Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/OZ0i948V4ME5hQ95-lEOYPQCCG8.roa
File: OZ0i948V4ME5hQ95-lEOYPQCCG8.roa (raw, json)
Hash identifier: vmH99cTsk13toOLNfAIXv1yyUpDs6iJwHau3G+Q6Wu0=
Subject key identifier: 39:9D:22:F7:8F:15:E0:C1:39:85:0F:79:FA:51:0E:60:F4:02:08:6F
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B553282
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/OZ0i948V4ME5hQ95-lEOYPQCCG8.roa
Signing time: Sat 11 Jun 2022 14:53:03 +0000
ROA not before: Sat 11 Jun 2022 14:53:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396073
IP address blocks: 86.38.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190132866 (0xb553282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 11 14:53:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=399d22f78f15e0c139850f79fa510e60f402086f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:30:af:0b:c0:5f:e6:06:98:b3:e0:8e:d3:71:
53:58:6f:b3:0d:b5:09:5b:79:c3:f7:35:8a:eb:47:
ac:c4:c5:99:d8:78:7a:ff:fc:d4:7a:9a:50:b3:8b:
35:ac:93:d8:3f:ff:2f:62:cd:33:94:a4:94:a7:cd:
74:51:8b:b2:45:4f:bc:9c:59:9a:28:30:b6:bc:3b:
da:f7:54:ce:0d:18:e0:fc:54:26:a1:ed:b7:75:80:
ad:5f:66:8d:af:c7:94:cf:31:a2:bc:09:a3:65:dc:
8f:d8:d8:7d:1b:76:a5:4e:ed:74:2f:7d:d2:36:88:
e2:46:1e:09:28:8e:08:c8:0a:e7:b6:be:03:6d:95:
bc:8a:fb:b5:b9:e8:d2:58:07:cb:9d:6d:c2:56:74:
63:18:43:48:01:13:e3:bf:f1:e6:bf:6b:2a:70:b0:
07:c3:8e:23:84:e5:67:0e:22:3c:02:78:49:d7:18:
4f:fe:29:e6:99:32:18:b7:cf:4c:30:c5:d6:2a:45:
3d:b4:50:05:5c:f6:65:89:8d:ae:8d:b0:59:38:54:
ca:ae:68:07:8c:89:de:84:71:8e:59:45:aa:6f:3e:
da:6c:4b:a0:61:7b:e0:06:0b:ec:1c:53:1e:c9:ed:
e1:ea:b6:9d:b6:9c:77:86:79:7f:c1:3b:13:32:d3:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9D:22:F7:8F:15:E0:C1:39:85:0F:79:FA:51:0E:60:F4:02:08:6F
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/OZ0i948V4ME5hQ95-lEOYPQCCG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.225.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:5b:f5:90:66:8b:c9:bd:62:85:99:74:0c:4a:76:b3:9e:b3:
78:26:b7:36:3b:0c:4b:33:b8:7b:92:fc:13:55:df:dc:8e:3a:
48:b3:62:e7:56:20:d2:e2:e7:e5:79:40:c0:6f:1a:a4:a1:04:
19:79:72:0f:75:bf:ad:fc:99:31:df:97:db:61:65:94:22:dc:
5f:b0:e5:a2:af:b3:77:d9:c2:1b:1e:1e:70:e0:32:14:10:e2:
eb:77:86:43:6a:61:bb:8c:35:d8:e0:f3:1e:86:cb:a3:8a:c5:
86:11:0b:fd:26:f1:14:35:88:bb:6d:ab:ae:a0:90:b7:50:46:
e8:b5:4b:76:96:ee:d0:00:0a:39:13:cb:17:11:80:b2:ee:da:
04:9b:93:5b:0f:a2:ac:da:78:a1:3a:29:70:13:a0:bc:e3:7b:
03:3d:1b:9a:f4:11:f5:6b:1a:66:94:2d:5e:df:c7:cc:5c:4f:
94:f4:af:e5:25:18:b0:41:29:59:2b:f7:40:34:6f:1c:23:1a:
90:5a:4c:ea:25:d1:5d:42:4e:5a:57:3f:7e:7f:8f:0b:3f:bb:
55:99:7b:45:00:64:10:b1:99:d7:a7:0f:6e:89:b2:bf:53:b8:
5d:fc:3d:7f:62:22:28:2b:23:04:aa:0c:5b:a5:e9:bd:bf:b4:
28:3b:6f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:08 2025 by rpki-client