Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/O4G0X_PGrMW4h3U4KT4uijqkrhQ.roa
File: O4G0X_PGrMW4h3U4KT4uijqkrhQ.roa (raw, json)
Hash identifier: 5S4xFFqPIUJkH1oerMYER6zbbt7AyzO7IDLvTuazmD0=
Subject key identifier: 3B:81:B4:5F:F3:C6:AC:C5:B8:87:75:38:29:3E:2E:8A:3A:A4:AE:14
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0194228DCEB558D1B2C12F8DB83BDD5BCE23
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/O4G0X_PGrMW4h3U4KT4uijqkrhQ.roa
Signing time: Wed 01 Jan 2025 15:48:26 +0000
ROA not before: Wed 01 Jan 2025 15:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.217.192.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ce:b5:58:d1:b2:c1:2f:8d:b8:3b:dd:5b:ce:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Jan 1 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b81b45ff3c6acc5b8877538293e2e8a3aa4ae14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b6:c3:7c:7a:d1:b6:94:4b:cf:13:9b:93:09:
04:1e:62:58:fa:12:55:bf:4d:81:4e:2f:70:ef:ec:
c1:7d:ae:12:34:21:1f:9f:af:fa:ad:50:71:ec:c2:
f8:f0:29:b7:99:33:25:c2:ed:07:b2:8f:a7:73:66:
69:48:cf:9a:83:c8:d0:77:37:16:c4:13:a8:f4:68:
44:15:74:5c:df:c3:8a:66:a9:63:1a:52:01:d3:a7:
49:b7:6f:29:ad:9f:28:d5:92:19:70:1a:6b:05:7f:
72:b6:79:f4:07:07:ff:9f:13:4d:7c:76:6c:82:90:
9d:c5:44:80:6a:68:59:41:6f:88:25:ac:db:87:d8:
a3:2d:b7:fe:69:76:a9:16:bd:b1:ec:d5:00:e2:0e:
5a:bf:e0:af:1a:7e:28:ae:58:2b:48:17:df:a8:67:
1b:e5:44:e7:a8:d4:61:ba:48:9b:5d:1d:a2:ae:fe:
1e:5c:66:64:0f:8c:d4:7b:a7:0c:b5:c2:08:61:18:
4b:67:c1:85:70:0c:f6:00:de:86:be:cf:f3:27:b8:
cc:7b:fd:32:8b:08:90:47:f8:d0:24:ce:b4:80:00:
73:11:1a:84:cc:e3:d8:15:2b:9c:b4:61:18:f2:c6:
37:14:59:bc:f2:c2:ee:af:c6:c4:15:20:6f:ec:51:
73:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:81:B4:5F:F3:C6:AC:C5:B8:87:75:38:29:3E:2E:8A:3A:A4:AE:14
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/O4G0X_PGrMW4h3U4KT4uijqkrhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.192.0/23
Signature Algorithm: sha256WithRSAEncryption
04:a3:ea:91:6f:f6:4e:f1:23:71:5e:44:50:d0:de:e1:32:ce:
9d:53:ca:f4:0f:af:51:9e:27:f9:46:1a:63:5c:20:7b:0e:9f:
fb:2b:79:b0:9c:d9:58:81:77:d5:92:ca:d8:c0:1d:50:d1:55:
5d:d3:b2:af:56:63:9f:78:31:da:be:be:d3:cd:c0:92:37:cd:
b8:1c:56:39:68:d6:b5:cc:14:f6:3f:97:d5:12:18:bc:f5:42:
a0:bd:13:4d:87:a6:14:e4:a2:fa:48:ab:11:78:32:45:1c:46:
1c:05:e3:61:c4:22:5a:65:05:0f:70:e0:70:e6:96:4c:4c:f3:
4c:52:50:66:25:90:4d:ec:8c:4a:fc:78:0d:bf:b1:7a:0d:53:
bd:06:1a:49:97:f0:e0:a2:fe:2c:06:68:53:4d:03:9c:37:e4:
77:03:80:63:d9:76:1e:ef:b4:7e:c0:92:70:7c:27:3a:74:92:
32:d6:c8:9c:13:29:e0:b7:63:d8:00:6e:62:15:22:6e:ee:9b:
aa:f9:b2:ca:97:6d:a2:4f:a1:f5:cf:83:5b:bf:de:3d:9c:6a:
02:2f:f5:fb:b4:0e:a1:42:4b:19:bf:92:b9:85:0a:c0:9e:1a:
7e:59:dd:44:26:9f:5b:8b:64:d8:74:26:a5:c4:11:de:02:11:
fa:d6:da:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:20 2025 by rpki-client