Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/OMurwYA6YOKIncOPLLsxkXWOxX8.roa
File: OMurwYA6YOKIncOPLLsxkXWOxX8.roa (raw, json)
Hash identifier: 2NTgYiWsqO5oUTWCX9LXt0M7qqX3o2QS1n2SDI4c6EE=
Subject key identifier: 38:CB:AB:C1:80:3A:60:E2:88:9D:C3:8F:2C:BB:31:91:75:8E:C5:7F
Certificate issuer: /CN=ebd6fc5158ee3ec21a421d718234c8d8a3361fa6
Certificate serial: 01856CCAFD823FDAFCE7AE3C47E6B0C801FE
Authority key identifier: EB:D6:FC:51:58:EE:3E:C2:1A:42:1D:71:82:34:C8:D8:A3:36:1F:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69b8UVjuPsIaQh1xgjTI2KM2H6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/OMurwYA6YOKIncOPLLsxkXWOxX8.roa
Signing time: Sun 01 Jan 2023 10:05:20 +0000
ROA not before: Sun 01 Jan 2023 10:05:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28907
IP address blocks: 193.178.144.0/22 maxlen: 24
193.178.144.0/23 maxlen: 23
193.178.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:fd:82:3f:da:fc:e7:ae:3c:47:e6:b0:c8:01:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebd6fc5158ee3ec21a421d718234c8d8a3361fa6
Validity
Not Before: Jan 1 10:05:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38cbabc1803a60e2889dc38f2cbb3191758ec57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b8:41:c9:15:c2:ae:44:88:63:8a:0c:23:01:
2f:79:56:89:af:d0:02:a1:bc:f1:fb:36:b6:2c:4b:
a2:ea:aa:ac:77:10:ed:04:04:f1:d3:97:98:82:d0:
4c:56:f1:0f:36:7f:7e:11:96:ec:a2:48:40:d6:30:
bc:73:d0:7e:3a:e7:55:0d:14:69:44:3f:2b:d4:b3:
a0:46:41:01:66:6b:70:a5:40:cc:78:eb:cc:8f:9c:
b1:0f:76:57:10:f0:c2:04:ad:a7:d6:11:db:98:f6:
41:63:64:e8:86:8c:23:08:9d:70:92:f5:15:09:78:
c5:7e:d5:98:42:96:05:4f:bf:c6:3e:a8:99:d2:0c:
56:c4:ea:54:62:83:1f:0c:5a:9e:31:6b:b2:80:fc:
de:79:b6:4b:c4:e5:1d:38:01:c9:7d:d3:de:eb:c1:
5e:f1:b0:4b:9b:68:2c:0b:0c:a3:f0:0f:5d:a4:27:
81:cf:4d:cc:0e:65:5c:74:ed:94:3e:f8:9c:2a:ab:
11:59:09:2e:ec:59:aa:24:6d:20:6c:d6:28:1c:82:
38:56:c5:40:b5:b3:50:4f:30:08:be:26:55:b6:a9:
de:78:1e:c1:cf:15:7e:44:a2:79:b3:f8:ab:31:1c:
3b:71:7d:f0:29:d6:7e:e6:19:f7:fe:87:28:92:6e:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CB:AB:C1:80:3A:60:E2:88:9D:C3:8F:2C:BB:31:91:75:8E:C5:7F
X509v3 Authority Key Identifier:
keyid:EB:D6:FC:51:58:EE:3E:C2:1A:42:1D:71:82:34:C8:D8:A3:36:1F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69b8UVjuPsIaQh1xgjTI2KM2H6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/OMurwYA6YOKIncOPLLsxkXWOxX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/69b8UVjuPsIaQh1xgjTI2KM2H6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.144.0/22
Signature Algorithm: sha256WithRSAEncryption
11:87:4c:4a:7f:de:9b:15:9a:91:9c:df:9a:3e:1d:61:b1:16:
cb:42:98:13:9a:90:ac:87:f7:80:86:98:1d:e1:d0:76:48:dc:
d6:ca:6e:b0:38:ea:23:d6:63:a8:4e:c9:5a:39:d0:85:02:6f:
92:3e:aa:b6:e0:4e:df:d2:c0:9f:c1:3a:ed:f4:b4:a4:7e:10:
9c:00:5d:49:b4:f2:b1:c9:b5:64:11:78:cc:4d:c2:b5:4a:0e:
37:b7:b8:63:db:6f:fb:1e:c9:d3:d3:6b:6c:c8:91:40:09:2a:
f9:c4:9a:7d:51:16:89:3b:c3:53:7c:7a:1e:00:1e:5d:9c:6c:
3e:e4:59:26:f1:0d:06:db:ff:ac:3b:ec:69:05:34:9e:b4:7b:
cb:71:6f:f8:19:09:99:8e:01:72:d4:72:d9:0d:60:86:cc:b1:
d3:a7:7f:d9:07:17:9a:4e:7c:bc:aa:91:1c:57:00:ee:81:36:
17:11:75:6f:3a:90:e0:0f:a8:d4:ed:68:01:02:6e:16:1d:2b:
32:b7:da:0d:c0:ef:6f:a6:5b:27:63:60:0f:a4:95:a2:87:c2:
56:e1:97:9b:8f:5c:25:b5:76:03:e7:2f:c0:78:e9:f8:d5:0e:
03:e7:1b:af:5c:bb:f9:a1:b3:24:b4:8d:0b:a8:06:b7:92:fb:
c8:f3:a3:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsyv2CP9r85648R+awyAH+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZDZmYzUxNThlZTNlYzIxYTQyMWQ3MTgyMzRjOGQ4YTMz
NjFmYTYwHhcNMjMwMTAxMTAwNTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGNiYWJjMTgwM2E2MGUyODg5ZGMzOGYyY2JiMzE5MTc1OGVjNTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7hByRXCrkSIY4oMIwEveVaJr9AC
obzx+za2LEui6qqsdxDtBATx05eYgtBMVvEPNn9+EZbsokhA1jC8c9B+OudVDRRp
RD8r1LOgRkEBZmtwpUDMeOvMj5yxD3ZXEPDCBK2n1hHbmPZBY2TohowjCJ1wkvUV
CXjFftWYQpYFT7/GPqiZ0gxWxOpUYoMfDFqeMWuygPzeebZLxOUdOAHJfdPe68Fe
8bBLm2gsCwyj8A9dpCeBz03MDmVcdO2UPvicKqsRWQku7FmqJG0gbNYoHII4VsVA
tbNQTzAIviZVtqneeB7BzxV+RKJ5s/irMRw7cX3wKdZ+5hn3/ocokm5TGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDjLq8GAOmDiiJ3Djyy7MZF1jsV/MB8GA1UdIwQY
MBaAFOvW/FFY7j7CGkIdcYI0yNijNh+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjliOFVWanVQc0lhUWgxeGdqVEkyS00ySDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zYzUyMWItZGVkOS00MDQ2LWJiODAt
Nzg5OTYyNGE0ZjU4LzEvT011cndZQTZZT0tJbmNPUExMc3hrWFdPeFg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zYzUyMWItZGVkOS00MDQ2LWJiODAtNzg5OTYyNGE0ZjU4
LzEvNjliOFVWanVQc0lhUWgxeGdqVEkyS00ySDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwbKQMA0G
CSqGSIb3DQEBCwUAA4IBAQARh0xKf96bFZqRnN+aPh1hsRbLQpgTmpCsh/eAhpgd
4dB2SNzWym6wOOoj1mOoTslaOdCFAm+SPqq24E7f0sCfwTrt9LSkfhCcAF1JtPKx
ybVkEXjMTcK1Sg43t7hj22/7HsnT02tsyJFACSr5xJp9URaJO8NTfHoeAB5dnGw+
5Fkm8Q0G2/+sO+xpBTSetHvLcW/4GQmZjgFy1HLZDWCGzLHTp3/ZBxeaTny8qpEc
VwDugTYXEXVvOpDgD6jU7WgBAm4WHSsyt9oNwO9vplsnY2APpJWih8JW4Zebj1wl
tXYD5y/AeOn41Q4D5xuvXLv5obMktI0LqAa3kvvI86OP
-----END CERTIFICATE-----
Generated at Fri May 2 07:12:03 2025 by rpki-client