Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/OYW_nNvQZXH0LlD6DB84T6F7r28.roa
File: OYW_nNvQZXH0LlD6DB84T6F7r28.roa (raw, json)
Hash identifier: 63r+1ldeuN/ukQCfZ/kWTyl/Rcai0ofaBy9GqP63DlU=
Subject key identifier: 39:85:BF:9C:DB:D0:65:71:F4:2E:50:FA:0C:1F:38:4F:A1:7B:AF:6F
Certificate issuer: /CN=b6ae61814f7150c9b8117f498cab94db72a8339c
Certificate serial: 9272
Authority key identifier: B6:AE:61:81:4F:71:50:C9:B8:11:7F:49:8C:AB:94:DB:72:A8:33:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tq5hgU9xUMm4EX9JjKuU23KoM5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/OYW_nNvQZXH0LlD6DB84T6F7r28.roa
Signing time: Tue 26 Apr 2022 16:02:13 +0000
ROA not before: Tue 26 Apr 2022 16:02:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.214.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37490 (0x9272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ae61814f7150c9b8117f498cab94db72a8339c
Validity
Not Before: Apr 26 16:02:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3985bf9cdbd06571f42e50fa0c1f384fa17baf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:a4:cb:31:b5:13:fe:dc:09:7f:17:24:ff:
fd:a5:55:f8:7b:9b:db:67:c9:bd:29:05:d4:b7:7d:
da:60:1c:77:39:9c:b3:97:7b:7c:ea:e5:f4:8f:1d:
6e:4e:50:3b:94:2c:24:50:62:69:01:4a:29:95:70:
0b:ec:9f:10:9f:f5:e3:81:4e:4c:50:a2:59:54:55:
3f:6b:fc:55:41:2a:04:aa:e4:a2:90:f8:29:87:a8:
59:70:32:7e:78:8c:27:b2:8e:30:31:66:98:8e:54:
ce:be:c5:a4:9c:29:b2:58:7a:e3:56:d7:41:38:0a:
31:ca:7b:ec:cb:ea:7f:bb:05:af:2f:19:61:85:ab:
f0:86:d4:3d:6b:90:03:7a:ae:b5:1d:12:d7:cc:f3:
14:d8:d6:eb:b4:83:23:78:79:c9:1b:2d:5a:88:b1:
c1:37:f5:4f:e8:eb:3b:bf:9b:67:91:55:97:f3:75:
07:e6:31:97:7e:8f:56:9a:06:c7:bf:18:95:52:fc:
8e:b1:97:b0:bc:80:75:62:e6:40:e6:aa:89:05:9f:
ee:ae:cd:ef:5c:2b:c0:22:41:b6:7d:01:1c:b8:80:
bb:51:ec:34:c4:03:3f:1e:45:71:e8:bb:ea:92:d2:
89:40:8f:a8:be:1d:3e:1e:8f:86:c1:50:6b:0f:d9:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:85:BF:9C:DB:D0:65:71:F4:2E:50:FA:0C:1F:38:4F:A1:7B:AF:6F
X509v3 Authority Key Identifier:
keyid:B6:AE:61:81:4F:71:50:C9:B8:11:7F:49:8C:AB:94:DB:72:A8:33:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tq5hgU9xUMm4EX9JjKuU23KoM5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/OYW_nNvQZXH0LlD6DB84T6F7r28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/tq5hgU9xUMm4EX9JjKuU23KoM5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.166.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:04:db:47:b1:86:77:c2:ec:ca:59:af:b8:f4:27:07:71:3a:
7a:db:8d:45:ba:c8:84:6d:6e:b6:2c:0b:2e:49:47:1a:9b:79:
75:43:c9:55:ee:a0:cc:72:b2:b7:ad:1b:96:6a:59:0f:ea:1b:
1a:a8:e2:cf:03:d8:f8:3a:66:0a:a7:b0:1c:86:c8:a6:e2:b0:
51:fc:19:e3:3b:ca:4b:c6:ee:e7:09:65:ee:b6:d9:f5:ad:50:
20:47:2b:e9:95:a3:b3:63:7b:b0:c5:b6:dd:9c:a5:5c:5a:7e:
34:39:6d:de:d2:99:5c:09:20:c7:74:08:f4:32:3d:99:cf:7b:
51:40:16:94:ca:d6:eb:58:c4:0f:56:de:a6:6f:08:7c:06:48:
13:70:b7:43:06:10:2d:c9:85:55:a2:47:0b:eb:71:9e:21:28:
36:27:16:cf:3b:47:cd:11:3f:a1:86:93:9e:60:1e:d1:11:a6:
b4:e6:bd:ff:33:72:a0:74:f5:ae:76:9c:7a:01:58:d7:ad:fe:
51:5e:33:bb:ac:9a:06:93:fc:56:01:82:32:01:d4:7b:02:75:
a8:26:a5:71:e4:3f:eb:84:f6:77:ab:f5:37:0d:7f:9f:e7:5f:
a0:dd:cb:33:8b:cf:44:7f:0a:49:5e:05:58:ce:3c:21:08:2d:
69:e1:a9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:31:08 2025 by rpki-client