Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/ONgbpLt2LVaxGbux5DvO-WXPNhM.roa
File: ONgbpLt2LVaxGbux5DvO-WXPNhM.roa (raw, json)
Hash identifier: KeGzKK/r+fIeGFjWpw7i7H/VOSIzPLaZUp9fY4TvxdQ=
Subject key identifier: 38:D8:1B:A4:BB:76:2D:56:B1:19:BB:B1:E4:3B:CE:F9:65:CF:36:13
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 0193D54D789EB481323007DEF8667EEDC6CE
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/ONgbpLt2LVaxGbux5DvO-WXPNhM.roa
Signing time: Tue 17 Dec 2024 15:47:24 +0000
ROA not before: Tue 17 Dec 2024 15:47:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212655
IP address blocks: 45.92.44.0/22 maxlen: 24
83.217.160.0/20 maxlen: 20
185.8.92.0/24 maxlen: 24
185.8.94.0/23 maxlen: 23
185.26.240.0/22 maxlen: 22
185.154.144.0/22 maxlen: 22
193.28.90.0/24 maxlen: 24
2a0e:1d40::/29 maxlen: 29
2a10:6940::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d5:4d:78:9e:b4:81:32:30:07:de:f8:66:7e:ed:c6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Dec 17 15:47:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38d81ba4bb762d56b119bbb1e43bcef965cf3613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:53:40:33:89:16:c2:95:1f:43:85:b1:5c:
89:53:99:c0:48:1f:e2:a0:4c:fe:64:f8:91:a7:38:
bd:4b:67:eb:8f:c9:19:64:fd:f6:a3:ec:1b:8a:35:
25:fe:3d:62:6b:61:57:e6:18:fe:2f:a1:2a:c0:96:
f9:5c:c6:08:92:f9:d4:71:3f:6e:45:16:07:a5:5a:
63:b2:e6:33:42:10:e4:34:26:17:d5:3b:67:8c:c2:
a3:d4:c8:96:43:a8:4a:6e:5c:da:43:ee:62:08:77:
de:27:40:0e:46:e4:7b:c3:7f:4a:f7:e9:f7:f4:a1:
07:42:b0:c3:63:fc:67:09:81:23:6f:1f:63:22:a3:
5d:c8:69:cb:ed:b5:62:6d:01:13:5c:37:2d:14:0d:
38:ab:05:98:17:04:9e:a8:56:d0:22:b3:88:4a:35:
bc:fe:49:d0:f5:55:15:3b:cc:72:a5:fc:2a:5c:cd:
97:86:4e:19:f6:99:de:9a:86:37:8f:22:4f:8c:f4:
4e:72:c8:69:81:96:fb:61:a6:84:6d:93:72:0f:b6:
46:1c:12:97:39:90:50:a6:42:4f:e9:96:94:01:71:
7c:c0:40:1f:0a:2c:2c:bb:c8:e2:34:16:d7:a7:13:
7f:ab:10:1c:b0:c3:3a:f7:95:e5:87:63:3d:22:e5:
ff:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D8:1B:A4:BB:76:2D:56:B1:19:BB:B1:E4:3B:CE:F9:65:CF:36:13
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/ONgbpLt2LVaxGbux5DvO-WXPNhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.44.0/22
83.217.160.0/20
185.8.92.0/24
185.8.94.0/23
185.26.240.0/22
185.154.144.0/22
193.28.90.0/24
IPv6:
2a0e:1d40::/29
2a10:6940::/29
Signature Algorithm: sha256WithRSAEncryption
66:66:1c:a8:05:51:c6:fa:e9:67:43:a5:14:91:25:bc:c4:e2:
f0:23:7a:ae:b5:59:76:95:15:45:69:5e:0b:e5:08:02:6c:f7:
8f:ff:73:65:f8:d5:16:d9:96:f2:39:f1:8c:2f:bc:0f:df:37:
a1:db:21:2f:20:2c:88:7b:fa:d8:79:ff:3d:50:c2:b9:fc:9f:
55:2e:00:da:ec:18:19:63:0d:15:de:b4:73:a9:e9:40:d6:ef:
ee:a0:7b:1b:e5:be:6f:e6:72:ee:8a:a0:5f:b0:84:bc:31:2c:
56:7b:c4:0b:7f:b0:77:29:63:73:bd:31:04:51:3b:cb:ef:4c:
ac:4b:94:06:32:5e:36:77:9b:6a:2d:b8:9c:e2:54:fe:8c:b6:
2e:4d:11:61:48:60:20:7c:13:19:18:56:44:c3:0d:30:ed:3b:
23:2c:f4:33:eb:4f:8d:b4:bd:e5:dc:a6:9b:07:08:83:68:9e:
49:f3:73:00:63:c8:58:84:04:57:c0:88:d5:df:8b:1d:1c:ad:
d6:63:32:6d:c1:10:ea:0f:fb:02:31:25:07:84:07:c4:fe:c1:
1f:6e:b2:b6:11:e2:8d:63:1a:5c:5a:82:80:78:af:c6:d3:73:
0e:97:0d:cc:60:ca:0b:57:08:9d:ab:c9:77:00:b4:17:fc:93:
a5:0f:c1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:27:09 2025 by rpki-client