Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/OXQo16iesL-i7zunkcwiWbRfGbg.roa
File: OXQo16iesL-i7zunkcwiWbRfGbg.roa (raw, json)
Hash identifier: MB3ev5RulV69+R0KJdYnMy8SVQYAk7fOdIOh5kRGDAQ=
Subject key identifier: 39:74:28:D7:A8:9E:B0:BF:A2:EF:3B:A7:91:CC:22:59:B4:5F:19:B8
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0CB2B72F
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/OXQo16iesL-i7zunkcwiWbRfGbg.roa
Signing time: Thu 31 Mar 2022 07:37:27 +0000
ROA not before: Thu 31 Mar 2022 07:37:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 194.163.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213038895 (0xcb2b72f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Mar 31 07:37:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=397428d7a89eb0bfa2ef3ba791cc2259b45f19b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:70:8d:c8:1b:82:74:7a:eb:38:6f:8f:33:
05:10:9e:0b:b5:ff:60:64:8a:77:cb:83:99:be:0d:
18:85:1b:19:c3:62:ae:9e:fe:07:8f:90:d0:96:4a:
76:a7:e5:c4:b6:39:ef:fe:43:69:b8:75:54:bc:de:
b0:f3:42:aa:5d:5a:b6:fc:fd:01:7c:86:f1:f2:b7:
dc:1d:57:24:6e:97:16:b0:f8:62:b1:82:85:a3:9c:
ae:bd:51:cd:ec:72:f0:a1:d8:27:f0:13:ab:33:e9:
83:90:dd:58:72:4c:be:91:5b:b7:09:40:f7:2d:31:
83:00:ca:49:42:6d:b5:61:83:4a:ce:bf:00:76:08:
94:2a:93:7f:a0:e6:ed:c6:7f:7f:77:34:70:2f:39:
84:af:a6:ea:71:d8:58:6f:b3:53:00:a7:15:2a:90:
e3:0f:72:5d:d8:c0:5e:0c:a4:b6:6a:8c:90:44:26:
af:dd:2b:23:bc:fb:d5:b4:2e:1a:67:11:d9:d4:ff:
60:e4:4d:45:6c:e0:ca:85:f4:bd:f2:c4:ba:d4:05:
90:54:0c:02:28:b2:cd:bb:09:82:81:65:55:e5:5e:
1a:8b:97:6f:53:7c:48:c5:95:c1:e9:42:70:1e:0f:
0e:2f:c1:de:31:22:a5:28:ac:6c:a7:a1:9d:72:78:
7a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:74:28:D7:A8:9E:B0:BF:A2:EF:3B:A7:91:CC:22:59:B4:5F:19:B8
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/OXQo16iesL-i7zunkcwiWbRfGbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.88.0/23
Signature Algorithm: sha256WithRSAEncryption
73:13:18:79:bc:68:92:6a:10:54:61:77:26:42:e5:79:01:2e:
5c:5c:aa:f7:26:01:94:e1:1e:a4:8b:b7:eb:d1:87:65:35:00:
29:f4:25:64:0e:bf:30:87:22:bc:cc:c4:07:2a:49:3a:81:4d:
fa:c0:3d:e1:61:95:6d:fc:f4:b3:f2:b0:f9:00:63:2a:aa:e1:
8b:ad:d2:b4:8c:3b:b4:90:ab:9f:63:d3:9b:cf:ce:01:a4:fe:
40:86:4c:c0:16:d4:2c:cd:25:28:90:b0:e7:97:e8:39:01:a3:
bd:f1:62:d2:13:a5:7e:0b:87:39:e7:d9:0c:84:de:a3:de:d0:
14:d1:a0:83:eb:db:50:a6:f5:54:39:60:ec:1c:09:ff:3d:a0:
6b:db:b4:70:1e:79:d2:23:34:8e:b2:eb:8f:9f:f4:2a:96:8a:
3c:ac:cc:80:0f:2a:81:92:2b:41:47:65:be:96:9f:9e:88:99:
e3:4b:cd:cb:b5:86:09:54:ea:1c:d3:d9:13:2b:b5:78:04:d9:
90:dd:9c:f2:26:80:92:c7:46:18:37:fa:8e:41:28:fe:14:2c:
ff:17:34:f2:ac:0e:64:54:f4:c3:ac:63:61:10:ce:ee:7d:38:
7f:1f:84:47:d0:c2:60:4b:b8:00:c3:d4:b9:52:97:bd:33:3c:
56:18:86:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:27 2025 by rpki-client