Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ff8091-b193-4cfc-9ef0-463de0f6969f/1/oq7DuyDxbffgKTd9gyzQS5pk5Gw.roa
File: oq7DuyDxbffgKTd9gyzQS5pk5Gw.roa (raw, json)
Hash identifier: ggbjNxLmHZ84crzq5HeD3ws/Sz6RdO4FZK2+IcNVvzs=
Subject key identifier: A2:AE:C3:BB:20:F1:6D:F7:E0:29:37:7D:83:2C:D0:4B:9A:64:E4:6C
Certificate issuer: /CN=5f326681a161298adb9ec53359aa41a56a775e6d
Certificate serial: 05BFD8F2
Authority key identifier: 5F:32:66:81:A1:61:29:8A:DB:9E:C5:33:59:AA:41:A5:6A:77:5E:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzJmgaFhKYrbnsUzWapBpWp3Xm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ff8091-b193-4cfc-9ef0-463de0f6969f/1/oq7DuyDxbffgKTd9gyzQS5pk5Gw.roa
Signing time: Sat 01 Jan 2022 09:01:42 +0000
ROA not before: Sat 01 Jan 2022 09:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57598
IP address blocks: 81.162.128.0/18 maxlen: 18
37.246.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96458994 (0x5bfd8f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f326681a161298adb9ec53359aa41a56a775e6d
Validity
Not Before: Jan 1 09:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2aec3bb20f16df7e029377d832cd04b9a64e46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:27:eb:b3:52:1a:b1:de:f0:41:fa:a1:66:
f8:8c:da:5b:96:4c:de:05:0b:87:08:02:6a:86:e1:
63:1e:45:74:db:c3:b0:26:5f:d2:d2:b0:7f:ab:95:
0d:4b:87:66:28:f9:89:74:08:02:d1:2b:be:6b:ae:
9b:55:60:45:2a:da:2d:2d:46:5e:6f:31:a2:a1:9d:
03:4c:6a:65:c3:e6:6e:f3:9f:9c:84:ea:8d:6b:70:
23:5f:a8:f0:36:33:7f:e6:ca:0c:f8:57:1d:b4:71:
e0:a4:3f:69:3a:04:ea:2e:91:d6:4f:52:fa:eb:5f:
04:b6:ca:67:0d:d7:28:cf:ba:9a:17:40:83:41:e6:
7b:cf:02:fb:b9:d2:a0:05:b0:2e:5c:48:4a:03:c5:
ec:8a:87:65:b1:65:ac:00:39:5a:96:84:d2:3f:6c:
d5:d9:9e:06:6f:01:8a:f9:5f:d6:2d:6d:45:a0:18:
f1:63:7f:4e:f4:5e:98:8d:25:a0:55:72:94:94:df:
55:4d:06:6b:80:1b:e3:52:fa:4d:95:b7:9c:59:de:
3d:bd:54:ed:c4:86:ec:33:e1:d3:9e:72:56:3e:84:
76:e6:ce:d0:94:c5:0a:cb:25:48:cf:aa:77:0c:21:
97:0b:b7:ca:53:71:90:66:a4:a3:82:41:5f:7e:2f:
f4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AE:C3:BB:20:F1:6D:F7:E0:29:37:7D:83:2C:D0:4B:9A:64:E4:6C
X509v3 Authority Key Identifier:
keyid:5F:32:66:81:A1:61:29:8A:DB:9E:C5:33:59:AA:41:A5:6A:77:5E:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzJmgaFhKYrbnsUzWapBpWp3Xm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ff8091-b193-4cfc-9ef0-463de0f6969f/1/oq7DuyDxbffgKTd9gyzQS5pk5Gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ff8091-b193-4cfc-9ef0-463de0f6969f/1/XzJmgaFhKYrbnsUzWapBpWp3Xm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.246.0.0/16
81.162.128.0/18
Signature Algorithm: sha256WithRSAEncryption
1b:44:10:ca:48:2c:1e:ae:65:3e:0a:e2:20:b4:ab:ae:45:39:
c2:b8:5c:82:c0:ac:c6:42:94:51:c3:cb:25:b1:e3:7c:a6:8e:
d3:4c:fe:a9:af:f4:ae:d0:6b:f9:35:40:c1:c3:74:df:62:33:
d4:63:cd:bb:43:fe:0b:55:b9:65:cc:b4:d5:91:e8:c7:e0:ad:
88:0d:4e:f4:85:a5:8b:ca:3b:02:4c:02:3e:64:8d:10:38:f1:
e1:76:e9:0f:b0:da:74:ca:e5:6f:6d:59:d3:3c:14:c1:74:f5:
3e:1e:22:0c:7d:fe:56:ea:57:65:56:12:69:a7:9c:be:c6:8f:
21:92:ad:58:7d:b8:84:d7:0f:ee:67:04:43:20:13:ee:d4:21:
0e:01:1f:05:b8:64:5e:18:bf:9e:7b:e5:44:30:c3:ca:7a:db:
e9:e2:48:4f:2e:b5:52:32:8d:93:e7:60:ee:1e:cb:fd:99:a5:
70:f7:71:68:06:ba:d8:a1:df:ac:97:6f:e5:c8:40:5d:27:2d:
7c:c5:23:e9:6f:55:78:92:dc:30:22:60:50:9e:09:da:ee:ea:
ea:c7:31:b8:c3:80:7d:bc:a6:f3:e5:1f:a2:81:57:62:e7:f7:
a0:9a:d4:1a:ff:26:a2:a9:6f:09:fd:84:c5:96:4c:5f:db:02:
ec:25:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:11 2025 by rpki-client