Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/oLyY8vvBAfeOhRsj9eexvuktQm4.roa
File: oLyY8vvBAfeOhRsj9eexvuktQm4.roa (raw, json)
Hash identifier: scoM8Sq6POvOb7psz/VnzYZYQjNB2n1Y53tdfQTGFcc=
Subject key identifier: A0:BC:98:F2:FB:C1:01:F7:8E:85:1B:23:F5:E7:B1:BE:E9:2D:42:6E
Certificate issuer: /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Certificate serial: 0194252186995DC0BD6A5B134C4EA4C943AF
Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/oLyY8vvBAfeOhRsj9eexvuktQm4.roa
Signing time: Thu 02 Jan 2025 03:49:01 +0000
ROA not before: Thu 02 Jan 2025 03:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210664
IP address blocks: 185.150.88.0/22 maxlen: 22
2a05:4b40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:86:99:5d:c0:bd:6a:5b:13:4c:4e:a4:c9:43:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Validity
Not Before: Jan 2 03:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0bc98f2fbc101f78e851b23f5e7b1bee92d426e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:fa:ef:b5:22:cc:d3:35:8f:b3:ec:34:03:
73:9e:5d:d8:74:ec:bb:ac:bb:11:38:71:3f:2b:ca:
ba:ec:93:01:63:96:8d:c7:b3:15:69:c5:36:67:dc:
7f:98:e2:83:34:df:87:30:64:8d:21:a7:d7:52:81:
e4:a3:84:56:0a:7d:00:79:87:bb:ea:72:2f:5f:72:
0b:42:74:63:fd:bf:ed:83:20:e9:59:68:53:af:73:
b3:cd:25:63:2d:b1:43:9e:ee:57:fc:50:06:32:43:
e5:ec:ac:29:3f:43:ab:3d:bc:de:29:ad:0b:c0:8b:
51:29:f5:52:60:81:5d:d8:74:f1:52:5e:74:e9:da:
b0:cc:cf:16:39:29:84:e1:33:11:f7:ec:fb:8a:6e:
04:00:8f:26:bd:6a:32:57:99:af:1c:18:68:5c:b1:
ec:c8:22:4c:02:39:e3:a5:10:ac:ab:6d:0e:d2:f0:
44:74:3f:e6:ad:58:d3:c0:09:31:05:24:81:14:5d:
06:65:39:c0:58:a2:ba:aa:e9:d7:07:57:71:82:bc:
67:d4:80:0f:d7:6b:f1:ea:54:b6:bf:71:f7:10:3b:
4f:cc:c9:60:fc:20:3d:7b:03:bc:7e:90:63:a4:29:
4d:fa:1a:1d:7e:45:97:00:40:cb:d5:3f:7d:40:b0:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BC:98:F2:FB:C1:01:F7:8E:85:1B:23:F5:E7:B1:BE:E9:2D:42:6E
X509v3 Authority Key Identifier:
keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/oLyY8vvBAfeOhRsj9eexvuktQm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.88.0/22
IPv6:
2a05:4b40::/32
Signature Algorithm: sha256WithRSAEncryption
08:8b:8a:92:d7:7f:2a:54:2b:68:bf:68:a2:82:04:de:5b:2e:
84:9d:28:75:99:5e:eb:b3:36:82:98:9f:d8:7a:7e:bd:8b:db:
92:f1:49:28:b2:17:c2:71:1a:f1:43:a2:58:1a:09:64:f0:68:
b0:41:99:c3:5d:1e:0d:51:70:6b:d6:56:b6:2f:32:98:7c:7f:
0a:9f:d8:29:9f:2b:8a:6f:cc:79:71:16:57:d6:0c:45:7c:92:
69:d8:e2:27:47:75:dd:66:bd:b8:9c:10:81:0c:84:2d:a2:51:
93:c7:f5:3d:bc:94:19:8d:0f:2d:ac:e3:08:12:25:f2:d8:ac:
69:fc:47:fd:ab:20:0e:92:39:8c:cf:8d:00:9d:54:a5:76:cf:
02:4a:25:9e:46:5c:ab:06:9f:d0:d1:05:11:62:e7:88:84:ed:
c1:20:a7:ab:0e:cd:26:c4:6a:f2:65:7c:5b:28:4d:0f:3b:ec:
1d:0b:6e:dc:09:33:39:ea:09:a7:01:63:0f:63:6c:0d:27:85:
0a:cc:88:0e:86:ae:f3:62:37:b4:42:9b:97:74:bb:f6:f6:86:
f5:4e:51:66:69:15:9e:51:9b:59:03:f4:8e:56:f7:f0:59:57:
60:f5:2e:e8:fd:bd:9a:87:88:88:e2:5c:30:0a:5c:18:16:31:
c4:9b:3b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:28 2025 by rpki-client