Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/oKKHmbobidoKS5C06ppNNL6bp18.roa
File: oKKHmbobidoKS5C06ppNNL6bp18.roa (raw, json)
Hash identifier: wyOlRknkUM9gakv2SZkDnucrjsYyyPoyhVclTbA9HM0=
Subject key identifier: A0:A2:87:99:BA:1B:89:DA:0A:4B:90:B4:EA:9A:4D:34:BE:9B:A7:5F
Certificate issuer: /CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Certificate serial: 0194266AF90AA4519E0A04248B5F53CB7C0A
Authority key identifier: 72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/oKKHmbobidoKS5C06ppNNL6bp18.roa
Signing time: Thu 02 Jan 2025 09:48:52 +0000
ROA not before: Thu 02 Jan 2025 09:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.227.234.0/24 maxlen: 24
185.227.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:f9:0a:a4:51:9e:0a:04:24:8b:5f:53:cb:7c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Validity
Not Before: Jan 2 09:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0a28799ba1b89da0a4b90b4ea9a4d34be9ba75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:e2:3c:e7:b1:d9:0f:58:07:c7:2f:43:61:
ec:75:0b:6c:8b:3e:81:fd:65:30:28:b5:60:e5:d6:
76:de:c8:7e:34:44:ef:bb:41:b9:76:22:98:4b:ec:
b6:6e:89:2f:12:df:48:bd:3a:21:9c:11:2e:a4:cb:
d1:49:f5:82:ba:98:5b:6e:65:a6:35:aa:85:76:b3:
6b:40:53:8f:3b:c2:e9:c1:d1:ba:4c:0f:3a:1d:0a:
61:8d:f4:a7:08:9e:e2:23:8f:9e:f7:ed:f5:3e:74:
9b:df:d0:27:96:d3:a8:6f:6f:5c:9f:1d:ee:98:39:
81:53:77:bc:2d:d1:2e:e0:45:ee:56:4d:f2:f5:12:
e8:83:86:43:ca:9c:93:11:7b:cb:3c:b8:bc:5d:a4:
8d:8e:ab:47:6e:cd:ca:2f:de:09:21:85:35:6c:d2:
98:61:fd:14:ba:f3:5f:20:87:e3:68:58:13:41:11:
04:03:a0:13:a6:fa:01:89:4e:93:f6:ab:e7:70:0b:
9b:7a:2f:3d:0f:42:62:28:24:a3:3d:6f:ba:9b:b7:
11:f9:79:55:e8:64:d2:d0:f5:a4:59:6e:70:79:7e:
95:50:6e:38:09:7b:30:f1:70:6b:cd:ba:a2:85:ca:
b1:6a:90:51:e9:59:90:10:2b:d3:f8:02:23:95:e4:
1d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A2:87:99:BA:1B:89:DA:0A:4B:90:B4:EA:9A:4D:34:BE:9B:A7:5F
X509v3 Authority Key Identifier:
keyid:72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/oKKHmbobidoKS5C06ppNNL6bp18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.234.0/23
Signature Algorithm: sha256WithRSAEncryption
47:84:9e:04:0f:6c:10:c9:0d:55:20:67:f8:92:b2:5e:5c:c5:
37:67:f2:c6:65:2e:43:95:b4:b8:a6:2b:e9:34:56:03:93:ed:
1d:ac:86:04:82:8a:0b:4e:cc:8c:fe:90:5a:af:2a:28:fd:e4:
92:26:5c:20:08:93:84:23:d7:b5:72:2c:6c:cf:e1:82:0c:5c:
82:a8:ce:74:ff:17:8f:23:90:9a:3c:6a:87:d4:a5:c9:e0:27:
97:eb:b1:14:ab:ed:3e:3e:90:93:4b:71:a7:e1:3f:9a:15:d2:
83:e2:b2:b4:f1:6d:b4:71:fc:f5:84:fa:3a:b9:93:70:e8:3c:
28:82:03:05:90:20:9f:06:d4:f5:ad:fc:5d:c1:61:f7:b1:60:
47:e5:89:9d:b5:87:77:b7:b6:72:9a:70:69:1b:5b:31:a1:3d:
91:c9:d5:83:5a:c8:b0:50:e9:31:0b:28:1a:7c:4f:4b:e0:22:
ed:85:b7:d0:c6:c0:36:44:69:66:c1:ab:95:b9:b1:ee:de:b4:
58:9e:e8:b9:32:43:56:0f:df:2d:78:fd:8b:14:5a:f5:00:2d:
7e:13:5a:23:22:09:9d:0f:be:dd:4e:e8:29:ea:f5:b0:44:d7:
a3:c9:65:41:5c:0e:38:9e:2d:a4:45:b5:b5:2e:63:d9:ad:3f:
0b:23:7d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:56:01 2025 by rpki-client