Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/OoqUaLAOI-aGNpj_aMUCnXOyS5I.roa
File: OoqUaLAOI-aGNpj_aMUCnXOyS5I.roa (raw, json)
Hash identifier: Mypf3NdD2FohQ3cNIoEVKqBHKVjM3tZhx6Z/Pado45Q=
Subject key identifier: 3A:8A:94:68:B0:0E:23:E6:86:36:98:FF:68:C5:02:9D:73:B2:4B:92
Certificate issuer: /CN=9588390cf321dc43ce3ac0bc8fb09554d5fc2e77
Certificate serial: 018570151F5652C0E7CD57BCA8807EA552D9
Authority key identifier: 95:88:39:0C:F3:21:DC:43:CE:3A:C0:BC:8F:B0:95:54:D5:FC:2E:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/OoqUaLAOI-aGNpj_aMUCnXOyS5I.roa
Signing time: Mon 02 Jan 2023 01:25:10 +0000
ROA not before: Mon 02 Jan 2023 01:25:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208719
IP address blocks: 185.127.240.0/22 maxlen: 24
2a03:9960::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:1f:56:52:c0:e7:cd:57:bc:a8:80:7e:a5:52:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588390cf321dc43ce3ac0bc8fb09554d5fc2e77
Validity
Not Before: Jan 2 01:25:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a8a9468b00e23e6863698ff68c5029d73b24b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:17:d3:6e:ab:80:00:20:9e:bf:1c:d5:74:2c:
8b:8e:5d:c3:a0:f2:79:4d:bc:11:23:3f:30:7e:3d:
d7:5d:64:9f:8d:4f:f8:41:96:3c:40:0a:19:62:b4:
e5:57:5e:bc:3e:5c:b4:b8:68:a9:bd:d5:cb:7d:dd:
36:74:31:0b:48:36:82:aa:cd:f3:ed:94:a3:96:c5:
88:3e:90:ef:5e:86:5f:45:23:d7:f0:4b:bf:0e:3d:
69:dc:c3:f8:58:65:5f:78:f7:df:65:e9:92:cc:74:
91:08:28:6b:f3:c0:3b:ee:3c:ec:a8:66:09:c0:02:
f6:4c:5d:39:97:f0:1c:1c:24:a5:c3:36:c1:8a:95:
d9:7d:92:c0:3e:e8:9c:9f:e1:c8:dc:50:e1:6a:8a:
b5:45:90:8d:0f:c3:68:85:f9:86:d0:9a:88:4d:05:
90:1d:1c:99:83:f8:a7:0d:41:72:f5:68:28:f6:0f:
3b:fc:f0:cf:29:c4:60:db:8c:92:c2:36:42:8d:8c:
5a:d6:cc:1c:b3:eb:aa:e0:54:d1:eb:9e:00:70:37:
dc:7d:fd:67:e7:26:27:67:a1:ae:f3:08:68:2c:01:
4a:c3:25:c5:97:08:69:7f:ec:b8:7c:7a:35:cd:f5:
e7:1c:ca:2c:1a:83:03:e7:15:d6:8a:66:8f:05:55:
71:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8A:94:68:B0:0E:23:E6:86:36:98:FF:68:C5:02:9D:73:B2:4B:92
X509v3 Authority Key Identifier:
keyid:95:88:39:0C:F3:21:DC:43:CE:3A:C0:BC:8F:B0:95:54:D5:FC:2E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/OoqUaLAOI-aGNpj_aMUCnXOyS5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.240.0/22
IPv6:
2a03:9960::/32
Signature Algorithm: sha256WithRSAEncryption
5d:0e:85:83:4a:d6:f2:c3:78:af:26:a7:92:a6:a7:20:d9:ad:
e0:78:58:ff:4c:fe:5e:8d:93:e8:b6:07:62:60:30:5b:c8:2d:
ef:fd:13:f4:88:46:e5:80:1c:db:46:27:f2:04:05:1a:f3:12:
a2:82:ee:10:e7:c3:5a:8d:bb:2c:47:7c:23:6e:4d:b4:2d:8d:
36:16:ee:90:99:a7:47:e4:e3:a9:c2:bc:c2:af:64:6a:eb:37:
06:55:a6:15:82:64:86:d9:77:a8:bf:5c:00:ad:7a:09:6a:74:
c9:a5:04:e2:21:53:08:c8:78:8b:28:de:bb:a7:9f:85:d1:f8:
39:62:d5:e2:8f:82:06:8e:fc:fb:71:2e:a2:c2:3b:f7:46:c7:
4c:4a:93:6e:aa:29:79:57:dd:d4:b0:fb:c3:f3:94:ef:f1:d4:
6a:4e:7d:fb:19:60:2e:95:d6:69:52:f8:65:51:c9:48:4b:c9:
ab:f8:3f:86:db:b7:f3:48:a1:f5:e0:9a:33:1b:2e:97:99:ac:
62:03:c6:dd:1f:42:e6:c2:76:5b:cd:a2:ed:26:2c:29:55:47:
16:a7:77:c7:1b:d4:21:6f:a1:4c:21:f7:99:36:a5:7e:2c:14:
4c:99:81:e9:13:ca:8c:da:fc:98:30:e2:4c:57:93:9a:fd:52:
22:87:95:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:53:46 2025 by rpki-client