Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/O8umgM3CjsK7htyWMeoJnQNIzIQ.roa
File: O8umgM3CjsK7htyWMeoJnQNIzIQ.roa (raw, json)
Hash identifier: KpSplL/xBzZ7eX71efHt+ONSZHWNreOiLMnNg2cUEWs=
Subject key identifier: 3B:CB:A6:80:CD:C2:8E:C2:BB:86:DC:96:31:EA:09:9D:03:48:CC:84
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01864B9B3F9D7DC100BDFBAF889E95240B5A
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/O8umgM3CjsK7htyWMeoJnQNIzIQ.roa
Signing time: Mon 13 Feb 2023 16:28:30 +0000
ROA not before: Mon 13 Feb 2023 16:28:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 212.116.244.0/24 maxlen: 24
212.116.246.0/24 maxlen: 24
91.147.121.0/24 maxlen: 24
91.147.126.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4b:9b:3f:9d:7d:c1:00:bd:fb:af:88:9e:95:24:0b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Feb 13 16:28:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bcba680cdc28ec2bb86dc9631ea099d0348cc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:20:84:7a:10:53:f0:d1:d6:26:85:64:14:
79:f6:cb:2b:17:7c:c4:9b:7e:b7:d2:ca:d7:47:63:
30:42:2c:09:12:21:56:a4:61:cf:0a:19:75:41:74:
cf:ab:00:e1:5b:da:6b:81:58:bd:1f:48:83:b0:98:
19:05:67:df:be:90:00:2b:33:c6:d2:35:d6:1f:00:
02:ad:a3:7b:7c:5a:08:56:e1:3e:3d:92:e2:71:b0:
aa:e4:fd:d2:07:c3:db:bf:7e:fe:44:1b:06:30:66:
aa:33:05:fb:36:d5:9b:bd:ef:2c:fa:2c:76:e2:ae:
6c:c1:c1:86:48:96:c8:92:74:92:c3:fe:da:62:e5:
8e:d8:8f:93:0b:f0:62:eb:49:ae:b4:b4:13:24:ec:
dc:a1:59:75:4d:9e:1a:18:f9:2c:3a:1d:db:23:1b:
f7:d8:41:b6:6d:b5:35:48:6c:c1:78:c4:ef:5b:da:
13:ed:f7:bd:d5:73:b0:18:30:2c:2e:86:f0:a4:90:
2a:ac:b0:95:60:a9:c8:4e:87:b0:ed:e5:9c:90:37:
81:8e:e9:49:bc:67:e2:99:7d:2e:38:4d:41:83:c6:
dd:c5:e8:17:21:fc:0a:32:12:94:3d:4a:bf:2e:44:
ac:a9:f4:58:80:38:55:fb:b9:fa:de:81:dd:c7:d9:
23:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CB:A6:80:CD:C2:8E:C2:BB:86:DC:96:31:EA:09:9D:03:48:CC:84
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/O8umgM3CjsK7htyWMeoJnQNIzIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.121.0/24
91.147.126.0/23
212.116.244.0/24
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:6c:4e:5f:d6:2b:f2:d9:fb:97:9e:34:e9:b1:ef:9a:2f:f2:
f9:ba:8d:7e:8f:04:63:68:be:99:15:e1:1f:70:3f:fd:a9:64:
93:0c:69:96:f9:2e:7e:16:f1:74:be:31:76:6b:40:2a:d2:96:
67:1f:bd:9b:c8:f1:7b:b6:a3:fa:5a:2b:64:0c:31:dc:bf:07:
8a:2b:e7:28:09:cf:df:c8:57:b5:fe:28:e3:77:e2:53:53:d8:
e5:ba:9d:d1:4c:ad:ae:66:ed:70:25:72:f2:19:66:f5:7a:93:
ee:f1:d7:7a:87:8d:a2:27:0a:5c:3c:e3:96:d8:c6:cc:fe:e6:
95:76:69:95:69:eb:62:6c:55:f4:98:79:a7:67:dd:4f:84:33:
88:4b:d9:b8:a7:92:9e:16:6a:27:90:2c:cb:ed:1c:2d:ab:bd:
35:bb:75:78:f4:0d:46:de:ae:bc:63:d8:30:3c:d4:3d:81:9a:
68:c5:11:e3:81:d7:45:56:e5:8b:43:88:0c:e3:65:2d:b2:7a:
ab:7f:a8:ca:5d:90:0f:5d:d9:2b:30:36:f6:38:8c:ce:a8:0a:
43:50:9f:22:ad:cc:17:86:b3:64:84:bf:d1:2a:d6:59:26:3e:
4e:32:64:a2:02:71:35:ba:5d:dd:80:b7:8c:ca:7b:e6:3d:ed:
ff:8e:ee:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:54 2025 by rpki-client