Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/Ok0vrfBiQoMx2yOICc_Ms0nafMk.roa
File: Ok0vrfBiQoMx2yOICc_Ms0nafMk.roa (raw, json)
Hash identifier: Noy4lzPYtLYuU0NOD7ofQ9Q9f+mLZx7PNMi95+72TsA=
Subject key identifier: 3A:4D:2F:AD:F0:62:42:83:31:DB:23:88:09:CF:CC:B3:49:DA:7C:C9
Certificate issuer: /CN=39b463372b9ddf448b3fc3eaed58441194782d06
Certificate serial: 05959898
Authority key identifier: 39:B4:63:37:2B:9D:DF:44:8B:3F:C3:EA:ED:58:44:11:94:78:2D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObRjNyud30SLP8Pq7VhEEZR4LQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/Ok0vrfBiQoMx2yOICc_Ms0nafMk.roa
Signing time: Tue 18 Jan 2022 12:53:42 +0000
ROA not before: Tue 18 Jan 2022 12:53:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203936
IP address blocks: 185.118.191.0/24 maxlen: 24
185.118.190.0/23 maxlen: 23
185.118.190.0/24 maxlen: 24
185.118.189.0/24 maxlen: 24
185.118.188.0/24 maxlen: 24
185.253.144.0/22 maxlen: 22
45.144.248.0/22 maxlen: 22
193.39.95.0/24 maxlen: 24
193.39.94.0/24 maxlen: 24
193.39.93.0/24 maxlen: 24
193.39.92.0/24 maxlen: 24
2a03:6280::/29 maxlen: 29
2a0c:3cc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93690008 (0x5959898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b463372b9ddf448b3fc3eaed58441194782d06
Validity
Not Before: Jan 18 12:53:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a4d2fadf062428331db238809cfccb349da7cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:8d:7b:a4:fe:83:cc:ca:c2:b6:48:58:6d:
32:e5:be:57:2a:96:4c:68:d3:59:07:dc:c8:96:f0:
fa:27:a5:ae:1d:be:56:c6:4e:3c:e1:cd:c1:40:8d:
1d:7b:f9:e7:10:6c:9c:2f:04:27:9a:32:0e:aa:2c:
66:00:c4:69:9b:dc:51:d8:3e:59:99:f3:db:81:dc:
ce:31:a0:a9:cb:41:4d:55:33:0c:06:af:a3:f5:df:
2b:36:be:b5:46:c5:18:64:9d:f4:61:c7:00:6a:bd:
96:d8:9b:72:6e:3f:2d:16:d8:bd:8d:7f:1c:d6:d4:
87:61:ad:51:a5:66:f9:94:f3:68:23:6e:2a:85:6c:
03:e7:85:09:bb:2b:32:43:92:26:a5:40:c7:55:41:
06:40:eb:e0:d3:8c:b8:7d:6e:29:46:3e:53:b8:7c:
26:15:ed:1d:b8:65:9f:88:93:22:49:da:e1:4f:01:
a2:fc:ec:1b:b5:c2:b0:f4:16:84:81:c9:1e:7b:ad:
c1:aa:a4:46:4d:11:4f:4b:af:0b:77:ad:2b:94:84:
9e:ba:50:36:f6:55:29:23:47:5d:ba:da:cd:4e:92:
14:8f:b4:ec:84:8d:ec:66:de:6d:51:99:8c:63:0d:
a8:75:97:b3:de:4f:b3:0c:32:ef:cf:93:16:c2:56:
4b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4D:2F:AD:F0:62:42:83:31:DB:23:88:09:CF:CC:B3:49:DA:7C:C9
X509v3 Authority Key Identifier:
keyid:39:B4:63:37:2B:9D:DF:44:8B:3F:C3:EA:ED:58:44:11:94:78:2D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObRjNyud30SLP8Pq7VhEEZR4LQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/Ok0vrfBiQoMx2yOICc_Ms0nafMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/ObRjNyud30SLP8Pq7VhEEZR4LQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.248.0/22
185.118.188.0/22
185.253.144.0/22
193.39.92.0/22
IPv6:
2a03:6280::/29
2a0c:3cc0::/32
Signature Algorithm: sha256WithRSAEncryption
56:1e:23:d6:5a:cc:7d:a8:60:c9:44:74:cc:1b:ce:76:44:85:
a6:68:f4:72:06:c9:b8:62:ca:91:74:2b:ed:de:e1:6a:00:e5:
af:c8:59:34:d8:b9:fa:b6:ab:e0:5e:55:46:6b:a5:2f:e1:ce:
26:7b:cc:e7:7d:c2:55:09:e8:11:41:6a:40:7d:8a:a1:9a:33:
4e:6c:ce:8a:de:15:26:ae:d9:d2:57:24:c1:bb:f0:63:10:17:
12:1b:23:e0:a3:c5:8e:fc:75:5a:35:15:50:e6:54:51:0b:fe:
9f:01:e1:a3:d5:78:7e:78:2d:f9:31:95:8a:ec:63:6d:4c:43:
34:6e:fb:18:68:f9:1a:75:64:44:eb:ac:0f:21:39:ad:57:b0:
1e:70:2f:af:f7:e9:8b:41:92:31:52:19:7f:58:2b:54:cd:ba:
4e:e3:da:15:7a:d1:07:40:1e:6f:49:bb:6e:0f:dd:f3:17:11:
c9:c4:8e:f4:01:4b:4d:bf:40:c7:19:84:78:ee:e5:03:ae:fc:
68:ba:df:7c:c3:b7:06:37:fc:33:a6:70:09:0f:6b:4a:76:3b:
e3:58:e9:a5:66:01:29:26:45:45:80:af:bb:ee:9b:fe:89:af:
44:d3:d7:ab:84:0b:b2:90:64:e9:11:0e:03:b8:9d:83:05:24:
66:a9:bd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:32 2025 by rpki-client