Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OIHAq81uj4pySfEfG9eUoa80i74.roa
File: OIHAq81uj4pySfEfG9eUoa80i74.roa (raw, json)
Hash identifier: jQc6bIBtroGrlByfl+83d77VLvvOoGP15jFtJjFXyAM=
Subject key identifier: 38:81:C0:AB:CD:6E:8F:8A:72:49:F1:1F:1B:D7:94:A1:AF:34:8B:BE
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 018E434E3EB0E67DFF4D4FE36E15A659932A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OIHAq81uj4pySfEfG9eUoa80i74.roa
Signing time: Fri 15 Mar 2024 18:09:44 +0000
ROA not before: Fri 15 Mar 2024 18:09:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64289
IP address blocks: 185.176.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:43:4e:3e:b0:e6:7d:ff:4d:4f:e3:6e:15:a6:59:93:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 15 18:09:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3881c0abcd6e8f8a7249f11f1bd794a1af348bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:78:dc:93:30:a1:f1:f6:a0:0d:eb:1b:1b:bc:
df:7b:44:15:6a:33:46:09:84:ad:42:8c:7d:75:9a:
0d:0b:86:40:d5:dc:f6:36:7a:40:27:c1:f5:d5:69:
45:bf:85:8d:66:6e:39:8b:53:28:0b:c1:e9:47:19:
27:48:95:a0:69:94:68:e9:85:5b:50:c3:0d:ee:02:
e9:b3:48:eb:d3:37:1c:58:65:0c:ae:2e:6a:06:d2:
e9:6e:fa:db:ba:d0:95:50:24:3d:3a:29:b0:13:c8:
5e:1e:54:e1:8c:d0:1e:51:7a:e2:e0:7d:f1:64:7f:
dc:d4:76:54:26:56:87:35:66:09:f3:02:23:5c:a4:
92:e9:81:57:f5:9b:55:30:55:de:e8:e2:13:d0:a0:
99:28:66:21:7f:d4:8a:a6:4a:e1:dd:ee:b6:0a:33:
7c:c5:8d:ac:51:74:ce:be:53:3d:db:63:b5:e1:53:
2f:a6:20:94:2f:09:fc:b8:be:b7:66:2f:c1:c2:90:
07:07:59:11:88:a8:d2:b3:58:2d:59:2d:e7:73:64:
16:04:20:6f:48:cf:e5:8c:c3:5a:b9:0e:c0:d6:8d:
0c:e0:c9:89:73:ea:5d:d4:03:cc:43:99:b1:fc:6c:
2a:50:c9:94:b2:2e:8c:08:f6:4d:a4:68:2b:e5:f5:
d8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:81:C0:AB:CD:6E:8F:8A:72:49:F1:1F:1B:D7:94:A1:AF:34:8B:BE
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OIHAq81uj4pySfEfG9eUoa80i74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.92.0/24
Signature Algorithm: sha256WithRSAEncryption
37:05:7a:fc:8b:d7:b6:a9:76:e6:66:f8:77:61:42:a8:3f:8f:
f6:77:88:bd:13:df:0e:d8:e9:00:50:b1:94:16:e6:1b:6d:91:
ed:26:ea:da:c3:35:c8:69:51:32:bf:63:0c:ba:a4:f3:25:3e:
69:70:2b:52:2f:61:7d:e8:3b:ac:52:2e:02:58:0a:9b:5b:7f:
21:08:dd:d2:54:f9:a0:34:f1:c5:61:39:57:55:a8:48:1e:01:
2a:fa:1f:cb:e8:b6:ce:5b:63:cb:32:7d:21:6a:29:33:ea:5b:
7e:89:44:d0:30:f0:0a:83:07:22:52:d7:56:e7:1c:3d:d0:2b:
6f:8b:d7:e0:85:63:0d:7f:d7:23:aa:85:b3:42:12:80:4e:69:
ac:77:ba:9c:88:85:a3:fb:4d:36:c5:93:65:8d:ae:26:e1:b3:
4f:37:12:dc:26:5b:41:51:35:e0:b6:28:00:a0:9b:9c:0c:31:
5b:86:76:f3:65:dd:f4:c5:f0:9e:c6:a6:33:75:a1:06:e7:f1:
4b:ea:9a:cf:bc:79:fd:b5:dd:94:00:ee:d3:a3:5f:2b:0a:a2:
c0:b0:78:69:a8:5c:23:0f:e4:1c:96:f0:eb:70:b6:62:2b:06:
8a:96:fa:a1:04:78:b2:72:61:ec:19:ff:86:96:b5:7e:77:94:
d0:d8:a3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:10 2025 by rpki-client