Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/OL--k4HWjTYCqoOiHkb6J7Zbllc.roa
File: OL--k4HWjTYCqoOiHkb6J7Zbllc.roa (raw, json)
Hash identifier: JA4H42s/1jVK78rUsdByr4/C6vbBqxY7qzGRzKdj1HE=
Subject key identifier: 38:BF:BE:93:81:D6:8D:36:02:AA:83:A2:1E:46:FA:27:B6:5B:96:57
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 0194228DEC738D15E0334C4E6D7E00E3DB98
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/OL--k4HWjTYCqoOiHkb6J7Zbllc.roa
Signing time: Wed 01 Jan 2025 15:48:33 +0000
ROA not before: Wed 01 Jan 2025 15:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44400
IP address blocks: 46.143.0.0/22 maxlen: 32
79.127.44.0/23 maxlen: 32
79.127.60.0/23 maxlen: 32
79.127.118.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ec:73:8d:15:e0:33:4c:4e:6d:7e:00:e3:db:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38bfbe9381d68d3602aa83a21e46fa27b65b9657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b6:02:fd:4f:9e:c4:94:47:29:4c:7b:81:f1:
9e:e6:19:e3:82:64:74:dd:17:1d:d0:9e:97:49:7f:
38:e5:c3:b3:50:51:45:67:dd:39:8a:bb:cd:b2:79:
26:4e:4d:ff:86:36:bb:d3:bc:90:ca:25:2b:c8:da:
9a:5e:47:8a:02:f9:f2:58:90:1f:77:d1:da:f3:2e:
58:b8:f8:84:c6:9c:2d:17:0b:79:d6:75:9b:59:f6:
a0:be:71:ea:93:64:12:6f:c0:8c:03:47:87:af:80:
7c:cd:7a:61:67:1c:ca:c0:3b:d3:80:43:f3:68:b8:
20:cc:9d:15:8b:7f:43:b1:a0:af:7f:92:42:4c:63:
77:41:5b:6a:a8:37:41:9b:4b:c8:df:b9:4c:e3:e2:
9f:18:8b:e8:bc:9b:a7:2f:64:be:d8:1e:f4:81:07:
2c:24:a1:b3:04:73:62:af:7f:fc:09:4a:02:e4:c9:
5f:19:d3:b2:da:3b:dc:50:af:cd:2e:5a:75:5c:ef:
16:c4:bd:10:69:96:92:7d:31:64:82:ea:68:44:6c:
ec:1b:d3:b9:78:73:8d:ec:f9:ec:a6:7f:10:32:04:
ef:98:10:61:64:22:9a:88:be:a1:23:94:76:f7:74:
ae:7a:22:71:42:ad:e5:08:cd:49:56:ec:fb:41:76:
97:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BF:BE:93:81:D6:8D:36:02:AA:83:A2:1E:46:FA:27:B6:5B:96:57
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/OL--k4HWjTYCqoOiHkb6J7Zbllc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.0.0/22
79.127.44.0/23
79.127.60.0/23
79.127.118.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:9e:be:73:2e:62:b7:29:74:39:d7:7b:1b:10:54:7e:52:2e:
76:85:2f:20:7f:f1:03:df:09:5c:a4:80:65:91:36:1c:bb:de:
e0:9b:a5:ab:be:4f:1b:9a:88:15:bd:d1:c9:6d:8b:7b:c7:86:
6a:73:f9:3f:3a:d3:93:a2:40:35:c8:fd:07:53:2c:7e:cc:72:
dd:6a:33:2e:82:52:94:6b:a5:e8:d5:b7:d2:d4:59:20:a1:6d:
a8:c9:6a:f7:ef:b0:e0:8a:1c:b6:6a:64:35:c6:53:45:74:d2:
af:04:3f:52:db:5d:1f:8c:df:f7:a8:b2:97:56:a8:53:ec:87:
3f:a6:4a:e9:ac:dd:c4:5e:e0:10:73:5a:8c:8a:83:fa:ac:5f:
7f:47:c3:5d:2a:68:24:65:40:a1:66:3d:d8:58:3f:81:0a:4e:
7b:81:b6:5c:50:d3:56:4f:9b:a5:c7:3d:8d:45:f6:88:66:5e:
e0:d1:fb:cd:88:4d:18:57:28:7d:36:ba:04:ec:12:cf:bc:ba:
bd:1f:74:cd:42:89:d1:40:98:15:c4:22:89:59:a0:2f:ab:21:
e6:d9:81:2c:4b:18:7c:8a:14:f0:21:12:4c:9e:bb:fe:89:14:
2a:af:d6:21:28:1d:3a:fc:9b:4d:c7:42:b4:ea:6d:ad:26:90:
40:e5:ff:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:19:17 2025 by rpki-client