Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2ae5ff-82cb-42ae-8e41-e56617394cc3/1/OaMZpC41-I-1ezIAqfxWAO0wZRs.roa
File: OaMZpC41-I-1ezIAqfxWAO0wZRs.roa (raw, json)
Hash identifier: nr6KV4aUNCKjt+Qmc9enp1aMYgRhTr+Fjskab+eyuAQ=
Subject key identifier: 39:A3:19:A4:2E:35:F8:8F:B5:7B:32:00:A9:FC:56:00:ED:30:65:1B
Certificate issuer: /CN=5788ab5be2a42aed6c6e7b5efa249291e7c8a883
Certificate serial: 9FA8DE
Authority key identifier: 57:88:AB:5B:E2:A4:2A:ED:6C:6E:7B:5E:FA:24:92:91:E7:C8:A8:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4irW-KkKu1sbnte-iSSkefIqIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2ae5ff-82cb-42ae-8e41-e56617394cc3/1/OaMZpC41-I-1ezIAqfxWAO0wZRs.roa
Signing time: Sat 01 Jan 2022 02:50:40 +0000
ROA not before: Sat 01 Jan 2022 02:50:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44592
IP address blocks: 176.97.210.0/24 maxlen: 24
2a12:b200::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10463454 (0x9fa8de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5788ab5be2a42aed6c6e7b5efa249291e7c8a883
Validity
Not Before: Jan 1 02:50:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39a319a42e35f88fb57b3200a9fc5600ed30651b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dd:74:fb:97:02:6a:59:bf:c6:70:5e:75:85:
ac:5d:f0:6f:32:4c:45:cc:65:4e:f4:1b:b2:fd:84:
54:da:94:11:4d:da:5b:13:c7:ea:b7:f7:e8:8f:eb:
94:f8:90:7b:e4:4f:3b:68:60:f4:ce:a5:30:7b:8d:
55:cc:0f:fe:57:7c:6b:aa:cd:a9:ac:ac:dc:2d:2c:
6c:9f:d1:00:50:84:62:8e:7b:cc:d1:e7:5b:a3:90:
ca:7b:42:e9:8f:32:54:a3:ce:8c:fa:4d:bd:cb:f6:
d4:fe:2e:b5:db:22:26:95:9a:f8:5b:3d:e6:46:00:
0e:67:df:08:e5:01:42:ae:e7:49:21:23:f0:ee:0c:
94:52:12:18:1b:dc:3d:c1:04:b4:69:92:59:5b:44:
57:d1:40:ce:52:60:02:4f:08:5a:46:e1:5f:b0:4f:
01:f6:f3:19:a6:0f:42:43:3e:7c:10:9c:8c:72:29:
a6:bc:ed:bd:ea:51:02:83:70:13:c9:5d:4c:ed:e3:
ad:1c:41:c0:08:a2:d6:ef:93:5c:c2:b1:11:14:cd:
52:5a:22:4b:6e:41:c5:7a:68:54:ab:51:2c:a3:13:
d5:19:ed:6d:bb:ab:a6:5e:1c:24:18:40:c3:b9:75:
ca:fc:7f:6b:6f:f1:0a:5e:94:80:71:ed:2e:a3:1c:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A3:19:A4:2E:35:F8:8F:B5:7B:32:00:A9:FC:56:00:ED:30:65:1B
X509v3 Authority Key Identifier:
keyid:57:88:AB:5B:E2:A4:2A:ED:6C:6E:7B:5E:FA:24:92:91:E7:C8:A8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4irW-KkKu1sbnte-iSSkefIqIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2ae5ff-82cb-42ae-8e41-e56617394cc3/1/OaMZpC41-I-1ezIAqfxWAO0wZRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2ae5ff-82cb-42ae-8e41-e56617394cc3/1/V4irW-KkKu1sbnte-iSSkefIqIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.210.0/24
IPv6:
2a12:b200::/29
Signature Algorithm: sha256WithRSAEncryption
4b:0d:e0:f1:97:af:a2:f2:3a:37:dd:31:14:88:a7:49:d2:51:
61:40:e9:bd:6a:b2:db:69:b6:76:d1:85:53:d9:20:22:1c:72:
6d:c0:86:b9:d7:7b:b3:b4:3c:79:05:62:c3:4e:71:01:91:0e:
d2:88:70:d5:6d:b5:81:0d:f5:a4:cb:2d:a4:2d:26:d4:56:a7:
39:c0:a4:ed:5e:c9:95:d7:dd:f2:b5:6b:bb:88:26:0f:6d:33:
e3:5e:d2:7e:47:ee:c4:9d:65:4b:e7:32:80:2e:f7:94:98:6a:
f8:01:d9:6f:f9:53:31:91:f7:95:92:0f:f7:f8:f8:68:f3:00:
43:71:8d:ad:c8:61:4e:4b:7d:ba:51:13:04:99:48:23:27:4e:
14:5d:6e:e2:24:f9:c3:f1:4b:a9:d3:41:2e:91:7f:f7:cb:5a:
c2:a9:78:db:b7:00:70:27:82:16:b1:f8:f5:72:1b:33:37:a5:
23:a2:d3:f4:5d:99:f8:3f:a1:c9:89:32:f5:b2:9f:52:48:1d:
05:11:59:64:64:98:94:fb:5a:34:e9:2b:11:d0:bf:65:4d:8d:
f9:cf:59:71:db:ab:15:dc:e8:74:af:ce:46:76:fc:fb:24:09:
4a:a0:76:a3:d4:ff:1e:37:e2:4a:cd:ba:b6:c4:3d:2a:d6:58:
43:d3:20:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:07 2025 by rpki-client