Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c74190-3129-4363-b519-74dcd96fa6ee/1/O8k_hdihOqtBZ9uWaPVsPLgQsf4.roa
File: O8k_hdihOqtBZ9uWaPVsPLgQsf4.roa (raw, json)
Hash identifier: nsfiImzIGD5qBBBvw8x8ElzKgoEoKzcWlTFJ738Di2Q=
Subject key identifier: 3B:C9:3F:85:D8:A1:3A:AB:41:67:DB:96:68:F5:6C:3C:B8:10:B1:FE
Certificate issuer: /CN=583f4053e432c62dce0460dbecb17c8669c7b502
Certificate serial: 018571F10026635DE6B162E437234EF44355
Authority key identifier: 58:3F:40:53:E4:32:C6:2D:CE:04:60:DB:EC:B1:7C:86:69:C7:B5:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD9AU-Qyxi3OBGDb7LF8hmnHtQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c74190-3129-4363-b519-74dcd96fa6ee/1/O8k_hdihOqtBZ9uWaPVsPLgQsf4.roa
Signing time: Mon 02 Jan 2023 10:04:57 +0000
ROA not before: Mon 02 Jan 2023 10:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47203
IP address blocks: 185.94.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f1:00:26:63:5d:e6:b1:62:e4:37:23:4e:f4:43:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583f4053e432c62dce0460dbecb17c8669c7b502
Validity
Not Before: Jan 2 10:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bc93f85d8a13aab4167db9668f56c3cb810b1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:d4:f1:b1:fc:60:51:01:cc:83:74:08:db:
73:97:5f:e9:cf:a7:0a:79:ad:26:c5:b5:7e:23:64:
f1:1c:2f:61:45:4d:8e:73:d1:65:27:7f:b5:f2:17:
c1:be:3a:6a:5d:1d:ba:95:4d:d7:3e:df:b0:17:ec:
f0:5f:88:79:4c:16:ca:d2:b3:82:d3:06:bb:14:85:
f2:b8:61:9c:91:ae:ff:81:bd:b0:4a:fa:9c:2d:3f:
c7:50:cc:9b:10:bc:53:e3:bd:ae:20:7f:93:f4:b7:
75:49:a5:fc:2e:9e:f5:26:82:3a:25:fc:59:45:62:
f6:be:8d:45:5f:68:d4:7e:60:de:2f:88:3f:72:1a:
02:f4:1f:11:c7:98:17:f9:02:4e:d7:5d:86:68:49:
93:66:de:c6:e2:52:16:bd:47:73:ee:1a:ab:74:f4:
4a:db:91:40:d6:2a:fa:eb:ca:b2:56:9d:94:3b:23:
29:19:45:cd:69:b9:94:79:a6:0f:41:15:0e:a5:6a:
f5:50:05:50:de:c0:5a:0f:a0:49:7f:3a:b1:26:b1:
10:10:1d:d6:e1:3c:5d:81:5b:43:d4:15:3b:ce:27:
5e:28:a3:c9:55:d6:57:c1:97:ca:6e:91:2d:01:0f:
79:19:04:cb:6f:4d:90:0d:ab:31:ba:83:87:d4:3b:
c4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C9:3F:85:D8:A1:3A:AB:41:67:DB:96:68:F5:6C:3C:B8:10:B1:FE
X509v3 Authority Key Identifier:
keyid:58:3F:40:53:E4:32:C6:2D:CE:04:60:DB:EC:B1:7C:86:69:C7:B5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD9AU-Qyxi3OBGDb7LF8hmnHtQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c74190-3129-4363-b519-74dcd96fa6ee/1/O8k_hdihOqtBZ9uWaPVsPLgQsf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c74190-3129-4363-b519-74dcd96fa6ee/1/WD9AU-Qyxi3OBGDb7LF8hmnHtQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.212.0/22
Signature Algorithm: sha256WithRSAEncryption
51:c0:06:ee:81:76:de:c8:ab:e4:5b:d8:49:f7:e6:79:ba:3d:
16:df:5e:73:c3:ed:34:e3:ec:49:d8:38:a5:bc:7f:21:70:6e:
6f:1c:16:77:03:ce:ef:80:67:78:7d:dd:35:7d:da:39:92:c8:
92:c0:7d:89:2a:f5:46:6d:a8:33:b6:50:70:89:c5:f8:cf:39:
e4:25:fd:c9:90:0d:a4:77:b5:99:e1:4a:e1:0a:98:64:83:f2:
de:6e:59:18:ff:24:aa:9e:0c:6f:4c:23:a1:ab:64:8f:e9:1f:
a7:c9:59:67:38:04:e1:24:a3:de:b6:1a:88:33:b3:e6:1a:74:
c0:de:a9:31:68:48:97:22:cd:e1:be:01:3d:46:87:18:61:c2:
35:7f:9c:ba:b8:d0:25:15:48:14:c4:e4:e1:a5:b6:a9:17:25:
79:d8:58:23:e5:2a:17:de:ef:eb:ee:d4:ea:18:18:a6:0b:d9:
4e:e6:04:81:b1:3a:4f:b0:ae:45:3e:ce:c6:09:7a:da:22:6f:
26:d6:54:cf:2f:da:3a:d0:3e:3b:7d:a3:7b:e6:de:f6:2b:7e:
90:7b:f8:8c:5c:bd:61:c9:8c:9c:a8:90:a7:09:6e:8d:03:d6:
e5:78:78:51:9a:b7:96:2b:d9:bd:6b:ed:cc:b6:3d:fb:32:55:
5b:3a:f7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:30:38 2025 by rpki-client