Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OLkhwWD6pt_VaNdhq4ovYbHrQVA.roa
File: OLkhwWD6pt_VaNdhq4ovYbHrQVA.roa (raw, json)
Hash identifier: wCqKOHPR27iBCYdSWTdGpg/RkC0ceinx4o4EoYLiZJE=
Subject key identifier: 38:B9:21:C1:60:FA:A6:DF:D5:68:D7:61:AB:8A:2F:61:B1:EB:41:50
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50DE14EE
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OLkhwWD6pt_VaNdhq4ovYbHrQVA.roa
Signing time: Sat 01 Jan 2022 16:01:53 +0000
ROA not before: Sat 01 Jan 2022 16:01:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60633
IP address blocks: 193.246.32.0/21 maxlen: 21
193.246.40.0/21 maxlen: 21
193.246.208.0/20 maxlen: 20
2a02:a90:c405::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356731630 (0x50de14ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38b921c160faa6dfd568d761ab8a2f61b1eb4150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:a5:c5:60:8b:14:b9:0d:42:a6:d0:f9:e2:
ad:68:be:95:98:c1:73:1b:fd:91:d2:f9:43:80:f8:
3b:37:76:d0:58:a0:9b:a2:d2:59:a3:ee:d4:36:62:
c1:a8:b9:74:96:bf:4a:e6:20:e3:bd:9a:ef:6d:18:
48:e6:dd:68:77:83:c0:0d:1a:4d:03:94:a6:15:57:
9d:4f:27:f9:a0:a1:91:8c:cd:34:41:91:b8:23:e8:
8b:09:01:aa:24:d0:63:13:22:90:64:df:77:d8:79:
9b:51:bd:96:98:26:8c:29:8b:35:75:20:de:f4:be:
49:ec:3d:b1:84:ad:fa:a8:59:c0:32:78:f6:5e:95:
fc:68:79:68:cd:9b:ab:16:0b:94:88:09:8f:bb:c8:
aa:82:e7:fa:7e:46:47:4e:f5:f3:ab:7e:fa:87:76:
2c:5c:1f:6c:71:9d:81:5e:e3:b5:b0:05:df:33:5c:
f1:89:2c:8d:fb:61:61:c0:c2:09:8a:5f:c1:1a:4f:
cf:6b:8d:3b:d6:9b:b8:ff:c3:62:2c:a2:43:70:30:
8e:43:fe:64:bb:d3:30:66:0a:71:f7:6b:94:56:3a:
4a:9f:11:b0:5f:ee:ab:05:42:a4:80:81:6c:a5:44:
c9:6e:a4:4d:5b:7e:94:bc:e3:d8:bc:eb:96:29:1b:
a3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B9:21:C1:60:FA:A6:DF:D5:68:D7:61:AB:8A:2F:61:B1:EB:41:50
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OLkhwWD6pt_VaNdhq4ovYbHrQVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.32.0/20
193.246.208.0/20
IPv6:
2a02:a90:c405::/48
Signature Algorithm: sha256WithRSAEncryption
42:72:77:62:c4:c0:c4:b7:42:fb:4e:7b:74:cb:cb:7e:e4:c7:
21:da:82:7e:6f:91:a0:db:9a:55:4d:0a:5f:5d:ae:95:8b:35:
18:cc:d7:ef:75:17:dc:94:9f:e8:ce:b0:c8:c3:63:c7:f1:38:
24:24:79:c7:6a:31:bb:5d:59:3e:2f:92:08:42:c7:e9:ee:4a:
a5:b7:05:8b:5d:b4:2d:45:01:b0:93:6e:cd:dc:1c:1d:79:28:
ca:09:26:2b:af:df:a3:a4:d9:9b:29:cb:d7:d5:60:6c:8e:79:
0b:74:b5:a2:45:df:25:ea:90:16:06:27:85:c0:72:4a:ba:75:
8b:e5:f0:f2:42:da:4e:cd:17:90:81:c6:c7:a4:dc:51:6f:53:
f9:bf:bb:09:f1:83:56:f2:a1:d1:49:8f:95:a3:ac:40:56:25:
4c:a3:39:c1:99:d6:90:61:8a:c7:35:e0:b7:e1:e1:dd:87:e3:
7a:bb:6e:51:c3:2a:8d:36:47:66:f1:c0:c4:64:2e:f6:09:ff:
1b:eb:e2:08:eb:82:aa:06:8c:7c:60:57:e3:07:f7:e8:ba:d5:
27:78:d0:59:d1:6c:b5:bb:bc:a7:00:6e:e5:f0:88:9d:47:4c:
09:14:c3:25:b0:68:70:7e:fe:05:0a:e7:54:4e:c9:a8:bc:48:
c1:81:3a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:31 2025 by rpki-client