Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/53cc43-595d-4c8f-ab23-6db3a2d35efd/1/OjLzEdBJNPV0hlE8aCYVIXZIMdg.roa
File: OjLzEdBJNPV0hlE8aCYVIXZIMdg.roa (raw, json)
Hash identifier: 9oz7W5RPbW5aEmYUsqK2Kzk0VIqsGUnS+9BF1DL4f2U=
Subject key identifier: 3A:32:F3:11:D0:49:34:F5:74:86:51:3C:68:26:15:21:76:48:31:D8
Certificate issuer: /CN=c026567dcb0295bde7709c2a7d601afaea64ee31
Certificate serial: 0196C640
Authority key identifier: C0:26:56:7D:CB:02:95:BD:E7:70:9C:2A:7D:60:1A:FA:EA:64:EE:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wCZWfcsClb3ncJwqfWAa-upk7jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/53cc43-595d-4c8f-ab23-6db3a2d35efd/1/OjLzEdBJNPV0hlE8aCYVIXZIMdg.roa
Signing time: Sat 01 Jan 2022 04:03:48 +0000
ROA not before: Sat 01 Jan 2022 04:03:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44285
IP address blocks: 185.206.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26658368 (0x196c640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c026567dcb0295bde7709c2a7d601afaea64ee31
Validity
Not Before: Jan 1 04:03:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a32f311d04934f57486513c68261521764831d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:82:0d:23:48:c4:b0:e7:64:fa:4c:4d:3b:
02:54:2e:77:84:00:50:c9:0c:87:61:5a:2e:9a:20:
a8:f6:da:31:1a:13:da:06:cc:d0:f2:e0:1c:42:6e:
35:11:49:91:1d:55:ce:bd:25:c8:77:41:ce:5f:25:
80:85:8a:9e:a9:39:93:0a:f1:23:53:ed:df:24:c9:
9c:17:b4:1d:06:6f:68:a2:90:c6:f7:b0:c0:7b:c3:
26:67:1d:ad:0f:7c:73:60:4d:f4:7a:35:6b:c0:20:
f1:a1:08:cc:e2:e9:9c:d7:4a:e6:53:22:dc:f1:39:
82:5d:f2:4e:38:b8:18:e5:62:15:46:5a:a0:77:54:
32:5c:1f:bf:c0:e2:7f:83:3f:23:b8:cc:9f:7b:7f:
ec:26:39:da:29:4a:3f:8e:56:8d:35:65:43:3f:14:
da:c2:03:21:53:db:39:01:f1:76:ae:26:ff:3c:a7:
d3:6c:76:66:c6:fc:18:3e:6e:05:67:ae:03:ef:40:
68:43:9a:b3:7a:dc:93:a7:2b:e1:74:7b:0e:d8:36:
96:b9:db:e1:49:30:c0:39:32:a0:1f:a2:fc:d3:27:
5f:5b:ea:d0:9f:d8:b9:a3:18:ac:0a:0c:fa:1b:c4:
75:b9:0b:e1:fa:02:a4:7a:b7:42:1e:d0:5a:4f:19:
e5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:32:F3:11:D0:49:34:F5:74:86:51:3C:68:26:15:21:76:48:31:D8
X509v3 Authority Key Identifier:
keyid:C0:26:56:7D:CB:02:95:BD:E7:70:9C:2A:7D:60:1A:FA:EA:64:EE:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCZWfcsClb3ncJwqfWAa-upk7jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/53cc43-595d-4c8f-ab23-6db3a2d35efd/1/OjLzEdBJNPV0hlE8aCYVIXZIMdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/53cc43-595d-4c8f-ab23-6db3a2d35efd/1/wCZWfcsClb3ncJwqfWAa-upk7jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.231.0/24
Signature Algorithm: sha256WithRSAEncryption
09:52:17:8b:cb:7d:8c:48:e0:45:0c:bf:23:e8:37:88:5d:bb:
91:3e:e9:50:88:ce:2c:8d:c1:95:c7:64:2d:41:b8:d0:05:3c:
7a:d3:e4:8c:40:4b:91:0a:3d:4a:c1:83:9c:a0:d8:d1:2b:f9:
cf:b7:4c:10:f1:a3:d4:76:0d:0e:dc:ff:a0:e1:e1:fc:98:5a:
96:45:85:1e:80:24:2d:1c:a1:da:1a:4d:95:66:de:17:00:38:
cc:90:8d:aa:32:eb:24:e9:7c:b9:b0:1e:33:e9:b5:b1:c4:05:
b1:fe:d6:b7:81:a3:a3:f2:e6:5c:72:5d:09:65:e1:21:d1:42:
cc:7f:d7:9d:7f:68:6b:7e:55:c1:ff:8f:b5:cb:68:fd:32:90:
10:13:e7:4e:53:36:3f:80:a4:9d:b3:ce:b1:a1:18:db:34:1a:
e8:be:69:bd:02:de:83:28:bc:6c:c2:5e:13:51:a7:c7:ad:fc:
3f:e0:98:dc:eb:0d:e6:d3:96:c1:e7:75:13:2f:ec:e2:dc:bf:
a8:57:14:ea:15:63:fe:53:d8:bc:20:f1:f7:8b:45:31:c8:5d:
ab:05:62:52:b2:d6:e7:ca:bc:fa:83:a0:16:90:e5:df:1d:c3:
1a:ad:85:13:b4:a1:c0:47:5e:1c:7d:42:6c:2c:7e:dc:fd:5b:
51:2b:89:d4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAZbGQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MDI2NTY3ZGNiMDI5NWJkZTc3MDljMmE3ZDYwMWFmYWVhNjRlZTMxMB4XDTIyMDEw
MTA0MDM0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2EzMmYzMTFkMDQ5
MzRmNTc0ODY1MTNjNjgyNjE1MjE3NjQ4MzFkODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALeDgg0jSMSw52T6TE07AlQud4QAUMkMh2FaLpogqPbaMRoT
2gbM0PLgHEJuNRFJkR1Vzr0lyHdBzl8lgIWKnqk5kwrxI1Pt3yTJnBe0HQZvaKKQ
xvewwHvDJmcdrQ98c2BN9Ho1a8Ag8aEIzOLpnNdK5lMi3PE5gl3yTji4GOViFUZa
oHdUMlwfv8Dif4M/I7jMn3t/7CY52ilKP45WjTVlQz8U2sIDIVPbOQHxdq4m/zyn
02x2Zsb8GD5uBWeuA+9AaEOas3rck6cr4XR7Dtg2lrnb4UkwwDkyoB+i/NMnX1vq
0J/YuaMYrAoM+hvEdbkL4foCpHq3Qh7QWk8Z5YECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ6MvMR0Ek09XSGUTxoJhUhdkgx2DAfBgNVHSMEGDAWgBTAJlZ9ywKVvedw
nCp9YBr66mTuMTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dDWldmY3NDbGIzbmNKd3FmV0FhLXVwazdqRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTIvNTNjYzQzLTU5NWQtNGM4Zi1hYjIzLTZkYjNhMmQzNWVmZC8x
L09qTHpFZEJKTlBWMGhsRThhQ1lWSVhaSU1kZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIv
NTNjYzQzLTU5NWQtNGM4Zi1hYjIzLTZkYjNhMmQzNWVmZC8xL3dDWldmY3NDbGIz
bmNKd3FmV0FhLXVwazdqRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnO5zANBgkqhkiG9w0BAQsFAAOC
AQEACVIXi8t9jEjgRQy/I+g3iF27kT7pUIjOLI3BlcdkLUG40AU8etPkjEBLkQo9
SsGDnKDY0Sv5z7dMEPGj1HYNDtz/oOHh/JhalkWFHoAkLRyh2hpNlWbeFwA4zJCN
qjLrJOl8ubAeM+m1scQFsf7Wt4Gjo/LmXHJdCWXhIdFCzH/XnX9oa35Vwf+Ptcto
/TKQEBPnTlM2P4CknbPOsaEY2zQa6L5pvQLegyi8bMJeE1Gnx638P+CY3OsN5tOW
wed1Ey/s4ty/qFcU6hVj/lPYvCDx94tFMchdqwViUrLW58q8+oOgFpDl3x3DGq2F
E7ShwEdeHH1CbCx+3P1bUSuJ1A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:23 2025 by rpki-client