:bd:16:da:d6:12:5a:37:4d:13:57:4b:53:4b:e8:
85:9a:00:40:e6:9e:5b:3f:cc:e4:ef:69:db:a1:0d:af:48:cf:
05:4c:a9:e1:f8:ec:f3:7b:99:9b:fc:66:dd:05:11:0b:1e:10:
42:6d:cf:b7:11:5e:4d:4c:6e:77:c1:55:b1:eb:08:b9:15:d1:
31:28:22:ef:de:95:8e:14:8f:a8:c3:6a:14:c7:41:7f:32:a1:
30:36:ab:1b:f7:0e:4d:3c:f9:30:6d:53:45:13:39:48:5b:bd:
a2:e1:5f:d1:8b:4c:42:e0:fd:a6:65:d4:c6:06:82:50:ec:e7:
c7:21:b4:50:00:77:67:8a:91:9d:33:4d:ba:a8:d0:59:e7:f8:
c8:ea:4b:60:50:af:7e:8f:97:65:fd:85:35:b2:d7:8c:18:07:
03:37:8e:82:ad:2a:dd:c1:a2:82:02:dc:a6:9c:00:ab:8a:07:
6b:85:b0:80:ee:8d:e5:8c:19:3f:32:8f:6a:70:aa:13:a1:b8:
93:ee:37:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHiK4Z0jMNXoDz5gKwmg9WPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjQwOTExMTczOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGFiZWU1YWFmMGMwODNlYzRlOTIxOTQzYmVhYWRhOGQzYTk3YTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFpdGtMwEWwyQOmfRlL0gJgU7fzJ
Fs4X4E5OLc16YiSG0jWo/iNQezk9sBmTLhzZMdsBq20vLvXYxHOpWHjz0MF0Zt7j
wDmzsfwDr04Lb8hr8pkrfLSjMKXh3Ay32rdFUIlNF/lIlJMr8dd2QSZOtcZFA6Uo
tsxx7tGJqKJLdC4lNkSkWK1bmA5/M3QtMq6LGYA64Tnpb8JzxNcEo+cXCRowYDkH
6Q8OwTpEPjN9/uswOgrjvAnszyLN69ETy9slfbL9sK2ek4/FfIuw0VSfDRItkqRz
jh5pDY8Mw6i0vfbH80m7wckaxnd2VrBEBNitmeLWch1/tmNcC6zqDEvY6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKCr7lqvDAg+xOkhlDvqrajTqXqbMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvb0t2dVdxOE1DRDdFNlNHVU8tcXRxTk9wZXBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGlvFAMA0G
CSqGSIb3DQEBCwUAA4IBAQB+z/sEoh/7N1I8KC2jzDYaVREhwbIP4upX6xOkmus7
n0tInKD0BHtqg2kwjwiD7uzqBG5edruxsaB1vRba1hJaN00TV0tTS+iFmgBA5p5b
P8zk72nboQ2vSM8FTKnh+Ozze5mb/GbdBRELHhBCbc+3EV5NTG53wVWx6wi5FdEx
KCLv3pWOFI+ow2oUx0F/MqEwNqsb9w5NPPkwbVNFEzlIW72i4V/Ri0xC4P2mZdTG
BoJQ7OfHIbRQAHdnipGdM026qNBZ5/jI6ktgUK9+j5dl/YU1steMGAcDN46CrSrd
waKCAtymnACrigdrhbCA7o3ljBk/Mo9qcKoTobiT7jeb
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:55 2025 by rpki-client