Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/oatwYy2j--y4A4dkdi2Ei0TqLKU.roa
File: oatwYy2j--y4A4dkdi2Ei0TqLKU.roa (raw, json)
Hash identifier: beRtQjCncuGRKcclQ2/Ky7ZCUl+J1GdvvwHgNtsiUNI=
Subject key identifier: A1:AB:70:63:2D:A3:FB:EC:B8:03:87:64:76:2D:84:8B:44:EA:2C:A5
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 01942144165BE77E4A9798019BE33EEC16CB
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/oatwYy2j--y4A4dkdi2Ei0TqLKU.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21086
IP address blocks: 92.245.160.0/22 maxlen: 24
92.245.188.0/24 maxlen: 24
92.245.190.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:16:5b:e7:7e:4a:97:98:01:9b:e3:3e:ec:16:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1ab70632da3fbecb8038764762d848b44ea2ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:4f:0a:e1:18:74:2c:70:72:c0:7d:91:5b:
f7:95:a4:6f:ca:48:36:52:21:5a:49:f3:b3:94:c7:
9d:ff:6e:67:c8:06:e9:b9:77:7f:52:e8:61:c7:c0:
4b:a4:37:57:20:77:d0:a8:c0:31:f9:39:e3:7d:df:
ce:71:b9:67:52:72:41:b3:43:08:0d:84:13:3d:35:
5f:17:d1:ce:4d:f8:be:56:3d:e2:35:75:2b:bb:14:
60:e8:60:37:8e:15:0b:f3:90:33:a1:fd:52:07:33:
fe:cb:e8:bc:99:9e:67:d3:1a:7e:72:9f:84:b4:b4:
f0:7a:60:2c:f9:d5:85:90:49:4a:30:d0:6f:4b:34:
03:75:39:e9:02:d4:aa:2c:84:10:7e:f4:cf:16:47:
8b:92:ae:98:8e:aa:96:88:27:e4:c4:70:24:c6:fe:
da:91:fa:66:2c:e3:02:b7:ff:09:ad:08:7c:9b:78:
b9:75:c7:cc:6f:76:af:b0:56:04:9a:88:16:2a:f9:
1c:8d:49:21:46:61:a4:21:e0:92:47:74:88:e4:43:
71:f6:02:5a:a0:a7:a5:ce:8f:99:ed:39:79:08:b0:
04:92:d1:67:66:dd:70:19:4d:2d:af:fc:65:09:0c:
77:6d:cd:f7:eb:1e:ef:1a:ad:6e:02:6d:7a:aa:4e:
64:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AB:70:63:2D:A3:FB:EC:B8:03:87:64:76:2D:84:8B:44:EA:2C:A5
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/oatwYy2j--y4A4dkdi2Ei0TqLKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.245.160.0/22
92.245.188.0/24
92.245.190.0/23
Signature Algorithm: sha256WithRSAEncryption
53:ef:31:1c:c2:b9:75:6e:a9:34:a6:8d:47:ab:a8:2b:43:49:
fe:6b:9e:f8:e7:54:25:71:cc:5b:03:e5:41:ee:fb:74:8e:54:
f7:2c:62:d3:36:5e:dd:36:c6:3a:15:c4:f5:a1:c7:3a:d6:51:
c3:e8:99:1e:85:46:c2:5a:e7:42:85:cf:e1:06:40:b2:e4:14:
e6:67:fd:d3:4a:59:fe:6a:c3:b3:82:fd:f0:af:db:e7:c4:9b:
70:de:5f:b4:14:a4:01:72:85:9f:99:48:de:50:ca:a6:1b:66:
e0:f3:9d:48:4c:cb:1a:ab:73:0c:1d:1d:fc:9c:26:86:5c:9c:
8a:58:d9:6d:0c:8a:8c:9c:c8:26:91:ab:f8:18:c7:6e:4e:1a:
1a:98:41:6e:3e:71:3e:6e:4e:e7:ca:f2:1f:50:03:b1:30:f5:
0d:22:a2:13:21:c4:9d:fc:41:59:fe:c7:18:7c:f5:5b:e3:66:
0b:82:2a:ab:d0:30:9b:93:5f:08:04:12:47:34:7a:4f:66:14:
e7:b9:8b:bd:be:d3:6f:97:36:6c:a5:50:98:49:56:e3:96:07:
aa:4c:36:ec:63:85:80:bd:96:23:06:fb:20:53:16:33:33:d6:
f3:a9:51:02:78:af:9e:f2:c8:b6:a7:4d:2c:7a:a5:f9:21:7b:
a8:07:48:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:06 2025 by rpki-client