Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/9e7a3a-d528-4d3f-bf3b-ff27a1a2c528/1/OqJCcwfsmVaW00dHaCfSuSknkt0.roa
File: OqJCcwfsmVaW00dHaCfSuSknkt0.roa (raw, json)
Hash identifier: NUcqQdcwRW/ZazAjwW0HZ3cyKod6y1nV2sCTJhwiCfY=
Subject key identifier: 3A:A2:42:73:07:EC:99:56:96:D3:47:47:68:27:D2:B9:29:27:92:DD
Certificate issuer: /CN=3c235b210470e1d77eb64e191c0f70f7268f4085
Certificate serial: 01856F26DD2A8AE389E8CCDA3001770A6181
Authority key identifier: 3C:23:5B:21:04:70:E1:D7:7E:B6:4E:19:1C:0F:70:F7:26:8F:40:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCNbIQRw4dd-tk4ZHA9w9yaPQIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/9e7a3a-d528-4d3f-bf3b-ff27a1a2c528/1/OqJCcwfsmVaW00dHaCfSuSknkt0.roa
Signing time: Sun 01 Jan 2023 21:04:55 +0000
ROA not before: Sun 01 Jan 2023 21:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47105
IP address blocks: 195.82.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:dd:2a:8a:e3:89:e8:cc:da:30:01:77:0a:61:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c235b210470e1d77eb64e191c0f70f7268f4085
Validity
Not Before: Jan 1 21:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3aa2427307ec995696d347476827d2b9292792dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:e6:ba:43:31:03:f9:69:de:fd:a4:62:43:
1f:fe:8b:55:b8:de:c8:5e:28:fc:c7:60:2b:88:3d:
eb:18:fb:1b:9e:dc:a8:ba:13:d2:00:c2:eb:7c:4c:
72:f8:2d:bb:fa:67:9a:f2:71:02:90:97:a6:e2:2e:
dd:a0:73:24:4f:fc:71:cd:6b:16:24:fd:a5:b5:84:
fb:e9:07:1a:e4:74:a9:09:f2:f2:a4:1b:f6:a6:8e:
84:e3:85:89:98:01:3e:41:85:90:b1:39:25:53:52:
8b:67:70:1b:78:82:0a:6c:46:fe:ae:8f:09:71:39:
c8:68:95:6d:d1:7b:c6:b4:22:4f:9d:b6:c1:7d:c2:
3d:09:5d:0c:8f:ba:44:50:0a:5c:5d:fd:4e:4d:78:
88:7e:d9:53:0c:49:3a:a5:05:f4:e8:35:2b:c7:90:
09:0c:f1:68:d2:90:7d:8d:fc:75:c2:12:bd:42:15:
c9:a5:63:61:51:cd:c9:15:25:ea:03:ee:29:27:7f:
43:cc:9f:f3:67:09:26:e5:ad:a4:f0:9d:74:0e:9c:
cf:e7:f9:5b:c2:08:d4:1d:58:0b:76:a2:96:e2:3f:
0b:d1:a3:0e:10:61:f5:59:66:56:b4:37:32:2b:4f:
78:1c:df:ce:d7:b1:ba:d3:4b:a2:45:8d:90:49:e1:
c8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A2:42:73:07:EC:99:56:96:D3:47:47:68:27:D2:B9:29:27:92:DD
X509v3 Authority Key Identifier:
keyid:3C:23:5B:21:04:70:E1:D7:7E:B6:4E:19:1C:0F:70:F7:26:8F:40:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCNbIQRw4dd-tk4ZHA9w9yaPQIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9e7a3a-d528-4d3f-bf3b-ff27a1a2c528/1/OqJCcwfsmVaW00dHaCfSuSknkt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9e7a3a-d528-4d3f-bf3b-ff27a1a2c528/1/PCNbIQRw4dd-tk4ZHA9w9yaPQIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.82.146.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:62:66:42:cb:bd:21:54:fa:00:b8:df:09:0c:c3:d4:71:be:
8c:34:e3:d3:0b:40:ce:c2:38:f6:90:02:51:f5:8c:b6:24:f5:
f5:43:c2:75:fe:b8:69:8c:41:d5:c2:38:8f:90:30:5d:a5:6a:
7a:6e:84:dd:10:84:37:62:f5:2f:70:0d:a9:b4:17:df:4c:c9:
7b:c5:da:c6:2e:d1:7f:c7:15:1a:6b:11:2f:9a:e2:c7:f4:cb:
af:e9:9d:9b:b0:59:95:92:fc:cd:a3:42:e4:eb:92:a4:f5:ff:
17:0d:df:61:76:b6:d5:8e:4e:f7:47:7b:df:3c:94:c4:21:a1:
60:b0:7a:50:76:f4:c8:a5:4a:81:72:10:fb:0b:ae:98:46:92:
e3:a7:db:d2:92:0c:d0:69:65:86:08:24:48:12:a1:aa:9b:c5:
5d:bf:22:54:1b:1f:74:ad:5e:a1:a1:69:62:e4:43:01:d8:84:
62:17:63:e7:55:24:92:c2:a7:88:60:7a:e8:45:9d:be:5f:19:
88:79:5e:64:d9:c6:11:22:36:27:cd:ee:7a:6c:d7:39:f7:ef:
42:06:90:25:f4:98:4e:c3:bc:9a:e6:f7:01:88:04:e6:e6:10:
7b:f7:ab:58:0a:e2:9c:0e:41:13:f5:95:4b:6a:e1:f4:9d:58:
14:6f:ca:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:17:04 2025 by rpki-client