Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/OWwS1MBQ-m8kT6EhUXf95uq4bag.roa
File: OWwS1MBQ-m8kT6EhUXf95uq4bag.roa (raw, json)
Hash identifier: yrGAuqdJlp0J0ZeoytNXiCBbQITRS5p4ksoJPjwm8MA=
Subject key identifier: 39:6C:12:D4:C0:50:FA:6F:24:4F:A1:21:51:77:FD:E6:EA:B8:6D:A8
Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Certificate serial: 0194206854F0C8AF1193FD21529198908019
Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/OWwS1MBQ-m8kT6EhUXf95uq4bag.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49702
IP address blocks: 185.109.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:54:f0:c8:af:11:93:fd:21:52:91:98:90:80:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=396c12d4c050fa6f244fa1215177fde6eab86da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:92:d1:df:3d:13:66:e8:4c:57:c4:8e:74:9f:
c7:36:aa:35:fc:cc:66:51:9a:5d:14:ee:6e:bd:ed:
42:86:e6:2f:13:43:ce:96:2c:d4:d7:11:dc:72:0d:
fa:20:e4:46:df:1d:41:46:dc:7d:02:99:04:ab:9d:
be:ac:45:f9:94:80:93:53:01:9e:d6:78:a6:b8:fe:
b1:3e:b3:f3:13:12:b2:ae:ae:97:e0:97:b8:d0:ab:
88:a1:f6:0c:a2:7e:23:6a:01:1f:37:74:e8:48:31:
26:23:4c:da:17:5b:d7:b1:c7:02:9e:ae:b1:b9:f3:
61:83:74:2c:48:73:91:63:9c:0d:af:4b:cb:fe:90:
3f:3d:b3:4e:82:d5:de:b7:e5:08:ef:0c:2e:ec:2e:
ab:a3:c6:33:b6:db:ec:a7:0e:c7:68:63:b5:1d:fe:
6b:ee:ff:65:a6:b0:40:ff:da:fb:77:93:4f:02:14:
ac:67:24:4c:63:25:e7:f2:b0:b7:21:d2:28:ac:99:
a8:3c:14:87:de:8a:6f:5e:41:31:b8:bb:4f:21:14:
8f:23:09:8c:19:19:11:2a:91:59:1b:0b:84:ab:31:
2b:bd:df:57:ea:7c:20:98:90:3e:cd:ee:03:7f:d2:
47:33:87:79:01:6b:7d:cd:c5:df:3b:27:fd:f5:1b:
69:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6C:12:D4:C0:50:FA:6F:24:4F:A1:21:51:77:FD:E6:EA:B8:6D:A8
X509v3 Authority Key Identifier:
keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/OWwS1MBQ-m8kT6EhUXf95uq4bag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.112.0/22
Signature Algorithm: sha256WithRSAEncryption
10:f3:79:8b:2b:6d:4d:c1:89:14:ad:e5:a5:9e:4d:7f:e6:ee:
46:3e:81:0e:c1:8c:58:5b:28:5f:c2:14:ba:4c:5e:fb:b7:69:
e7:c1:bd:9e:b5:a9:6b:40:e7:8e:c3:23:c9:b4:8d:81:d1:c6:
22:28:67:f8:5c:8e:a0:f7:f0:cc:70:c1:70:2c:61:2c:0a:84:
b9:d2:6c:1c:c8:5c:ea:13:52:bd:ce:98:fe:5a:0c:15:64:64:
7a:b9:65:f4:f1:3d:11:2d:78:bb:51:22:64:7c:a9:56:d5:02:
0b:0a:47:96:c2:63:d4:4a:13:da:3b:0e:62:18:fe:ea:39:a7:
bf:b2:2f:05:28:57:12:4f:a8:26:08:1a:57:60:98:52:1b:84:
cf:f9:84:d3:ed:4b:05:47:2e:32:36:94:67:fc:c3:f7:9d:cc:
e7:4a:f7:01:d6:4d:7a:70:f9:10:d5:6b:87:7b:dc:77:c7:74:
c7:1a:7b:59:81:bf:07:4c:64:89:79:3e:a9:3a:04:c0:50:88:
76:5a:af:6e:10:a2:fe:1b:b2:d3:6a:97:10:04:4d:07:cd:72:
d5:8c:18:34:45:a7:a1:1b:b5:0a:1f:8a:39:06:91:0d:1d:10:
38:f7:c3:90:26:11:2e:07:57:64:77:b6:49:f6:3f:b8:20:99:
0e:7a:ec:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:06:41 2025 by rpki-client