Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/OJ98wFKScdj7NdhQ_owK4-QRidY.roa
File: OJ98wFKScdj7NdhQ_owK4-QRidY.roa (raw, json)
Hash identifier: Xkbwckt0vgobcM+MYxSSHI4J0FZ49Vi/lW2BWrY5pD0=
Subject key identifier: 38:9F:7C:C0:52:92:71:D8:FB:35:D8:50:FE:8C:0A:E3:E4:11:89:D6
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A55BA04B7FCB773BCDA0F6DDE096E
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/OJ98wFKScdj7NdhQ_owK4-QRidY.roa
Signing time: Wed 01 Jan 2025 19:49:18 +0000
ROA not before: Wed 01 Jan 2025 19:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1125
IP address blocks: 145.125.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:55:ba:04:b7:fc:b7:73:bc:da:0f:6d:de:09:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=389f7cc0529271d8fb35d850fe8c0ae3e41189d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:77:04:bf:ab:2e:d3:23:a8:9b:40:99:48:
83:ed:bf:42:6e:fd:e2:67:1c:ee:4a:f4:5d:ec:3a:
2a:81:0f:fa:b1:86:3d:3f:6e:14:d4:6d:7a:7a:c8:
3f:63:b8:6d:dc:c9:2b:f3:95:0a:a3:a3:a0:e3:46:
07:87:b6:a5:24:e3:3b:15:5b:9f:93:fd:ac:5f:a1:
f2:4f:9b:21:65:00:c2:10:9c:dd:03:9f:8b:8b:07:
df:41:32:b4:03:95:5c:6f:a3:cf:0d:97:23:eb:32:
57:f8:24:62:5c:37:25:9e:54:33:bc:c4:89:cf:23:
6a:a1:ca:8c:84:9b:91:fb:36:0b:b1:68:a4:54:e7:
26:57:70:73:21:73:3f:0f:f3:0e:b3:6d:37:27:1d:
a0:ac:f0:a0:bb:48:b3:0b:ca:13:1d:65:33:04:9f:
e2:62:00:43:13:c0:0f:69:f4:08:bb:3c:fe:c0:22:
ce:8c:bf:91:a6:f3:49:91:56:15:0d:1c:96:0e:d4:
b4:bb:6b:49:e3:c9:43:d1:73:23:5c:9a:4a:eb:67:
a2:d0:80:04:96:38:d1:0a:8e:ac:ad:43:a6:44:42:
3b:f6:a0:83:0a:14:44:43:a4:37:75:f2:a5:8e:20:
98:22:37:b9:43:ab:44:2b:6b:63:fc:91:b5:45:01:
88:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9F:7C:C0:52:92:71:D8:FB:35:D8:50:FE:8C:0A:E3:E4:11:89:D6
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/OJ98wFKScdj7NdhQ_owK4-QRidY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:2f:09:9b:48:d1:c8:50:2d:b9:fd:a9:0c:9b:64:63:29:d6:
65:cb:2a:2a:e8:82:08:1f:24:3f:7d:a8:30:f1:78:88:69:b9:
ce:66:93:e3:ef:4f:0e:6d:70:18:ab:06:70:c8:84:c3:52:0a:
69:ce:d1:2f:a7:17:0d:a8:20:ab:ba:ca:53:42:f9:f9:6f:ee:
40:a9:f6:e9:ee:e3:85:ad:f2:59:59:7e:a2:a5:74:40:63:8c:
ae:c0:c3:e4:dd:3d:4f:33:db:8c:4f:73:8d:3e:47:75:7b:fa:
37:59:ad:5c:8d:33:83:c2:eb:68:e9:e3:79:45:95:99:5f:2f:
25:54:46:0e:01:3d:a2:7f:92:97:bf:17:44:38:b7:8d:4d:4d:
a3:6f:fc:e1:e3:88:72:85:c0:88:82:f4:86:7f:cc:b3:9c:c3:
e4:9f:c6:22:68:39:ff:39:13:f1:96:68:a6:3e:34:7e:15:a8:
48:7c:a3:f4:85:a7:23:ce:c4:cb:c1:ce:18:62:44:e4:c2:99:
22:06:93:a1:b8:04:cf:a8:01:76:43:1d:0f:1e:85:e1:8c:b0:
66:e5:6e:16:63:70:6f:9b:b1:40:af:ee:a6:61:2e:e7:54:6b:
e1:f3:6a:69:6a:98:83:7f:92:2c:c1:f4:df:19:01:b0:b9:0d:
56:c2:55:e6
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQjalW6BLf8t3O82g9t3gluMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjUwMTAxMTk0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODlmN2NjMDUyOTI3MWQ4ZmIzNWQ4NTBmZThjMGFlM2U0MTE4OWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncR3BL+rLtMjqJtAmUiD7b9Cbv3i
ZxzuSvRd7DoqgQ/6sYY9P24U1G16esg/Y7ht3Mkr85UKo6Og40YHh7alJOM7FVuf
k/2sX6HyT5shZQDCEJzdA5+LiwffQTK0A5Vcb6PPDZcj6zJX+CRiXDclnlQzvMSJ
zyNqocqMhJuR+zYLsWikVOcmV3BzIXM/D/MOs203Jx2grPCgu0izC8oTHWUzBJ/i
YgBDE8APafQIuzz+wCLOjL+RpvNJkVYVDRyWDtS0u2tJ48lD0XMjXJpK62ei0IAE
ljjRCo6srUOmREI79qCDChREQ6Q3dfKljiCYIje5Q6tEK2tj/JG1RQGIJQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFDiffMBSknHY+zXYUP6MCuPkEYnWMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvT0o5OHdGS1NjZGo3TmRoUV9vd0s0LVFSaWRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkX0wDQYJ
KoZIhvcNAQELBQADggEBADgvCZtI0chQLbn9qQybZGMp1mXLKirogggfJD99qDDx
eIhpuc5mk+PvTw5tcBirBnDIhMNSCmnO0S+nFw2oIKu6ylNC+flv7kCp9unu44Wt
8llZfqKldEBjjK7Aw+TdPU8z24xPc40+R3V7+jdZrVyNM4PC62jp43lFlZlfLyVU
Rg4BPaJ/kpe/F0Q4t41NTaNv/OHjiHKFwIiC9IZ/zLOcw+SfxiJoOf85E/GWaKY+
NH4VqEh8o/SFpyPOxMvBzhhiROTCmSIGk6G4BM+oAXZDHQ8eheGMsGblbhZjcG+b
sUCv7qZhLudUa+HzamlqmIN/kizB9N8ZAbC5DVbCVeY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:57 2025 by rpki-client