Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/53e554-76ec-4d57-8d15-897b94116a3f/1/oKP33QQVKVcCn6nI7RhTbz33lMI.roa
File: oKP33QQVKVcCn6nI7RhTbz33lMI.roa (raw, json)
Hash identifier: N+IA/JO2MoVflbeoEH7fAKI8TzFeE82eu50+EAtNydU=
Subject key identifier: A0:A3:F7:DD:04:15:29:57:02:9F:A9:C8:ED:18:53:6F:3D:F7:94:C2
Certificate issuer: /CN=711466992b4444b1a2f06d01381caf28986e7689
Certificate serial: 01255BF6
Authority key identifier: 71:14:66:99:2B:44:44:B1:A2:F0:6D:01:38:1C:AF:28:98:6E:76:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRRmmStERLGi8G0BOByvKJhudok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/53e554-76ec-4d57-8d15-897b94116a3f/1/oKP33QQVKVcCn6nI7RhTbz33lMI.roa
Signing time: Sat 01 Jan 2022 12:06:13 +0000
ROA not before: Sat 01 Jan 2022 12:06:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25591
IP address blocks: 92.118.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19225590 (0x1255bf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=711466992b4444b1a2f06d01381caf28986e7689
Validity
Not Before: Jan 1 12:06:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0a3f7dd04152957029fa9c8ed18536f3df794c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e8:a3:31:10:02:83:84:ae:af:8b:2b:01:d9:
39:f0:4f:a2:91:95:f3:22:59:ee:96:23:e0:c0:ba:
3c:2e:0e:2d:ec:b9:2c:66:a5:53:ff:b3:06:44:fd:
3c:42:76:29:8b:0f:0d:50:ac:1f:9b:b9:f5:aa:39:
0a:07:05:84:f3:8a:7a:4f:b3:91:be:bf:91:5e:e1:
11:11:18:e9:83:4f:bb:73:bb:15:51:d1:f4:5e:10:
43:8f:bf:8c:9b:80:7d:88:4d:bc:12:95:2d:81:90:
e8:cc:4c:a2:9a:bd:7d:2d:47:53:e3:a5:52:7b:3a:
3a:f3:20:37:a3:e6:b8:c0:24:14:7a:e1:61:96:df:
1a:9e:c2:f8:f0:89:ce:09:a5:a1:0a:e7:ac:7f:31:
e2:82:12:19:2a:4c:a8:57:13:a4:c7:60:b3:6e:cb:
18:dc:64:a6:02:2d:25:ed:9f:25:a2:07:ae:a3:ed:
3b:cf:3f:66:85:cc:ca:e0:d3:1b:fc:ed:f1:20:a7:
e2:18:9f:9a:f6:2c:22:73:b5:da:ea:d2:83:4f:ab:
5f:13:1c:82:25:43:80:9d:0d:30:c3:02:62:5d:c9:
0a:fb:ed:31:18:3a:9f:e1:e4:ca:43:08:6a:38:49:
63:58:69:77:4b:3d:e6:d8:a2:24:02:7d:24:3f:3d:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A3:F7:DD:04:15:29:57:02:9F:A9:C8:ED:18:53:6F:3D:F7:94:C2
X509v3 Authority Key Identifier:
keyid:71:14:66:99:2B:44:44:B1:A2:F0:6D:01:38:1C:AF:28:98:6E:76:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRRmmStERLGi8G0BOByvKJhudok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/53e554-76ec-4d57-8d15-897b94116a3f/1/oKP33QQVKVcCn6nI7RhTbz33lMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/53e554-76ec-4d57-8d15-897b94116a3f/1/cRRmmStERLGi8G0BOByvKJhudok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.200.0/22
Signature Algorithm: sha256WithRSAEncryption
03:d6:20:04:ff:94:af:c2:65:71:15:ea:12:35:cb:3f:74:12:
fe:bc:c9:e0:95:a8:b1:c3:9f:ba:44:50:95:f1:64:40:9f:b7:
58:b2:fc:ee:20:11:14:36:9e:5c:1f:e2:b0:7d:15:eb:09:87:
27:c2:7d:18:35:d7:87:80:e0:02:84:cf:a0:49:7e:7f:45:75:
6b:8a:23:21:0e:b7:11:f0:8f:f5:25:7d:1e:94:58:02:53:6d:
9e:1c:24:82:5d:9d:80:39:99:93:2c:fe:49:11:a8:34:3a:cd:
9a:ea:58:2b:bb:1f:db:99:d6:f7:37:0e:44:33:79:1a:25:0e:
22:b3:b7:9d:4b:47:30:cc:7b:32:0f:70:7e:1c:be:3e:0a:2a:
26:17:37:7b:75:01:7e:e7:35:35:42:48:e2:c8:cb:1f:ec:27:
2a:bc:1c:87:ac:06:93:1a:14:57:6f:fe:21:0b:c0:81:a2:80:
9d:79:01:39:94:e6:bf:44:40:c4:1c:81:c0:51:76:4e:25:87:
25:a0:74:b7:94:4f:23:1f:d6:20:51:e0:e9:72:60:6e:48:cc:
fa:dc:8a:da:79:15:97:40:9d:b8:88:28:5f:55:65:ca:93:38:
7f:55:a5:8e:67:d2:82:41:78:43:34:73:12:1a:26:c5:0d:9a:
07:bd:1e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:48 2025 by rpki-client