Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/OsEP5zrk8wCDIDV1sx3jCXecCF4.roa
File: OsEP5zrk8wCDIDV1sx3jCXecCF4.roa (raw, json)
Hash identifier: +psaVX9NHe1+AmJSehIWVSsskGqMgo97ZOmLdrKAGgs=
Subject key identifier: 3A:C1:0F:E7:3A:E4:F3:00:83:20:35:75:B3:1D:E3:09:77:9C:08:5E
Certificate issuer: /CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Certificate serial: 01942143BFE7F46E73A30583B19FFEC256C3
Authority key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/OsEP5zrk8wCDIDV1sx3jCXecCF4.roa
Signing time: Wed 01 Jan 2025 09:47:55 +0000
ROA not before: Wed 01 Jan 2025 09:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.34.188.0/24 maxlen: 24
185.34.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:bf:e7:f4:6e:73:a3:05:83:b1:9f:fe:c2:56:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Validity
Not Before: Jan 1 09:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ac10fe73ae4f30083203575b31de309779c085e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cc:ef:53:a0:dc:9b:35:14:54:eb:0c:79:8c:
78:c4:84:ff:b4:79:8b:0e:fc:f8:60:71:41:a2:e2:
11:de:f4:46:cb:1e:84:86:d3:a2:91:0f:ca:90:5f:
02:05:ab:bc:50:84:fe:c0:f9:68:ab:79:3c:89:aa:
35:44:48:4d:40:08:a6:df:e9:49:39:2b:99:28:6b:
7c:b6:fe:83:15:30:09:34:17:8f:38:09:9f:d9:9f:
24:f9:b2:32:15:ec:dd:57:db:aa:f6:a5:4a:5f:9d:
9b:2a:4b:8f:c7:f3:06:ea:e0:20:9a:01:71:ae:d7:
66:50:1f:97:51:60:ff:1b:0f:04:e4:dd:75:28:11:
ac:2f:71:a8:65:e0:9f:8d:33:2a:98:be:ca:38:16:
59:71:d5:0f:7b:6a:3c:48:72:41:11:9d:0d:10:58:
5a:e3:a9:62:03:d1:b8:d7:bf:8f:2e:d0:bb:15:e1:
5a:10:28:15:61:d8:9c:d8:6a:53:7c:5a:65:7a:a4:
28:77:12:cf:2f:b4:b1:82:cc:e1:cb:65:12:c2:70:
ab:eb:b8:81:a2:08:ab:65:81:dd:00:dd:4e:12:8c:
9f:17:8c:9a:42:3a:34:a2:82:0a:ad:78:a3:18:89:
7f:6f:58:af:b0:e3:6a:e5:be:3b:54:08:33:45:cb:
4c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C1:0F:E7:3A:E4:F3:00:83:20:35:75:B3:1D:E3:09:77:9C:08:5E
X509v3 Authority Key Identifier:
keyid:8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/OsEP5zrk8wCDIDV1sx3jCXecCF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.188.0/24
185.34.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:f5:ca:68:b7:8c:38:74:a5:98:9a:cd:5c:4d:88:1b:fd:d1:
11:d9:cd:99:4b:f8:36:00:8c:33:c0:eb:23:ad:58:81:54:b5:
be:10:47:2e:e7:0d:3e:db:05:ea:40:19:23:8d:c0:ab:c3:34:
cc:d6:64:66:35:09:42:60:e8:b2:5b:71:8e:a8:a7:15:4f:d6:
a5:d1:cd:45:6c:45:62:ef:12:8c:cd:42:65:04:0c:5c:3d:02:
a8:2a:63:bd:1c:49:31:1a:a6:78:0b:60:cc:97:12:05:fd:94:
b2:2f:d4:2c:3e:99:1d:80:d7:a7:73:d9:15:b1:e7:e2:3b:34:
ac:ee:54:a7:4f:ae:85:4f:83:54:5c:e8:2f:95:40:3c:53:68:
ac:e2:2b:b7:5d:12:0e:db:3e:00:fc:97:5f:db:94:af:11:28:
74:05:73:25:71:52:ef:c0:8b:a7:98:44:7f:e2:a9:1e:eb:c2:
1f:a0:2c:fa:f3:45:cd:e9:69:52:13:72:64:2d:c8:b0:66:79:
cf:49:bb:17:6b:94:b2:e0:70:7c:96:43:75:5d:f2:c4:16:1c:
76:8e:f1:f3:1f:65:03:af:eb:41:4e:6b:73:88:bb:40:9b:78:
40:7a:66:e8:08:8f:1d:01:62:d8:be:55:df:5b:b6:92:04:bc:
55:2b:59:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:32 2025 by rpki-client