Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ec80f-924d-4b12-b81c-a07483da7c65/1/OJPlm83T3ielwnrXVdJQGAVdmNI.roa
File: OJPlm83T3ielwnrXVdJQGAVdmNI.roa (raw, json)
Hash identifier: /SIvHOL/ICGnXLSxx6fodHILIuk/xvbAUXQOCobthWQ=
Subject key identifier: 38:93:E5:9B:CD:D3:DE:27:A5:C2:7A:D7:55:D2:50:18:05:5D:98:D2
Certificate issuer: /CN=476a0b661dcc66528be81e2239f42f88b3c2904a
Certificate serial: 018571B0E47ECC31B2014D7F16087008D8F9
Authority key identifier: 47:6A:0B:66:1D:CC:66:52:8B:E8:1E:22:39:F4:2F:88:B3:C2:90:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2oLZh3MZlKL6B4iOfQviLPCkEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ec80f-924d-4b12-b81c-a07483da7c65/1/OJPlm83T3ielwnrXVdJQGAVdmNI.roa
Signing time: Mon 02 Jan 2023 08:54:56 +0000
ROA not before: Mon 02 Jan 2023 08:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48162
IP address blocks: 46.253.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:e4:7e:cc:31:b2:01:4d:7f:16:08:70:08:d8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476a0b661dcc66528be81e2239f42f88b3c2904a
Validity
Not Before: Jan 2 08:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3893e59bcdd3de27a5c27ad755d25018055d98d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:2f:5a:4a:8c:ac:d9:49:07:e2:02:21:19:
5d:5e:7f:80:aa:c9:17:d8:03:6f:d2:c8:1a:54:b2:
3d:29:7c:ac:12:ae:dc:e0:76:1f:cd:79:bf:85:01:
22:bb:4d:21:22:00:d7:74:82:97:1e:13:be:46:9e:
72:46:10:e6:f3:c1:e9:e1:f1:90:fa:a5:e7:3a:c8:
b4:64:93:19:9d:07:61:4c:71:70:02:4f:13:d7:7b:
5b:f4:98:ee:ae:bd:67:eb:c4:a8:bd:59:e7:3e:e0:
f9:f4:a4:6d:b4:ce:28:79:57:49:1b:1d:e3:a3:30:
44:96:41:78:07:02:87:00:d2:e2:5c:9b:b4:95:32:
5e:e5:d2:d9:ec:9e:79:3b:11:fa:d4:33:54:f1:d7:
a2:35:f5:ea:d8:07:6f:33:74:ee:7c:8b:b0:82:82:
2c:72:81:c6:56:08:fb:13:81:68:4a:05:28:8b:19:
28:d2:0c:20:ef:82:a3:5f:7f:58:27:dc:c6:82:0b:
5a:3e:1a:6b:71:b9:73:b1:d3:2c:8d:f1:28:d6:ee:
94:66:f9:69:7f:c1:4f:58:31:65:14:2b:a1:87:bb:
9a:b6:92:76:94:6e:a4:42:04:4b:42:37:83:8a:04:
cc:52:98:22:ab:cf:3c:04:f5:95:8f:6d:5e:68:ba:
b6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:93:E5:9B:CD:D3:DE:27:A5:C2:7A:D7:55:D2:50:18:05:5D:98:D2
X509v3 Authority Key Identifier:
keyid:47:6A:0B:66:1D:CC:66:52:8B:E8:1E:22:39:F4:2F:88:B3:C2:90:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2oLZh3MZlKL6B4iOfQviLPCkEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ec80f-924d-4b12-b81c-a07483da7c65/1/OJPlm83T3ielwnrXVdJQGAVdmNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ec80f-924d-4b12-b81c-a07483da7c65/1/R2oLZh3MZlKL6B4iOfQviLPCkEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.140.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b3:13:92:26:c0:2c:be:10:be:c4:b5:67:9f:61:bc:04:d0:
92:ce:93:03:ca:4b:27:f7:1b:30:d1:19:8a:4d:2f:36:81:8e:
67:17:bd:03:ca:49:55:60:87:75:83:d4:11:04:d7:6e:bd:91:
9e:b6:4a:92:0e:0f:d7:b5:81:96:30:3e:88:15:34:74:13:b4:
3e:0f:85:b0:d7:ce:57:44:81:83:f3:7e:5c:f2:88:18:f6:7a:
cb:bf:2e:42:62:92:80:3c:8b:9a:c8:ad:13:89:63:33:08:57:
12:bf:7c:a6:ff:3f:ab:91:be:09:11:5f:4e:bd:12:4f:7b:57:
08:7d:fe:b0:a3:20:d4:cf:3b:e4:ca:71:8f:f3:9c:57:84:e9:
ea:c7:d7:bb:60:da:19:32:d2:ee:16:45:69:9b:01:52:f5:56:
dc:a6:96:b1:54:f9:ee:1a:7a:bd:c3:28:de:8c:97:bf:1b:85:
09:3d:41:4d:7f:38:9b:92:4c:e4:64:94:cb:ae:01:07:ee:62:
1c:b1:09:29:9a:7f:4c:44:ef:e8:34:e2:0d:f2:3b:7c:80:d3:
1c:af:d0:fa:d9:8d:e4:fd:20:07:02:cf:d1:2b:75:ee:64:93:
d3:fe:26:7d:00:14:71:91:fb:d0:6a:ec:5c:e7:16:a8:56:9c:
e0:d8:46:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxsOR+zDGyAU1/FghwCNj5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NmEwYjY2MWRjYzY2NTI4YmU4MWUyMjM5ZjQyZjg4YjNj
MjkwNGEwHhcNMjMwMTAyMDg1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODkzZTU5YmNkZDNkZTI3YTVjMjdhZDc1NWQyNTAxODA1NWQ5OGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsccvWkqMrNlJB+ICIRldXn+AqskX
2ANv0sgaVLI9KXysEq7c4HYfzXm/hQEiu00hIgDXdIKXHhO+Rp5yRhDm88Hp4fGQ
+qXnOsi0ZJMZnQdhTHFwAk8T13tb9Jjurr1n68SovVnnPuD59KRttM4oeVdJGx3j
ozBElkF4BwKHANLiXJu0lTJe5dLZ7J55OxH61DNU8deiNfXq2AdvM3TufIuwgoIs
coHGVgj7E4FoSgUoixko0gwg74KjX39YJ9zGggtaPhprcblzsdMsjfEo1u6UZvlp
f8FPWDFlFCuhh7uatpJ2lG6kQgRLQjeDigTMUpgiq888BPWVj21eaLq2EwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDiT5ZvN094npcJ611XSUBgFXZjSMB8GA1UdIwQY
MBaAFEdqC2YdzGZSi+geIjn0L4izwpBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJvTFpoM01abEtMNkI0aU9mUXZpTFBDa0VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80ZWM4MGYtOTI0ZC00YjEyLWI4MWMt
YTA3NDgzZGE3YzY1LzEvT0pQbG04M1QzaWVsd25yWFZkSlFHQVZkbU5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80ZWM4MGYtOTI0ZC00YjEyLWI4MWMtYTA3NDgzZGE3YzY1
LzEvUjJvTFpoM01abEtMNkI0aU9mUXZpTFBDa0VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALv2MMA0G
CSqGSIb3DQEBCwUAA4IBAQAQsxOSJsAsvhC+xLVnn2G8BNCSzpMDyksn9xsw0RmK
TS82gY5nF70DyklVYId1g9QRBNduvZGetkqSDg/XtYGWMD6IFTR0E7Q+D4Ww185X
RIGD835c8ogY9nrLvy5CYpKAPIuayK0TiWMzCFcSv3ym/z+rkb4JEV9OvRJPe1cI
ff6woyDUzzvkynGP85xXhOnqx9e7YNoZMtLuFkVpmwFS9VbcppaxVPnuGnq9wyje
jJe/G4UJPUFNfzibkkzkZJTLrgEH7mIcsQkpmn9MRO/oNOIN8jt8gNMcr9D62Y3k
/SAHAs/RK3XuZJPT/iZ9ABRxkfvQauxc5xaoVpzg2EYW
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:48 2025 by rpki-client