Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/ObpxY32Z7oyMJol_lYg9bGeN9AY.roa
File: ObpxY32Z7oyMJol_lYg9bGeN9AY.roa (raw, json)
Hash identifier: ApvQRW2mJHhrYTwTHWDRKWrSogDYKOnn6goKp0DnvNw=
Subject key identifier: 39:BA:71:63:7D:99:EE:8C:8C:26:89:7F:95:88:3D:6C:67:8D:F4:06
Certificate issuer: /CN=6046cdd10a7489f3aef12199d24f01a9d9a9d533
Certificate serial: 09F15FC3
Authority key identifier: 60:46:CD:D1:0A:74:89:F3:AE:F1:21:99:D2:4F:01:A9:D9:A9:D5:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEbN0Qp0ifOu8SGZ0k8Bqdmp1TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/ObpxY32Z7oyMJol_lYg9bGeN9AY.roa
Signing time: Sat 01 Jan 2022 08:03:54 +0000
ROA not before: Sat 01 Jan 2022 08:03:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.141.35.0/24 maxlen: 24
185.141.33.0/24 maxlen: 24
185.141.34.0/24 maxlen: 24
2a07:21c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166813635 (0x9f15fc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6046cdd10a7489f3aef12199d24f01a9d9a9d533
Validity
Not Before: Jan 1 08:03:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39ba71637d99ee8c8c26897f95883d6c678df406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:d7:42:32:72:07:2d:47:3a:26:51:e6:8e:
9e:5c:76:61:34:a2:a2:dc:01:11:67:81:78:9e:42:
9a:fd:11:6b:3c:3a:d1:01:01:f4:c1:71:c0:45:e6:
ff:6f:e2:51:d8:82:ec:a4:b3:48:1c:eb:1f:08:60:
fc:ed:ec:2a:9e:9d:16:a6:b8:3f:23:fb:9b:23:b2:
b7:4c:ae:91:4c:0b:df:4a:41:31:02:07:40:bd:9e:
4a:23:ac:ae:86:2b:4a:23:f1:a1:0b:16:49:c0:f8:
8c:ec:a7:0b:49:71:5d:ed:85:d3:a8:c9:6c:c2:af:
21:5c:a8:12:08:2f:ae:5a:2a:d5:1e:d5:fa:7a:5f:
a3:f9:73:60:20:eb:38:4c:a1:48:4a:14:65:b2:29:
da:5d:a7:c7:b2:3c:14:20:67:38:b2:c5:88:42:cb:
2b:71:d0:59:1a:3c:78:85:d7:f1:13:0b:d3:85:ca:
85:38:32:39:53:70:01:00:6c:90:77:e4:05:c4:1a:
7f:62:51:34:5f:32:79:8c:8e:30:4a:a3:21:7d:77:
76:27:43:87:5b:a7:93:00:60:a4:e2:c5:81:0f:47:
27:49:11:39:52:7f:d0:8e:28:48:e4:5d:ef:26:80:
d3:84:1c:ae:a1:fb:0e:bd:d4:43:3d:e7:6e:2f:75:
8b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BA:71:63:7D:99:EE:8C:8C:26:89:7F:95:88:3D:6C:67:8D:F4:06
X509v3 Authority Key Identifier:
keyid:60:46:CD:D1:0A:74:89:F3:AE:F1:21:99:D2:4F:01:A9:D9:A9:D5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEbN0Qp0ifOu8SGZ0k8Bqdmp1TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/ObpxY32Z7oyMJol_lYg9bGeN9AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/YEbN0Qp0ifOu8SGZ0k8Bqdmp1TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.33.0-185.141.35.255
IPv6:
2a07:21c0::/29
Signature Algorithm: sha256WithRSAEncryption
a1:32:35:28:54:4f:93:d5:90:7f:ee:b1:8d:a5:cc:8a:15:48:
c2:6c:94:ca:fd:86:92:1d:f6:b5:91:d3:94:c3:62:c1:aa:ba:
3f:9d:e4:c0:1f:74:12:20:f7:3c:4e:bd:24:2a:6e:dd:09:2f:
6d:b6:50:e6:04:21:05:3b:b4:3f:33:7b:6d:0d:ae:c4:97:22:
65:1b:5c:d0:43:22:2c:74:29:fc:39:0e:ae:00:de:86:b8:5c:
79:d7:9a:f1:3a:c2:1a:4e:f4:7d:c1:e5:a6:9b:c8:22:b5:0f:
7e:50:1e:79:53:78:b5:66:37:14:79:fa:78:63:32:4e:1b:9b:
0f:b6:8e:1b:86:6f:0d:d6:bc:91:f1:f7:90:07:a1:c3:28:97:
06:b1:03:89:e3:79:90:d4:3e:75:80:11:9c:a4:c0:72:36:06:
a4:64:4b:7f:f5:d8:b1:75:83:8a:b0:b1:b4:a0:ff:77:f1:e8:
fd:a9:af:7e:ef:24:de:cf:ed:61:9f:a6:62:1f:e4:09:62:da:
60:2d:fc:d0:66:ff:5f:11:f4:21:88:0f:4a:30:7e:4e:83:cd:
47:0e:49:d7:71:10:01:73:07:d7:5c:97:fd:78:ce:6c:d8:44:
e8:6f:66:a0:35:9f:f1:0d:b7:31:8c:fc:48:af:34:d0:1a:f9:
76:75:bc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:03 2025 by rpki-client