Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/oto_Xf5f6eRQsIf-wV-5BTNFLwk.roa
File: oto_Xf5f6eRQsIf-wV-5BTNFLwk.roa (raw, json)
Hash identifier: KKoknNtncK8d3H82/LWHJj0OhXK+oD2axVzpw7ZVHYg=
Subject key identifier: A2:DA:3F:5D:FE:5F:E9:E4:50:B0:87:FE:C1:5F:B9:05:33:45:2F:09
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 018CC2DB2F9A983B8C7189E519B1B04F5F42
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/oto_Xf5f6eRQsIf-wV-5BTNFLwk.roa
Signing time: Mon 01 Jan 2024 02:29:53 +0000
ROA not before: Mon 01 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198404
IP address blocks: 185.195.176.0/24 maxlen: 24
185.195.177.0/24 maxlen: 24
185.195.178.0/24 maxlen: 24
185.195.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2f:9a:98:3b:8c:71:89:e5:19:b1:b0:4f:5f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2da3f5dfe5fe9e450b087fec15fb90533452f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b3:c9:09:f9:2d:3d:1b:81:9c:bd:76:71:de:
c8:75:58:b5:86:46:c0:5d:58:a7:ab:8e:c4:3f:2f:
c0:6b:ee:8a:bd:62:00:fb:ef:b1:04:d2:1a:ff:eb:
b9:b4:2e:2f:38:88:79:41:86:59:0c:fa:f6:11:73:
c3:bd:fd:c2:3f:f5:c6:3a:cd:84:6a:67:d8:e0:ed:
f0:3f:c0:7a:1b:a8:e0:8f:64:fb:14:db:72:dd:c6:
0d:26:ec:90:5d:ae:fc:d7:f6:e6:2b:d8:b2:53:e5:
bb:0d:34:d2:4f:65:ef:85:dc:73:2b:a4:f8:f7:4e:
a7:82:74:8e:d0:c5:6d:9f:73:90:98:98:eb:f0:ef:
c6:0c:00:4e:97:55:38:78:ac:ac:42:5e:50:b3:37:
b9:7a:12:3c:3f:d5:7e:93:5e:8d:6e:fa:03:f6:e8:
f2:17:5a:3e:70:50:35:a6:6a:ed:17:50:83:2e:dc:
17:f2:97:a1:d5:03:7b:a0:3d:d4:3c:0d:3d:1a:bc:
7f:1a:00:e5:97:04:55:ed:2d:8b:35:db:17:32:a9:
52:d5:e1:47:7a:6f:48:37:d9:f0:2a:ed:22:48:c0:
0f:a4:79:db:d8:2b:f3:db:10:b2:b2:67:ee:66:0e:
fb:76:7b:e5:63:36:c9:00:9d:8c:20:90:56:d1:52:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DA:3F:5D:FE:5F:E9:E4:50:B0:87:FE:C1:5F:B9:05:33:45:2F:09
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/oto_Xf5f6eRQsIf-wV-5BTNFLwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.176.0/22
Signature Algorithm: sha256WithRSAEncryption
81:60:df:aa:00:3d:2d:5d:5e:10:0c:0f:8e:c2:e1:a7:40:fc:
b3:dd:40:9c:51:c4:23:f7:4b:b4:2e:c4:51:56:4d:43:02:d5:
8c:35:22:1b:0b:ed:4e:4f:d2:76:a5:85:7a:35:85:b8:f0:ca:
2a:a6:f9:48:50:63:3f:22:29:22:4a:98:32:22:67:e0:4f:20:
5a:1f:cf:33:a3:30:02:21:36:96:f0:b5:b1:18:3f:3e:d5:24:
14:91:43:3d:87:2f:e0:b0:15:1a:46:d1:ad:9d:e8:96:4f:6f:
b2:25:5e:2b:a6:57:e0:c0:c4:37:e6:22:b0:0e:da:6c:e7:1e:
39:0d:67:94:db:44:75:cd:8c:14:20:04:54:a5:d0:ee:bb:05:
84:00:70:70:3f:65:7b:14:32:48:e9:c0:05:c1:18:f7:93:31:
58:5c:f9:59:1e:31:30:72:ae:33:c5:50:d9:98:ff:f1:71:23:
f8:ff:e8:20:12:29:09:2e:44:ee:af:ce:f6:03:05:4d:e3:0a:
c9:0d:76:45:43:57:fe:e9:85:26:9e:3b:04:47:cb:b8:2f:86:
95:34:96:12:41:43:0c:aa:f7:32:32:6d:48:d3:7a:2f:6f:10:
a2:f2:69:bb:98:8d:90:ba:2c:72:42:c2:aa:0b:f9:d6:9e:de:
2f:c4:32:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:41:41 2025 by rpki-client