Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oacDUL-1le87SR-2joEQ3RKhRHc.roa
File: oacDUL-1le87SR-2joEQ3RKhRHc.roa (raw, json)
Hash identifier: QjBFfOjrM63U2HUMaBAAb+GV9ufQM8BJ4XfVhPg0kIE=
Subject key identifier: A1:A7:03:50:BF:B5:95:EF:3B:49:1F:B6:8E:81:10:DD:12:A1:44:77
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01942590066AFBEEBC549F38B3E8404F87D6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oacDUL-1le87SR-2joEQ3RKhRHc.roa
Signing time: Thu 02 Jan 2025 05:49:43 +0000
ROA not before: Thu 02 Jan 2025 05:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209954
IP address blocks: 92.38.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:06:6a:fb:ee:bc:54:9f:38:b3:e8:40:4f:87:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1a70350bfb595ef3b491fb68e8110dd12a14477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cf:98:d7:5e:f5:87:2e:38:a4:b8:2d:7f:ed:
00:e8:cb:ee:9f:44:5f:d4:6b:aa:7d:3e:59:02:f9:
8c:2b:92:42:e9:00:c3:2a:3b:88:b3:31:fe:73:dc:
c9:9f:16:2d:8a:81:7f:a3:8b:56:ed:d7:d9:02:e8:
c9:6e:79:2a:33:af:aa:9c:f8:1d:47:4e:ea:5b:4a:
4e:54:33:3a:eb:9d:54:c3:bf:93:bf:01:d1:e3:a3:
29:20:b4:0c:2a:00:c1:9e:be:39:d5:64:46:e6:7f:
1b:c8:3f:42:ad:b7:cc:c6:f2:25:8b:76:26:13:d3:
bf:00:60:ab:ae:3a:61:27:f6:47:91:39:1a:8e:39:
2e:a0:50:89:44:f7:e2:95:50:31:78:f2:0f:b6:06:
f7:97:d2:84:2d:93:3d:57:5b:68:0c:1c:65:1f:b5:
81:33:a8:e3:b4:71:b3:9b:7c:25:9d:1a:ff:11:05:
3d:9c:80:bd:e2:0c:e4:15:61:39:f5:f7:71:ae:78:
d2:26:9c:17:af:52:ea:86:c6:c5:5b:99:c0:d5:fc:
2c:75:db:11:de:9f:94:ab:60:3e:54:10:57:f1:66:
c1:e6:ca:1c:39:13:3a:3c:d6:ce:bb:26:b2:79:88:
32:67:0b:e2:96:2c:c9:da:83:19:49:5c:0d:4f:6b:
55:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A7:03:50:BF:B5:95:EF:3B:49:1F:B6:8E:81:10:DD:12:A1:44:77
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oacDUL-1le87SR-2joEQ3RKhRHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.92.0/24
Signature Algorithm: sha256WithRSAEncryption
35:2e:2e:ec:4b:a4:63:e5:b5:71:c9:f0:d5:65:0e:e1:6d:d5:
47:b3:ec:ff:4a:28:5f:b8:8c:ce:62:0a:86:59:66:52:90:10:
81:90:e7:da:1c:23:0b:ec:d2:77:7d:11:77:79:a1:3e:b5:ea:
be:2f:1d:08:78:75:b9:61:91:58:bf:e6:e9:0a:9e:71:e4:2a:
e2:e0:f6:8e:d0:40:2d:86:80:f3:bf:26:2c:8f:be:c6:e8:b9:
78:57:06:7d:d2:68:d3:24:b6:5d:94:e9:da:e1:34:f5:14:2d:
8f:b9:d8:fa:f2:6b:e6:fc:71:ed:ea:88:a8:65:77:a0:5b:ad:
ef:9b:12:12:fb:82:14:78:25:55:9e:a8:40:c3:6f:3e:24:c1:
8e:2f:22:87:83:28:bd:67:6c:b7:6f:7e:ea:1c:e6:ad:33:f9:
0b:fe:c9:19:ba:48:60:55:13:c1:e4:2d:53:1a:55:2d:ce:bb:
81:f9:21:bc:db:14:9c:24:a3:c4:39:45:4c:d3:75:10:ee:0d:
f1:89:64:6a:da:44:90:6f:fe:f1:0c:26:3f:fd:f4:40:21:44:
f6:45:9c:d7:e0:8b:04:95:b7:64:3b:45:4f:7c:cb:f1:6f:a8:
ae:82:9e:ba:be:d1:03:69:1f:18:3d:d7:ac:39:f6:ed:0b:34:
28:b5:e5:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlkAZq++68VJ84s+hAT4fWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWE3MDM1MGJmYjU5NWVmM2I0OTFmYjY4ZTgxMTBkZDEyYTE0NDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3s+Y1171hy44pLgtf+0A6Mvun0Rf
1GuqfT5ZAvmMK5JC6QDDKjuIszH+c9zJnxYtioF/o4tW7dfZAujJbnkqM6+qnPgd
R07qW0pOVDM6651Uw7+TvwHR46MpILQMKgDBnr451WRG5n8byD9CrbfMxvIli3Ym
E9O/AGCrrjphJ/ZHkTkajjkuoFCJRPfilVAxePIPtgb3l9KELZM9V1toDBxlH7WB
M6jjtHGzm3wlnRr/EQU9nIC94gzkFWE59fdxrnjSJpwXr1LqhsbFW5nA1fwsddsR
3p+Uq2A+VBBX8WbB5socORM6PNbOuyayeYgyZwvilizJ2oMZSVwNT2tVswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKGnA1C/tZXvO0kfto6BEN0SoUR3MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvb2FjRFVMLTFsZTg3U1ItMmpvRVEzUktoUkhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXCZcMA0G
CSqGSIb3DQEBCwUAA4IBAQA1Li7sS6Rj5bVxyfDVZQ7hbdVHs+z/SihfuIzOYgqG
WWZSkBCBkOfaHCML7NJ3fRF3eaE+teq+Lx0IeHW5YZFYv+bpCp5x5Cri4PaO0EAt
hoDzvyYsj77G6Ll4VwZ90mjTJLZdlOna4TT1FC2Pudj68mvm/HHt6oioZXegW63v
mxIS+4IUeCVVnqhAw28+JMGOLyKHgyi9Z2y3b37qHOatM/kL/skZukhgVRPB5C1T
GlUtzruB+SG82xScJKPEOUVM03UQ7g3xiWRq2kSQb/7xDCY//fRAIUT2RZzX4IsE
lbdkO0VPfMvxb6iugp66vtEDaR8YPdesOfbtCzQoteWm
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:06 2025 by rpki-client