Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/OzmL8MqAa2-X27J7Du7ob4hEFDo.roa
File: OzmL8MqAa2-X27J7Du7ob4hEFDo.roa (raw, json)
Hash identifier: 67bO8d1cBVGdosTH6AkLFRrzveWa066aLizEU+HXDw8=
Subject key identifier: 3B:39:8B:F0:CA:80:6B:6F:97:DB:B2:7B:0E:EE:E8:6F:88:44:14:3A
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0194258F11BB277C6374B46321491593199D
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/OzmL8MqAa2-X27J7Du7ob4hEFDo.roa
Signing time: Thu 02 Jan 2025 05:48:40 +0000
ROA not before: Thu 02 Jan 2025 05:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142146
IP address blocks: 185.148.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:11:bb:27:7c:63:74:b4:63:21:49:15:93:19:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jan 2 05:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b398bf0ca806b6f97dbb27b0eeee86f8844143a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:46:59:af:be:bc:f7:d7:4a:ea:7c:9c:1c:
ac:17:ab:b1:ec:43:5c:87:47:75:db:7f:07:77:cb:
6f:00:a9:96:3d:a0:da:65:2a:dd:9f:4b:cd:8a:c8:
59:a7:b0:2c:e1:59:eb:1b:f6:06:df:45:ce:0d:13:
dc:a2:f0:fe:8c:dd:62:9b:45:2f:f1:bb:67:c3:27:
d8:8d:bb:28:94:a8:90:a1:f5:6a:b5:0e:c2:b6:4d:
41:d3:7c:65:7c:46:ab:3f:b9:69:16:fc:c6:34:51:
f3:3c:82:27:4f:9c:95:28:ff:e6:38:5e:54:74:23:
9c:fe:fa:69:ea:76:b8:8c:1a:cb:59:aa:1c:e3:5c:
7b:79:cd:b7:20:0c:00:44:d7:9e:8e:67:0e:93:97:
bd:dc:e8:08:ca:36:5d:45:98:5a:3a:c3:b8:99:63:
47:a2:c1:20:77:b4:55:30:2c:b0:31:1a:35:03:15:
51:f6:65:83:78:91:eb:df:fd:23:7e:0b:cc:6d:66:
4d:ff:98:62:c2:47:df:44:a7:6a:ee:55:dd:f6:8f:
3c:a7:d1:a2:5f:d9:c8:b5:19:9b:4a:14:2d:df:53:
cd:7e:40:ad:3e:a8:55:1c:36:c5:c0:56:6b:59:be:
3c:0c:0e:29:9e:e9:84:15:fb:b2:82:82:e9:ea:8d:
ce:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:39:8B:F0:CA:80:6B:6F:97:DB:B2:7B:0E:EE:E8:6F:88:44:14:3A
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/OzmL8MqAa2-X27J7Du7ob4hEFDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.70.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:97:47:96:16:d7:e8:bc:da:dc:a1:a8:6b:7b:ec:5f:59:6e:
68:b9:45:5d:0b:d8:be:80:77:80:27:de:e6:8c:dd:09:0d:63:
2a:f3:61:c4:3e:39:4a:3d:7b:84:58:17:fc:be:98:9e:71:85:
ce:34:b1:f0:1c:71:3e:70:f3:1a:85:09:d9:85:11:bf:f5:90:
2f:c1:58:6f:80:ae:75:fe:69:87:a4:ef:22:89:13:84:77:72:
17:77:56:19:10:04:60:f3:b8:fa:c8:a4:1c:5b:d9:53:15:de:
58:b8:af:42:f0:98:95:04:71:29:e0:f0:0f:7f:1a:99:71:1d:
1b:88:e9:b8:eb:0f:86:24:9b:79:90:da:30:2a:4b:5e:d1:32:
b3:bc:14:8e:03:8d:ac:89:e5:b5:ee:51:ef:21:45:8a:f9:93:
be:62:07:47:23:37:fd:6b:47:80:4e:20:fd:ff:d5:b5:04:b4:
2a:e1:79:85:56:38:10:52:18:af:8f:8a:cf:6c:ba:f6:21:b8:
f0:9c:78:91:82:4c:7c:d5:81:0a:6a:d0:2a:af:a8:97:c0:27:
ed:d5:ce:d9:32:2e:5a:2e:58:f2:dd:50:08:0e:1e:90:41:cc:
9c:ee:82:76:ef:3d:b7:e2:c3:22:72:63:c4:3f:60:5d:68:fd:
79:d9:60:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:49:55 2025 by rpki-client