Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/O9gAY7EQ-RPIJf9juwaZUd3RF6o.roa
File: O9gAY7EQ-RPIJf9juwaZUd3RF6o.roa (raw, json)
Hash identifier: o3h10lmRNDahXyMAie9f069Cj+vayUJ6MlqQwtFkEgA=
Subject key identifier: 3B:D8:00:63:B1:10:F9:13:C8:25:FF:63:BB:06:99:51:DD:D1:17:AA
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01840FFD4E2751C2FF29976AA35B100A1D9F
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/O9gAY7EQ-RPIJf9juwaZUd3RF6o.roa
Signing time: Tue 25 Oct 2022 16:32:49 +0000
ROA not before: Tue 25 Oct 2022 16:32:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 212.116.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:fd:4e:27:51:c2:ff:29:97:6a:a3:5b:10:0a:1d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Oct 25 16:32:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bd80063b110f913c825ff63bb069951ddd117aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:92:c5:f2:9f:39:b5:55:00:d9:67:be:cc:ee:
c0:5a:ad:74:54:25:7e:7a:3b:6e:67:66:dc:68:51:
2f:09:30:bf:2b:57:72:e5:88:8c:f5:b7:dc:82:71:
39:6f:82:01:3b:16:1b:20:8b:86:ae:bc:d2:23:76:
56:d7:19:b7:35:0a:5a:cf:99:1e:8f:d9:05:86:ec:
e1:26:9d:18:54:b8:47:66:34:1e:6d:9b:35:11:25:
a5:c8:5d:22:52:b4:6d:7f:1f:1d:11:d2:21:d2:e2:
6f:5b:11:60:85:98:4f:7e:ac:84:2c:28:28:50:f4:
2a:1a:53:ee:a2:43:46:ce:63:90:17:80:59:ef:71:
2d:2e:51:69:bd:8c:61:bd:57:0a:9b:5a:45:25:8d:
90:11:0f:08:04:13:04:64:20:36:3e:52:0e:94:d2:
e4:71:13:c8:d0:1a:be:18:8b:56:9e:35:9d:85:63:
3b:7f:69:b5:ea:a7:26:9c:79:e4:ba:c9:b0:6b:3d:
d9:01:36:06:d3:af:60:f6:72:78:e7:6a:01:6f:c4:
6b:75:c8:ed:59:8f:96:9b:ea:e1:82:0e:26:8b:ff:
c4:25:5a:73:09:72:e0:8d:7e:34:b1:bd:c4:e8:c7:
33:02:b4:99:cb:c8:5d:a6:4c:45:7f:e3:2b:34:26:
49:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D8:00:63:B1:10:F9:13:C8:25:FF:63:BB:06:99:51:DD:D1:17:AA
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/O9gAY7EQ-RPIJf9juwaZUd3RF6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.243.0/24
Signature Algorithm: sha256WithRSAEncryption
55:58:76:0a:9c:f1:7b:cf:bb:c6:bb:9d:a4:b4:c0:f0:57:94:
97:2c:72:e7:4a:a3:88:03:43:ba:3d:f8:7f:98:c3:10:7a:bf:
9d:18:46:88:37:73:91:4e:7d:57:11:17:99:71:88:12:35:5b:
10:b4:09:7b:88:58:d6:28:e5:60:63:88:9a:d8:0d:bb:e2:70:
d3:4b:fe:85:cb:fc:f6:07:d5:1f:ed:ea:11:0a:61:12:34:f4:
80:61:ca:6d:b4:7e:90:35:a5:e2:4d:a5:6c:86:77:18:0f:59:
d5:4e:bc:34:d8:89:5a:d2:e6:c6:cc:98:77:1f:eb:e2:82:94:
a8:15:2d:5a:e8:0c:57:71:a1:b1:a7:21:db:7e:61:a7:d8:81:
87:11:e7:c4:02:6c:50:7e:5b:a6:5b:8a:41:59:09:d0:2f:3d:
7c:dc:d2:e6:f6:24:03:6a:89:6f:f7:bd:33:4a:e8:a9:f4:25:
c0:31:2c:f2:20:89:e2:78:73:6f:b8:d6:9d:1e:ed:9f:7e:94:
53:97:89:a5:59:3c:ba:b6:b0:0f:69:7f:da:b9:05:40:7a:24:
6b:66:a7:c6:8f:50:cc:ff:11:10:b5:86:15:5c:91:af:1b:4c:
5a:47:18:d6:f5:71:40:cd:68:42:3f:da:df:e9:ce:fa:db:6d:
b4:b1:ca:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:14 2025 by rpki-client