Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/ojB_2XE9-VR6PiNiRu6ANmUyiuo.roa
File: ojB_2XE9-VR6PiNiRu6ANmUyiuo.roa (raw, json)
Hash identifier: YbnnkO0HBRUHzkxo3r5IQRGQe30uxmuUwdAmB24B6sc=
Subject key identifier: A2:30:7F:D9:71:3D:F9:54:7A:3E:23:62:46:EE:80:36:65:32:8A:EA
Certificate issuer: /CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
Certificate serial: 019425FDD5881BA90C6C1A7BF88EE57DE62D
Authority key identifier: B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/ojB_2XE9-VR6PiNiRu6ANmUyiuo.roa
Signing time: Thu 02 Jan 2025 07:49:39 +0000
ROA not before: Thu 02 Jan 2025 07:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48629
IP address blocks: 185.86.160.0/24 maxlen: 24
185.86.161.0/24 maxlen: 24
185.86.162.0/24 maxlen: 24
185.86.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d5:88:1b:a9:0c:6c:1a:7b:f8:8e:e5:7d:e6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
Validity
Not Before: Jan 2 07:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2307fd9713df9547a3e236246ee803665328aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:c3:27:66:73:08:01:2c:5c:f5:23:08:ab:
99:9b:dd:05:74:07:2d:95:67:36:e0:46:46:68:b5:
57:8d:97:08:45:a2:b9:4b:4e:ba:d0:e9:5e:1b:f2:
d2:02:9e:5c:3b:2c:8f:11:de:0e:54:d0:24:4b:51:
f5:ba:f0:f1:03:09:14:72:79:b5:fe:36:c9:e8:d5:
f7:df:3d:0b:ea:78:79:ce:e4:12:dd:3d:37:e1:b8:
9f:d3:d6:34:47:df:4f:f7:44:59:d0:e1:2d:5b:73:
be:f7:d0:01:3b:aa:b2:e0:1f:5f:6a:e2:61:a3:ab:
73:42:c3:08:2e:60:ef:d2:67:78:3f:43:c1:5d:11:
b3:a2:95:63:d6:fe:f3:eb:43:92:2e:9d:54:42:7b:
9c:d9:6c:c0:f3:05:79:f1:19:b2:17:4e:c1:cd:33:
32:c0:0f:26:33:a4:bd:dc:04:33:2f:a5:20:c0:97:
40:46:d8:48:eb:8a:ee:5d:b9:56:3d:f9:66:43:53:
34:94:9f:cf:c6:40:6b:f8:86:dc:b2:e5:a1:4b:93:
51:d8:b5:77:9a:c7:d5:e2:d5:98:05:63:45:fe:c6:
5b:d4:fa:f3:cf:4f:37:3c:8c:1f:98:f7:40:f4:40:
0d:e8:ee:16:7c:25:46:e3:51:b7:93:24:43:d8:a4:
b9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:30:7F:D9:71:3D:F9:54:7A:3E:23:62:46:EE:80:36:65:32:8A:EA
X509v3 Authority Key Identifier:
keyid:B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/ojB_2XE9-VR6PiNiRu6ANmUyiuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.160.0/22
Signature Algorithm: sha256WithRSAEncryption
56:0a:fa:eb:89:16:82:71:10:b3:56:9d:a3:2c:96:29:96:03:
b9:76:91:1d:4a:74:3b:36:36:3e:8d:34:aa:77:a4:4d:e0:43:
0a:09:e0:fc:06:a3:8e:b2:57:90:7a:20:6b:6e:1c:3e:e0:29:
04:f3:6f:1e:89:02:a3:79:87:6a:39:89:c1:da:8c:65:71:2a:
02:fc:b5:e8:17:a5:50:70:02:a3:8d:9b:2b:76:b2:50:3a:2c:
2b:0a:fb:a6:4f:b6:57:ce:7c:d1:14:83:b0:d4:cd:4a:e1:e1:
6e:55:f0:06:77:86:7b:5e:6a:c0:ab:79:bf:6a:d9:bf:3e:d2:
c4:88:3d:ae:ed:52:d9:93:ae:c9:e6:56:8e:43:df:fd:ea:8a:
26:1b:9b:6a:51:0d:c9:dd:d3:81:8a:15:1d:76:14:b8:07:86:
49:fe:27:08:9c:7f:55:f0:7b:c9:fe:0a:7c:13:54:66:ec:b2:
94:de:07:fb:2f:34:c2:c7:d4:4a:fe:86:8d:a2:7d:f1:40:66:
8b:d8:8d:42:75:8a:0f:3b:f5:bb:46:59:e4:3a:2f:d7:85:36:
ad:98:9f:95:69:ec:6e:2f:d1:c5:ab:24:27:fa:13:0e:6f:6a:
c4:76:ea:bf:e5:30:86:0e:d4:f3:d2:3f:d3:00:ea:1f:d2:a7:
39:10:db:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:06:39 2025 by rpki-client