Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/oUZI7NTN8qWCLDGXibh8uJdgYDk.roa
File: oUZI7NTN8qWCLDGXibh8uJdgYDk.roa (raw, json)
Hash identifier: 9Sg/soPhKv5usKNFhZspG8cqzaqLhUAEbAOzaGcTBKY=
Subject key identifier: A1:46:48:EC:D4:CD:F2:A5:82:2C:31:97:89:B8:7C:B8:97:60:60:39
Certificate issuer: /CN=3338a72ed4060ca1597e4dcbcd4de430bc4e1bbc
Certificate serial: 0185712773758699A5A709CF8293FDD3DDB9
Authority key identifier: 33:38:A7:2E:D4:06:0C:A1:59:7E:4D:CB:CD:4D:E4:30:BC:4E:1B:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzinLtQGDKFZfk3LzU3kMLxOG7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/oUZI7NTN8qWCLDGXibh8uJdgYDk.roa
Signing time: Mon 02 Jan 2023 06:24:48 +0000
ROA not before: Mon 02 Jan 2023 06:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 185.252.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:73:75:86:99:a5:a7:09:cf:82:93:fd:d3:dd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3338a72ed4060ca1597e4dcbcd4de430bc4e1bbc
Validity
Not Before: Jan 2 06:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a14648ecd4cdf2a5822c319789b87cb897606039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:5a:46:11:14:00:b4:2c:d8:17:9d:4c:60:
07:20:a7:37:2f:e1:dc:13:75:9a:0a:07:54:18:35:
64:1c:88:31:68:72:f6:89:e9:58:89:27:33:30:2a:
3f:a5:ea:e8:7c:6d:e2:a6:df:0a:8d:a2:98:47:01:
5f:37:e5:87:30:f3:db:c0:e0:e9:05:19:59:07:a1:
8d:2a:b5:1f:df:38:4c:22:90:43:02:00:e7:18:97:
ae:22:0d:6c:56:26:87:d6:f6:b4:27:dd:8b:3e:0c:
5f:6c:f0:f7:96:c7:ce:9d:c5:5a:b7:9b:c0:32:b4:
0c:47:b7:a0:2f:98:48:47:5e:7b:ea:f0:f1:c7:d0:
a1:3d:62:49:37:26:7b:0e:81:bb:c5:92:c7:81:6c:
86:53:02:c0:6b:8c:3c:94:a6:f5:38:3f:29:9b:74:
ac:bf:e2:2f:ba:5a:04:41:cc:c6:d3:b6:bc:97:18:
c3:a0:21:e5:c7:54:bd:d2:4c:23:50:d4:32:d9:11:
bf:cf:17:f1:72:25:1c:c5:94:b3:b6:a6:2f:db:15:
fb:3a:c5:ab:34:aa:ab:df:6b:2e:ad:fd:75:22:0a:
34:fb:73:73:14:86:28:d0:eb:57:a4:a2:80:34:83:
32:04:88:9d:a9:11:62:59:db:32:40:53:0b:7c:56:
c1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:46:48:EC:D4:CD:F2:A5:82:2C:31:97:89:B8:7C:B8:97:60:60:39
X509v3 Authority Key Identifier:
keyid:33:38:A7:2E:D4:06:0C:A1:59:7E:4D:CB:CD:4D:E4:30:BC:4E:1B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzinLtQGDKFZfk3LzU3kMLxOG7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/oUZI7NTN8qWCLDGXibh8uJdgYDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/MzinLtQGDKFZfk3LzU3kMLxOG7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.210.0/24
Signature Algorithm: sha256WithRSAEncryption
99:8d:63:ad:27:e0:ab:e4:ae:5f:d2:b6:dd:bf:7f:06:5a:55:
6b:8d:54:47:e1:9b:b2:92:72:91:a1:89:9c:18:14:bd:26:06:
5a:70:e2:c2:e8:66:49:98:ea:24:7b:f5:35:b9:04:96:cc:e9:
24:fc:53:c2:2b:55:2f:c9:99:80:a9:ca:e6:d2:09:36:12:c3:
f9:0a:c6:07:63:5f:64:92:75:3a:92:4f:65:ec:a1:c3:5a:87:
6c:70:e8:e9:6b:f6:0a:39:e5:22:77:bd:28:71:03:1c:ed:a6:
06:4c:f5:76:cf:8e:fa:7e:a8:e9:44:8b:ee:49:5b:37:81:4d:
9f:e1:5e:36:53:21:00:fb:9f:54:da:73:9f:64:e5:c3:7f:31:
c4:8a:f2:b3:6b:99:84:ab:db:de:5c:d3:16:c3:98:5f:dd:0f:
05:86:fc:d5:a8:d6:d6:46:3a:4d:d9:24:5e:8c:68:28:4f:3e:
3c:13:dd:07:b8:7f:db:2d:5f:4d:b1:07:dc:62:2e:8a:25:7d:
2b:2f:80:32:bd:21:43:ff:e9:1f:15:e1:78:df:91:6a:3c:90:
fa:58:90:33:82:b9:e8:81:74:5e:b8:0e:58:91:a8:34:9f:dc:
20:54:c1:e3:36:47:90:2a:a6:65:11:d7:63:84:d1:34:85:8f:
3a:5a:87:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:11 2025 by rpki-client