Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ef846c-ec08-4f79-b93a-ff4f8394b91c/1/OmVqWgfxZJdbHOcSYHomM906N7g.roa
File: OmVqWgfxZJdbHOcSYHomM906N7g.roa (raw, json)
Hash identifier: rMCh8z20m/n8dGJswGnDXedqp7oNG8gPhgVYSAU/2MA=
Subject key identifier: 3A:65:6A:5A:07:F1:64:97:5B:1C:E7:12:60:7A:26:33:DD:3A:37:B8
Certificate issuer: /CN=d1e55f25295d4d82db20721cd8117a7d283baa4c
Certificate serial: 32DF34B0
Authority key identifier: D1:E5:5F:25:29:5D:4D:82:DB:20:72:1C:D8:11:7A:7D:28:3B:AA:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eVfJSldTYLbIHIc2BF6fSg7qkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ef846c-ec08-4f79-b93a-ff4f8394b91c/1/OmVqWgfxZJdbHOcSYHomM906N7g.roa
Signing time: Sat 01 Jan 2022 01:56:24 +0000
ROA not before: Sat 01 Jan 2022 01:56:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49515
IP address blocks: 185.230.32.0/22 maxlen: 24
188.95.32.0/21 maxlen: 24
2a02:ca80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 853488816 (0x32df34b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e55f25295d4d82db20721cd8117a7d283baa4c
Validity
Not Before: Jan 1 01:56:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a656a5a07f164975b1ce712607a2633dd3a37b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:6d:f5:bf:fa:97:20:2d:da:8e:ce:11:38:
70:ee:6e:f2:81:bf:01:4d:8a:7b:fe:db:4e:74:c2:
d0:30:4c:ed:72:a1:f5:36:39:6a:41:b5:6c:90:f1:
97:dc:57:6f:50:f2:85:1c:01:38:1c:e8:f6:49:c7:
92:04:95:40:a7:e2:a9:ec:4f:ab:cf:17:24:9c:4e:
15:ca:fc:c4:e3:ed:28:bf:87:f9:14:9c:5f:0c:e3:
e8:ef:b7:3a:4c:19:51:f4:9e:ca:9c:93:cb:0b:71:
ed:cc:27:19:08:73:c7:21:6a:ef:2c:70:14:84:51:
40:19:8e:bd:81:3a:49:c7:83:e8:37:17:89:bb:06:
42:34:3a:3b:ea:bb:eb:d5:ca:9a:b7:9c:b0:15:1d:
56:3f:c7:87:09:0c:f5:99:50:58:a5:ae:df:90:48:
52:85:74:3e:f0:04:23:5f:77:ce:96:46:f0:c7:fb:
24:73:78:42:45:5d:f9:c4:bf:c3:0f:cb:53:1e:6e:
bc:8d:c6:f9:a5:75:09:4d:02:39:ae:f1:0a:df:6f:
de:94:65:30:ee:a4:06:ed:f1:2a:57:51:34:b9:4f:
25:f0:d0:73:d7:e7:34:84:91:a6:db:09:af:57:b8:
eb:75:12:c7:67:ed:cb:b6:3d:6c:ab:2e:30:45:85:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:65:6A:5A:07:F1:64:97:5B:1C:E7:12:60:7A:26:33:DD:3A:37:B8
X509v3 Authority Key Identifier:
keyid:D1:E5:5F:25:29:5D:4D:82:DB:20:72:1C:D8:11:7A:7D:28:3B:AA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eVfJSldTYLbIHIc2BF6fSg7qkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ef846c-ec08-4f79-b93a-ff4f8394b91c/1/OmVqWgfxZJdbHOcSYHomM906N7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ef846c-ec08-4f79-b93a-ff4f8394b91c/1/0eVfJSldTYLbIHIc2BF6fSg7qkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.32.0/22
188.95.32.0/21
IPv6:
2a02:ca80::/29
Signature Algorithm: sha256WithRSAEncryption
10:38:bd:df:d9:cd:25:21:07:37:ff:b6:6a:92:8b:46:aa:ba:
69:10:fd:9c:a8:7b:8f:18:a7:36:53:b2:f9:b4:62:79:c9:d4:
d1:0b:3c:60:61:76:0a:a6:5d:2e:b3:86:08:98:0f:f5:91:d3:
19:d3:4b:b9:e9:d3:64:61:bb:fd:9f:41:cf:f1:fe:ea:c6:a6:
35:09:75:c6:75:bf:33:12:52:ae:36:2b:8d:7e:e3:c6:b7:75:
bc:18:31:7c:44:1c:93:ca:d6:db:af:75:fc:6d:31:d8:6a:41:
17:75:37:01:e8:08:11:97:56:09:49:c7:a5:7a:f5:70:4f:21:
48:54:81:9c:20:12:30:19:b7:90:0c:5e:26:5c:b4:9e:d8:aa:
54:24:04:5b:47:62:10:6c:98:68:8f:9a:72:59:62:3f:dd:6c:
74:93:1b:ee:99:1e:a7:4e:1c:4d:a7:1d:06:46:db:83:19:ed:
c7:b8:b5:8f:d5:2d:cd:6a:33:95:9c:0d:5d:3c:e4:b7:88:d1:
a0:f3:24:7e:c3:b3:99:56:cd:a7:9c:81:7d:76:f6:d4:ec:df:
1f:31:ba:6e:f8:50:9d:b8:1c:68:9b:b8:c7:82:d1:dd:29:48:
c1:8b:f7:fe:36:92:9c:ff:7b:39:22:50:73:37:b9:86:bf:39:
ea:26:fa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:20 2025 by rpki-client