Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/OQOfIBTtC9P7jCN0mN43Fc_lGps.roa
File: OQOfIBTtC9P7jCN0mN43Fc_lGps.roa (raw, json)
Hash identifier: ObKTxdr4K0eIsn14ipiRS5l0MCp4U/+rAHXfJfh0K1g=
Subject key identifier: 39:03:9F:20:14:ED:0B:D3:FB:8C:23:74:98:DE:37:15:CF:E5:1A:9B
Certificate issuer: /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Certificate serial: 0194228E05B7A2FED732C3117B4C17BBF16A
Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/OQOfIBTtC9P7jCN0mN43Fc_lGps.roa
Signing time: Wed 01 Jan 2025 15:48:40 +0000
ROA not before: Wed 01 Jan 2025 15:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202261
IP address blocks: 194.147.136.0/24 maxlen: 24
194.147.137.0/24 maxlen: 24
2a07:e480::/48 maxlen: 48
2a07:e480:100::/48 maxlen: 48
2a07:e480:101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:05:b7:a2:fe:d7:32:c3:11:7b:4c:17:bb:f1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Validity
Not Before: Jan 1 15:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39039f2014ed0bd3fb8c237498de3715cfe51a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:1a:d8:e4:2a:7d:8e:46:c6:3c:c6:68:9f:
60:7b:56:44:f0:a7:0e:80:cc:c6:27:ed:17:ce:19:
f2:2d:55:0e:51:40:97:36:b9:fd:31:22:43:25:a8:
37:f6:d3:02:ca:23:e8:e1:b6:40:ea:4e:7f:82:d2:
96:a2:50:0d:f1:8f:69:98:1d:58:5b:f6:20:fd:aa:
9b:f0:af:12:0f:8b:fb:6a:06:ea:e2:13:64:67:cd:
b0:c4:52:e2:32:92:22:fd:e8:7b:41:e6:96:af:4b:
cb:ff:f2:65:6d:3c:89:81:6b:13:44:40:c6:03:ac:
b9:13:0f:5e:7f:ae:e0:fa:40:1c:b3:10:66:fa:32:
a1:fc:86:e7:45:d4:fb:8c:18:cb:4a:2c:e1:d9:91:
3d:b2:b1:bf:1b:06:44:1d:7b:cd:3a:bf:5f:14:c7:
a2:f1:98:ec:f0:b9:a6:7f:7e:50:cc:a8:85:a7:ef:
6c:13:4c:fd:e6:26:cc:11:ef:ae:72:b2:76:bf:51:
57:12:95:23:eb:91:80:38:8a:25:b4:df:09:a2:9b:
28:f5:16:8d:13:90:69:82:e9:52:03:9c:a4:82:21:
a2:6e:d6:9b:d4:2f:7b:2a:93:e5:b0:ef:a2:8e:74:
d1:b5:fb:a7:a1:bb:39:aa:0f:60:01:96:7c:d7:25:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:03:9F:20:14:ED:0B:D3:FB:8C:23:74:98:DE:37:15:CF:E5:1A:9B
X509v3 Authority Key Identifier:
keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/OQOfIBTtC9P7jCN0mN43Fc_lGps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.136.0/23
IPv6:
2a07:e480::/48
2a07:e480:100::/47
Signature Algorithm: sha256WithRSAEncryption
26:87:3c:8e:93:9c:0f:49:c1:da:68:00:1e:af:60:23:5c:2c:
03:51:39:c0:8e:6b:e7:2a:f5:18:cd:95:93:34:a5:fa:92:fe:
de:7c:43:8a:a1:a3:32:61:a2:46:19:32:81:48:89:0e:0e:76:
4b:f6:61:50:51:bf:4a:14:0c:4a:1f:70:e2:62:e6:43:a4:5c:
96:73:7c:b5:a4:28:fd:cf:82:ef:81:50:28:5b:c3:82:65:11:
9a:ce:63:ea:e4:9e:d4:f9:4a:fc:bc:f7:c7:4e:51:f4:de:f4:
b7:0f:0f:82:6f:94:24:70:38:f9:ac:e9:38:a0:a7:a0:6d:1a:
12:36:91:10:40:ad:fd:3b:f9:68:94:4a:80:8c:c5:15:83:80:
ef:4b:c6:74:c3:ef:e5:e8:c2:f1:b6:18:49:85:8a:e6:e0:ba:
b6:2f:9d:7f:99:43:89:17:7c:4c:29:bc:05:5d:3b:37:65:71:
9b:bb:14:2e:75:ac:fe:40:e2:29:00:17:74:28:de:fc:a0:8b:
f3:da:9b:65:06:a2:52:ff:3c:27:86:71:66:85:bf:57:b3:30:
0d:6b:4c:1b:e5:12:c8:06:da:55:15:98:4c:c3:7a:7b:46:55:
98:79:32:ed:fd:61:47:1e:84:af:60:95:19:8b:b9:a1:6c:4b:
55:62:0b:62
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQijgW3ov7XMsMRe0wXu/FqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZDM2YTIxZTliMzY4ZDc0OGJhYjhjNzdiZWJkZGUyYzIy
N2M2YzMwHhcNMjUwMTAxMTU0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTAzOWYyMDE0ZWQwYmQzZmI4YzIzNzQ5OGRlMzcxNWNmZTUxYTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXYa2OQqfY5GxjzGaJ9ge1ZE8KcO
gMzGJ+0XzhnyLVUOUUCXNrn9MSJDJag39tMCyiPo4bZA6k5/gtKWolAN8Y9pmB1Y
W/Yg/aqb8K8SD4v7agbq4hNkZ82wxFLiMpIi/eh7QeaWr0vL//JlbTyJgWsTREDG
A6y5Ew9ef67g+kAcsxBm+jKh/IbnRdT7jBjLSizh2ZE9srG/GwZEHXvNOr9fFMei
8Zjs8Lmmf35QzKiFp+9sE0z95ibMEe+ucrJ2v1FXEpUj65GAOIoltN8Jopso9RaN
E5BpgulSA5ykgiGibtab1C97KpPlsO+ijnTRtfunobs5qg9gAZZ81yVhdwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFDkDnyAU7QvT+4wjdJjeNxXP5RqbMB8GA1UdIwQY
MBaAFFnTaiHps2jXSLq4x3vr3eLCJ8bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQt
NDBlYTgwODkyZjAzLzEvT1FPZklCVHRDOVA3akNOMG1ONDNGY19sR3BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQtNDBlYTgwODkyZjAz
LzEvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQBwpOIMBgE
AgACMBIDBwAqB+SAAAADBwEqB+SAAQAwDQYJKoZIhvcNAQELBQADggEBACaHPI6T
nA9JwdpoAB6vYCNcLANROcCOa+cq9RjNlZM0pfqS/t58Q4qhozJhokYZMoFIiQ4O
dkv2YVBRv0oUDEofcOJi5kOkXJZzfLWkKP3Pgu+BUChbw4JlEZrOY+rkntT5Svy8
98dOUfTe9LcPD4JvlCRwOPms6Tigp6BtGhI2kRBArf07+WiUSoCMxRWDgO9LxnTD
7+XowvG2GEmFiubgurYvnX+ZQ4kXfEwpvAVdOzdlcZu7FC51rP5A4ikAF3Qo3vyg
i/Pam2UGolL/PCeGcWaFv1ezMA1rTBvlEsgG2lUVmEzDentGVZh5Mu39YUcehK9g
lRmLuaFsS1ViC2I=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:14 2025 by rpki-client