Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/owhm2Mjm6bQksMk3_xvaE05-8SI.roa
File: owhm2Mjm6bQksMk3_xvaE05-8SI.roa (raw, json)
Hash identifier: 6KK3J5YWpkCvJKPsMQECYgXyhpzvXLq7FkiwEk8pifg=
Subject key identifier: A3:08:66:D8:C8:E6:E9:B4:24:B0:C9:37:FF:1B:DA:13:4E:7E:F1:22
Certificate issuer: /CN=7485bd93bbaae9d7c973ab386872f1148bb258d1
Certificate serial: 018CC26D69FD0C3D7A8B866AD38E45C4D645
Authority key identifier: 74:85:BD:93:BB:AA:E9:D7:C9:73:AB:38:68:72:F1:14:8B:B2:58:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIW9k7uq6dfJc6s4aHLxFIuyWNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/owhm2Mjm6bQksMk3_xvaE05-8SI.roa
Signing time: Mon 01 Jan 2024 00:29:59 +0000
ROA not before: Mon 01 Jan 2024 00:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208632
IP address blocks: 45.92.44.0/22 maxlen: 24
2a0e:1d40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:69:fd:0c:3d:7a:8b:86:6a:d3:8e:45:c4:d6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7485bd93bbaae9d7c973ab386872f1148bb258d1
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a30866d8c8e6e9b424b0c937ff1bda134e7ef122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:35:bf:ef:ab:66:75:6f:87:84:44:62:42:4f:
fe:a4:41:8e:be:60:45:ba:83:e1:f7:bf:0b:77:53:
c5:3b:f8:a2:4e:c8:54:34:55:e9:0e:e3:29:b1:b1:
b6:30:03:47:9f:68:60:d5:8e:08:31:94:f8:af:a0:
a0:30:db:1b:83:f0:3e:48:0c:1a:0e:b7:d4:4e:9a:
be:ff:8b:f6:d1:f0:3a:b0:d0:cf:fa:de:d5:84:c9:
ca:e2:e5:c0:ce:24:4e:9e:67:7a:27:6e:f5:ed:c3:
d1:33:0f:38:f1:dd:da:e9:b1:da:19:50:01:da:1f:
6c:4e:ca:14:6b:4d:f2:a6:f6:f5:01:8a:8a:12:b9:
af:76:67:e2:30:75:3c:0f:f8:f3:44:1f:bd:19:9b:
88:6d:90:bd:45:2a:97:31:a9:f9:6d:b3:f9:07:ea:
f6:c2:b3:ec:fb:3f:b9:44:21:b3:39:08:4d:65:b1:
8f:66:09:f9:42:2e:6f:cc:53:2e:61:c6:07:db:7a:
38:76:c4:2c:67:ae:10:42:26:d0:4e:b4:ed:e8:41:
9a:50:75:ab:53:18:48:e3:68:cc:83:ce:5e:17:9c:
98:cb:d0:b2:72:c7:da:22:95:80:37:ce:1b:f6:8d:
15:a5:d7:39:0e:c8:4f:3d:9c:be:31:e7:68:4a:20:
23:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:08:66:D8:C8:E6:E9:B4:24:B0:C9:37:FF:1B:DA:13:4E:7E:F1:22
X509v3 Authority Key Identifier:
keyid:74:85:BD:93:BB:AA:E9:D7:C9:73:AB:38:68:72:F1:14:8B:B2:58:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIW9k7uq6dfJc6s4aHLxFIuyWNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/owhm2Mjm6bQksMk3_xvaE05-8SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/dIW9k7uq6dfJc6s4aHLxFIuyWNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.44.0/22
IPv6:
2a0e:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
0d:88:5e:c2:2e:7b:dd:a3:c4:db:6f:2b:86:62:e6:0b:40:2b:
3b:46:07:6f:e7:88:27:7b:4a:95:5d:41:b3:2a:48:74:d5:f1:
27:78:8d:6f:3b:fc:a4:a9:c2:76:bd:1a:72:9e:a9:05:fa:49:
c0:2e:42:4c:72:a3:e7:fb:91:ee:3c:bf:6f:1a:82:88:5f:a1:
38:de:21:3a:83:69:8f:cd:58:b2:96:66:d2:a5:78:f4:35:47:
1f:3b:95:14:ab:3c:94:76:b2:dd:03:62:ea:02:de:35:af:b6:
70:4f:f4:f3:97:45:59:e6:22:72:d0:17:d1:e4:84:92:73:30:
48:0c:f1:c1:e3:e8:86:6a:cf:be:dd:72:a2:e7:05:ff:1a:dd:
32:6d:d4:3b:69:2d:fb:6d:d4:87:87:50:f5:23:11:4c:27:c6:
8c:a8:20:01:ed:ff:e7:09:67:82:66:aa:1f:82:64:dc:1b:f1:
5c:e9:64:8d:b4:74:eb:43:dc:fa:77:d3:f7:46:51:00:17:27:
54:f3:d1:bf:fe:93:9e:1b:f8:06:14:00:18:b1:5a:88:ff:15:
48:2e:20:2f:6e:0a:e2:2c:a9:c2:5b:d4:65:d0:b3:40:28:e4:
b8:9e:a2:4e:77:d2:6e:43:e6:fb:b4:4a:20:06:c6:7b:d2:f6:
c4:0b:e1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:18:53 2025 by rpki-client