Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/OISHQNhR8p2mYXTkacA-5Y0TXFI.roa
File: OISHQNhR8p2mYXTkacA-5Y0TXFI.roa (raw, json)
Hash identifier: ZA9HTGMJWNdlwAqTWZQ/O1l9ydSeQc0h0e8oWQ+cHZ8=
Subject key identifier: 38:84:87:40:D8:51:F2:9D:A6:61:74:E4:69:C0:3E:E5:8D:13:5C:52
Certificate issuer: /CN=292c5d372319fa6175e56ca79883d12b0c6e38ec
Certificate serial: 0184D8C1C618857FE5614C79D44C46AAFAF7
Authority key identifier: 29:2C:5D:37:23:19:FA:61:75:E5:6C:A7:98:83:D1:2B:0C:6E:38:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSxdNyMZ-mF15WynmIPRKwxuOOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/OISHQNhR8p2mYXTkacA-5Y0TXFI.roa
Signing time: Sat 03 Dec 2022 16:11:28 +0000
ROA not before: Sat 03 Dec 2022 16:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 185.81.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d8:c1:c6:18:85:7f:e5:61:4c:79:d4:4c:46:aa:fa:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292c5d372319fa6175e56ca79883d12b0c6e38ec
Validity
Not Before: Dec 3 16:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38848740d851f29da66174e469c03ee58d135c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:6b:4d:b0:c6:66:4e:a8:b7:2f:f3:e6:f6:
6b:3c:b5:92:d7:8d:c7:57:ad:e7:0f:da:5b:ac:28:
38:ab:e9:39:65:63:34:cb:1d:3f:fb:07:6e:5f:af:
b5:1e:17:ff:31:ab:f4:1d:c5:f5:cd:86:f4:45:cd:
73:0e:32:88:14:c6:52:2d:19:1d:35:1d:df:c5:d3:
e2:69:b8:99:fd:ae:d8:0b:f3:2a:a9:4f:d1:16:b9:
be:42:f0:91:8f:1c:b8:92:c4:fc:ed:99:67:70:cc:
1d:33:ea:63:79:01:50:d1:3c:3c:8d:5c:ea:ea:87:
1b:c6:7c:18:8f:b0:e9:1e:70:ef:be:67:7d:92:5e:
0b:7f:1c:1a:98:8a:71:26:e1:04:31:6a:95:90:8a:
c9:bf:14:df:23:90:27:ce:9e:87:c9:72:dc:e8:a8:
7c:be:65:78:2f:35:b8:98:ee:89:26:8a:bc:d7:36:
fe:1b:e9:06:de:50:15:26:e9:0f:0e:3d:6c:db:9e:
34:db:62:8b:9c:92:cb:5c:4f:9e:8c:3a:ee:1a:d4:
22:f8:f1:16:62:d1:e5:5e:e9:ec:b0:3d:a0:c7:7c:
ff:b5:10:07:11:04:44:33:14:2a:ed:e7:9e:92:8c:
f2:2e:c5:63:96:e9:21:69:5e:03:ef:63:bd:e5:1a:
85:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:84:87:40:D8:51:F2:9D:A6:61:74:E4:69:C0:3E:E5:8D:13:5C:52
X509v3 Authority Key Identifier:
keyid:29:2C:5D:37:23:19:FA:61:75:E5:6C:A7:98:83:D1:2B:0C:6E:38:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSxdNyMZ-mF15WynmIPRKwxuOOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/OISHQNhR8p2mYXTkacA-5Y0TXFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/KSxdNyMZ-mF15WynmIPRKwxuOOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.69.0/24
Signature Algorithm: sha256WithRSAEncryption
34:5e:a2:2c:af:bf:8f:57:20:ae:88:48:30:5d:64:3f:5f:0c:
11:ed:a2:6e:1b:66:a3:ba:31:35:0b:55:28:2f:9a:20:e1:05:
ef:34:49:a7:f6:ff:be:e3:96:96:25:7b:13:68:19:eb:42:77:
d5:b6:da:da:f2:dd:47:08:2d:2d:bb:b9:f5:a4:62:68:1b:cb:
4f:6e:e5:94:89:8f:a0:ee:22:46:7d:4f:84:57:3d:db:2f:e8:
66:13:ac:79:a0:18:a7:f4:bb:17:bd:fa:e0:2c:4e:39:b6:89:
c8:28:8a:2f:c5:2f:b1:ea:b7:74:10:13:d5:7f:fc:5e:12:81:
2b:a7:a4:fd:e9:f6:cc:89:9c:20:41:13:d3:cf:df:4b:1a:29:
16:0f:e4:5a:34:8b:aa:98:0d:b8:fb:e2:b6:5c:dd:a1:90:64:
5f:79:e2:a1:69:da:88:95:bd:c5:a3:84:d2:99:ef:35:05:f4:
88:68:90:78:8f:e7:7e:90:eb:d0:72:38:f2:8d:46:24:54:aa:
c3:8f:dd:85:5a:16:18:26:c1:a0:7b:87:62:0a:c5:e6:05:2b:
fc:81:90:7a:40:25:21:25:02:e1:70:3a:25:a7:b8:78:33:de:
a3:c8:03:69:86:73:1a:25:1b:51:34:59:dc:58:ac:74:45:b4:
24:60:3f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:49 2025 by rpki-client