Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/OTKh-RJ8QaO1GeRaP9DPTwMbXgk.roa
File: OTKh-RJ8QaO1GeRaP9DPTwMbXgk.roa (raw, json)
Hash identifier: gIBndTNhYaRECaK05ET2wUByMo323pSgH+sSpcSiePI=
Subject key identifier: 39:32:A1:F9:12:7C:41:A3:B5:19:E4:5A:3F:D0:CF:4F:03:1B:5E:09
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01856D8AD74613F64BEC5CC0FCCBDC71AC59
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/OTKh-RJ8QaO1GeRaP9DPTwMbXgk.roa
Signing time: Sun 01 Jan 2023 13:34:53 +0000
ROA not before: Sun 01 Jan 2023 13:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 176.221.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:d7:46:13:f6:4b:ec:5c:c0:fc:cb:dc:71:ac:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 13:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3932a1f9127c41a3b519e45a3fd0cf4f031b5e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:42:3e:d8:a9:ac:a0:d6:70:c9:8a:1d:22:71:
63:91:ce:c1:1a:6a:a0:5b:6c:9a:35:4a:44:e3:8c:
cd:3d:8d:f8:23:39:48:93:db:69:72:77:00:61:23:
71:21:31:20:fe:41:19:45:bd:d7:09:24:94:94:a5:
9e:48:97:88:ef:0e:23:64:61:50:85:19:ad:1a:15:
94:32:eb:6f:1c:f6:6b:6f:88:5b:df:08:7a:eb:bd:
0b:ac:21:45:10:04:ae:30:16:93:c7:b2:b4:84:f0:
96:24:ac:f6:ad:a0:5a:3b:f6:12:be:5a:1e:a2:a2:
a0:63:65:ba:c6:02:0a:57:35:1b:88:16:97:06:e5:
02:2d:80:53:02:e8:ce:4b:28:52:6a:49:e1:da:da:
62:b8:c6:c3:d7:f9:78:e1:b4:18:c0:27:52:94:32:
ce:ef:7f:71:44:f8:f9:b6:0f:f0:7e:ff:f9:51:84:
04:f8:6b:a6:f5:7d:b9:39:a0:72:37:1e:8d:82:da:
b1:35:b8:38:ce:35:e8:21:64:db:da:c0:bf:81:d2:
4b:37:da:15:5c:b6:ea:bc:1b:1e:d2:d7:93:a2:54:
03:3e:c5:06:27:30:2b:54:75:bb:ca:51:5f:56:08:
5b:ee:59:a1:a2:53:62:1f:a1:28:13:06:a5:55:03:
09:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:32:A1:F9:12:7C:41:A3:B5:19:E4:5A:3F:D0:CF:4F:03:1B:5E:09
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/OTKh-RJ8QaO1GeRaP9DPTwMbXgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.24.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:21:0d:e2:10:f8:52:8e:f3:32:5f:83:2a:3d:c8:33:c5:62:
20:00:7f:e3:95:92:63:cd:39:1d:48:f1:ad:8b:29:cb:10:85:
3a:b0:37:7a:7a:e9:3a:79:77:b3:0f:23:8c:95:92:24:d2:e1:
66:f7:84:01:52:e6:f9:b0:8f:44:7f:b6:83:4f:f0:af:b5:10:
0b:ea:03:13:4b:b8:21:64:82:68:25:d9:9b:88:7e:c5:9e:a4:
42:bb:cf:b2:b9:5f:4b:c3:a3:13:55:61:41:78:88:b3:36:b3:
7e:b8:6b:be:ea:19:d3:35:15:69:5a:07:96:e3:6e:c3:b5:3f:
a1:da:df:9f:ee:5a:51:ae:56:75:4f:a9:38:8d:dd:cc:d6:db:
bb:f0:2f:f0:ee:2a:ea:59:3c:b9:2b:0e:5f:50:49:1d:5e:39:
41:6c:65:37:28:d4:d2:71:76:be:77:d8:02:2f:3d:ac:d9:4b:
57:4c:07:37:86:cb:fb:1a:a6:20:3f:de:dc:d9:20:48:3e:cc:
e3:e9:46:a1:dc:e8:f7:f7:39:eb:6a:f3:b6:94:0d:4e:8a:f3:
fd:a9:af:eb:ab:48:1a:fc:74:e4:e4:0b:ea:56:56:50:97:ee:
b5:8d:52:fe:43:7d:95:e8:7b:ca:a2:21:9a:11:cf:50:5b:f2:
64:90:3c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:50 2025 by rpki-client