Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/oGtKZEQ9aVspd1Rjdqbm4Nxza8g.roa
File: oGtKZEQ9aVspd1Rjdqbm4Nxza8g.roa (raw, json)
Hash identifier: rH2Vc6Z9oakYdj2kjqeYC+aX0DFp7A2F9lOF6Il3fBQ=
Subject key identifier: A0:6B:4A:64:44:3D:69:5B:29:77:54:63:76:A6:E6:E0:DC:73:6B:C8
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 0188CDFAC6AB47A9AC6970D252B6702FFFEA
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/oGtKZEQ9aVspd1Rjdqbm4Nxza8g.roa
Signing time: Sun 18 Jun 2023 10:09:04 +0000
ROA not before: Sun 18 Jun 2023 10:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203394
IP address blocks: 185.126.255.0/24 maxlen: 24
212.79.125.0/24 maxlen: 24
212.87.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cd:fa:c6:ab:47:a9:ac:69:70:d2:52:b6:70:2f:ff:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Jun 18 10:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a06b4a64443d695b2977546376a6e6e0dc736bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:d2:1c:15:08:2b:e8:18:51:e2:0a:50:5b:
ac:4e:75:e3:1f:24:1d:d0:80:29:5b:c7:d7:96:b4:
2e:41:c5:f9:14:66:79:fe:20:89:7d:5e:90:51:bb:
eb:25:03:28:b9:bc:d9:08:08:88:5c:53:b0:bf:0a:
c8:f8:d6:c4:1d:a7:06:c3:27:ea:73:fa:c9:b6:fd:
5c:6e:aa:53:cd:e3:43:af:79:3b:10:d2:87:36:0e:
af:13:43:af:c3:4d:02:c2:e0:69:6f:2d:bc:46:da:
e9:0e:22:14:cf:ce:f6:a8:04:6b:d1:8d:ac:85:d0:
11:4c:e2:76:6b:9a:50:e9:b5:00:27:22:e1:82:7f:
80:42:ca:86:5b:b1:17:41:63:5c:0e:f6:e2:3e:16:
79:91:82:d6:65:7a:be:f9:82:bc:d9:18:d0:de:3f:
bc:62:28:6f:c0:f0:b9:41:cb:20:81:b7:d6:6b:ce:
8c:06:bd:0a:97:82:0b:3d:c2:21:6a:04:dc:e3:87:
52:b4:42:09:80:f5:51:2b:8b:b4:4a:df:8e:4b:4b:
08:0b:00:c1:e3:1d:da:25:42:33:0b:52:9f:d8:49:
b2:05:f3:e2:f6:e7:ca:7a:03:58:c7:44:18:a7:90:
ef:c8:ee:66:d4:b8:b9:87:8b:86:e8:eb:4b:71:b5:
ee:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6B:4A:64:44:3D:69:5B:29:77:54:63:76:A6:E6:E0:DC:73:6B:C8
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/oGtKZEQ9aVspd1Rjdqbm4Nxza8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.255.0/24
212.79.125.0/24
212.87.168.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e7:7f:72:ef:d1:4a:a3:50:55:2a:e1:ed:59:11:3e:d9:4b:
b9:1c:a2:b7:c6:40:75:f1:24:ad:ff:41:08:25:99:86:1c:88:
82:6a:58:5c:52:ea:6c:3f:bc:ba:34:b1:1e:a0:f4:fd:14:1d:
8e:19:3b:41:95:0d:00:40:38:a2:f3:18:25:94:b8:f9:cc:2c:
27:53:92:88:f8:b3:ab:fb:b0:d0:87:ec:f7:3d:9a:c7:f4:fa:
a4:b3:1e:cd:b0:22:45:05:a5:04:0d:1d:e1:eb:fa:c4:df:91:
51:0c:43:af:01:c1:22:2f:5c:68:70:d6:10:45:4c:4f:d4:88:
ae:31:7d:07:61:47:d6:4e:72:11:93:ae:45:6e:2c:98:a8:e4:
da:88:a1:f4:fb:16:28:4e:eb:d1:df:ea:11:b6:ac:c2:a6:c8:
9f:4c:33:36:e0:de:c4:f5:c1:51:52:e2:05:a6:5b:16:35:61:
35:ec:a7:8b:30:99:91:7a:85:0e:50:0a:19:08:dc:c4:5d:48:
0d:8a:3a:d3:c2:42:00:82:33:6f:84:03:12:8c:6e:cd:14:01:
ed:20:da:4d:d3:cb:dd:5c:5b:bb:d3:be:a3:4b:d4:19:77:b4:
ce:5e:6b:26:e1:50:f6:c9:24:0f:60:f1:5b:75:01:44:4b:6d:
3f:9a:27:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:23 2025 by rpki-client