Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/ohLDHYYM-6riY80Gf6tIoXutn50.roa
File: ohLDHYYM-6riY80Gf6tIoXutn50.roa (raw, json)
Hash identifier: A/KVrsQ8NY9hCStMBR7OtU/CrgCULzG//UWGv5yJVvE=
Subject key identifier: A2:12:C3:1D:86:0C:FB:AA:E2:63:CD:06:7F:AB:48:A1:7B:AD:9F:9D
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 0A36F391
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/ohLDHYYM-6riY80Gf6tIoXutn50.roa
Signing time: Sat 01 Jan 2022 11:58:10 +0000
ROA not before: Sat 01 Jan 2022 11:58:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1836
IP address blocks: 82.211.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171373457 (0xa36f391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jan 1 11:58:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a212c31d860cfbaae263cd067fab48a17bad9f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:01:ff:5d:53:3e:7e:18:26:08:50:bf:92:
f8:b2:2d:53:e0:77:a0:5b:52:f7:a3:b3:48:62:59:
dd:64:fa:05:85:b0:6c:0c:a4:ea:b4:89:79:f4:6a:
14:86:c4:ef:61:2f:4f:12:2d:9a:78:73:8d:77:cd:
fb:ba:84:d5:13:85:af:6f:89:de:b2:ea:93:3d:2e:
95:4b:89:27:66:05:05:50:31:5c:92:d1:36:3a:8a:
bd:68:45:12:1f:42:5d:64:c3:63:e9:e6:0f:d1:e3:
7a:5d:1b:ef:65:47:0c:7e:d8:c3:1c:80:6e:e8:18:
81:3c:d9:55:5d:70:82:c8:50:1c:5b:9f:20:2b:e7:
66:bc:a0:be:65:6a:2e:8d:a6:09:95:2a:42:92:a4:
a2:08:75:50:2b:ce:09:0b:08:9d:e0:78:08:8c:5b:
c8:8f:c4:b1:00:99:0b:fe:db:1b:28:93:a5:3f:1d:
20:5d:34:3f:4c:de:1b:78:41:49:8b:77:f0:a2:09:
a5:bf:f9:d3:ca:62:12:41:a2:40:46:7e:6e:4f:d5:
4a:a7:2c:31:ab:c6:0f:73:d6:40:a0:1a:9d:88:c1:
bf:39:f5:95:4e:de:32:9c:a6:99:be:11:b3:04:e7:
21:9a:86:75:15:e1:da:25:73:d2:ac:97:b5:cd:9e:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:12:C3:1D:86:0C:FB:AA:E2:63:CD:06:7F:AB:48:A1:7B:AD:9F:9D
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/ohLDHYYM-6riY80Gf6tIoXutn50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.211.17.0/24
Signature Algorithm: sha256WithRSAEncryption
90:d2:ca:a0:ab:3e:5b:03:bb:98:00:58:fe:75:9b:3c:0c:d1:
c4:b0:73:36:c2:ef:0b:8b:8c:5b:7c:03:c7:80:9d:77:d4:c4:
6b:69:22:e3:62:eb:cc:95:aa:f9:8a:d2:8a:f7:e4:3c:a4:69:
98:49:73:64:6d:84:54:89:06:3b:3b:d6:fa:10:bc:40:78:e0:
8a:76:d9:c2:79:75:c9:07:e2:90:49:23:2b:3e:4b:3a:07:53:
24:45:05:e1:ef:21:0b:9b:b3:42:f1:3f:17:42:dc:14:94:b2:
62:f4:53:2c:13:7b:c7:cb:70:23:62:f3:5d:23:fe:93:41:9e:
6b:e6:38:d2:ed:21:70:e4:cc:91:d0:b4:b1:cd:3b:24:e2:e8:
49:8a:36:d6:82:14:b9:62:f7:46:da:0c:f6:c5:54:21:98:e2:
fb:b2:30:ed:8e:68:21:a3:bf:aa:e2:72:27:e7:3a:d0:31:9e:
b3:2e:13:55:84:07:8e:3e:3a:7c:b9:12:1b:7d:03:c3:56:ae:
bf:14:d8:36:3c:a3:cb:8e:12:3d:92:59:fe:0c:da:4d:c0:5e:
b6:98:d5:ae:cc:0f:02:a1:25:87:f9:eb:b4:78:fa:33:90:2e:
9f:96:92:74:a8:03:c9:b0:e6:e7:f8:fc:5f:1a:9d:f2:4f:2f:
ad:db:ba:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:02 2025 by rpki-client