Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/oYKGogKE2bbFKgy5O3Q4EcLKx70.roa
File: oYKGogKE2bbFKgy5O3Q4EcLKx70.roa (raw, json)
Hash identifier: qr4VO384gyCiVI5YdJ7DnfLAQ/Q4Bjg/VPtn4CaWiDY=
Subject key identifier: A1:82:86:A2:02:84:D9:B6:C5:2A:0C:B9:3B:74:38:11:C2:CA:C7:BD
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0185D862E22BB74D6B5032F0682E17FC3F10
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/oYKGogKE2bbFKgy5O3Q4EcLKx70.roa
Signing time: Sun 22 Jan 2023 07:30:37 +0000
ROA not before: Sun 22 Jan 2023 07:30:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 37.49.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d8:62:e2:2b:b7:4d:6b:50:32:f0:68:2e:17:fc:3f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 22 07:30:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a18286a20284d9b6c52a0cb93b743811c2cac7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:12:bb:3e:a0:00:ca:09:5d:0a:53:fa:ad:
46:47:f4:e4:2b:bf:61:a6:77:5a:fc:f8:36:98:23:
46:e0:d6:39:29:7e:77:85:a1:3c:ed:53:76:0c:a7:
75:c0:c1:58:b4:d6:79:ac:b8:cd:93:e8:f3:16:30:
f4:09:4c:83:3f:a7:1e:4e:00:4a:66:be:96:90:fd:
4a:24:bf:7f:43:03:e3:94:15:d0:07:63:db:2b:64:
80:e8:b2:e6:72:68:de:95:7a:f2:66:a1:3f:55:74:
b9:26:5a:7e:ed:22:b8:4a:a3:f5:18:7f:2c:91:99:
87:59:48:dc:58:d5:d9:9a:52:50:32:be:d6:ee:19:
dc:20:e2:a0:1e:0b:70:87:da:38:40:46:4e:81:f1:
99:28:0d:e8:24:ab:0f:09:56:f9:6f:5b:46:49:4e:
5e:4b:8e:0a:7c:13:91:dd:ad:ca:5d:8e:71:9b:36:
bf:a4:8d:82:16:b5:5f:fc:22:6d:dc:00:6c:c2:ff:
5e:f3:cd:88:8e:c3:fe:6f:6d:e0:c9:38:ef:84:84:
59:1d:b8:a7:28:3f:94:96:66:cb:87:66:28:16:97:
ba:d9:67:6e:fb:2d:b9:80:96:6e:6c:b5:cb:78:93:
30:b1:28:d4:dc:d4:d6:dd:ec:de:18:53:1d:34:aa:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:82:86:A2:02:84:D9:B6:C5:2A:0C:B9:3B:74:38:11:C2:CA:C7:BD
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/oYKGogKE2bbFKgy5O3Q4EcLKx70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.146.0/24
Signature Algorithm: sha256WithRSAEncryption
96:43:df:16:b2:53:ef:08:1a:5f:af:92:41:a3:1c:72:b1:9d:
81:f6:0d:04:c0:63:c8:c4:a7:1b:bb:39:06:c0:ce:7d:91:25:
cf:fb:e6:26:58:48:b9:da:b4:51:a0:05:4d:e6:19:50:ad:43:
27:e7:c3:35:c0:c6:6c:a1:ce:8f:ce:34:24:7f:7c:28:f2:2d:
b4:60:e7:f0:16:59:6a:55:4c:90:39:d6:67:89:33:51:a0:f9:
f3:28:ac:51:48:d6:d6:4d:03:40:47:d9:96:13:65:6d:7a:1d:
14:6a:f6:81:40:32:49:8f:43:07:3d:db:42:55:f0:82:b7:ec:
25:59:f0:1f:ea:ae:7f:eb:97:f1:68:50:6e:cd:4c:f8:f2:57:
52:57:8b:65:4f:12:af:6f:5f:35:88:12:00:eb:46:b5:88:b6:
b9:ec:27:e3:54:f2:21:8a:e2:23:53:58:7d:e8:12:9f:7d:ff:
dc:cc:c8:de:51:3a:9a:0a:a5:df:4d:c4:f3:2e:08:61:b7:9d:
40:75:77:d1:17:49:43:44:52:df:6f:08:11:25:01:da:e1:af:
91:03:d8:06:1c:84:60:97:6f:63:df:ed:a1:5e:50:b5:8c:77:
fe:05:42:56:31:88:98:eb:39:69:fa:b6:93:26:a5:7a:8b:2d:
48:73:38:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:30 2025 by rpki-client