Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/O2QrsRpu21AzPFWSKx6-icFIuDk.roa
File: O2QrsRpu21AzPFWSKx6-icFIuDk.roa (raw, json)
Hash identifier: yYvXQaBaDt2Fw+c7tWeP9pRQ80CLvEe29rG4qx33m94=
Subject key identifier: 3B:64:2B:B1:1A:6E:DB:50:33:3C:55:92:2B:1E:BE:89:C1:48:B8:39
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 019427480340CB5442C6FBD6E4C16240DA41
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/O2QrsRpu21AzPFWSKx6-icFIuDk.roa
Signing time: Thu 02 Jan 2025 13:50:18 +0000
ROA not before: Thu 02 Jan 2025 13:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8426
IP address blocks: 185.146.92.0/22 maxlen: 22
2a07:4f40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:03:40:cb:54:42:c6:fb:d6:e4:c1:62:40:da:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Jan 2 13:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b642bb11a6edb50333c55922b1ebe89c148b839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:23:62:a2:72:f4:8b:04:c7:9a:d3:ce:51:72:
d6:08:c4:de:93:d6:65:89:17:ab:98:bc:bb:9c:c8:
89:16:20:db:d4:a6:a0:a1:65:9d:1b:38:07:cc:1d:
ec:54:a3:2e:5b:1d:00:b5:b4:3d:2d:70:31:8d:73:
2a:07:6f:e3:f3:fe:95:2b:5d:15:fe:47:e0:16:65:
63:76:c6:c9:93:1c:80:a6:66:8d:68:68:b2:c7:58:
b4:ae:5c:93:fe:4f:eb:88:08:17:b1:29:5d:da:b4:
4a:c7:3f:66:14:6f:64:b0:f1:8e:3c:29:f7:93:2c:
4a:ea:34:71:11:88:65:a1:e6:8e:30:60:e0:ca:e4:
4b:a1:ca:70:79:5b:25:c7:21:2f:f0:b1:c5:cc:dd:
98:5b:dd:22:ea:cb:0e:54:7b:74:f2:f8:97:33:b1:
d2:e9:66:1b:06:a3:ae:b2:64:5b:4b:9c:d1:fd:18:
aa:b1:fd:b2:74:d8:8c:99:16:67:4a:6c:37:c9:8b:
4c:ee:ac:80:8d:ab:7b:df:c1:34:b8:a5:c5:7f:8d:
80:4b:8c:09:4c:95:52:e1:f4:5c:21:e6:22:0e:d9:
25:1e:cf:e5:f4:08:6a:c0:a4:36:85:4a:11:e8:f3:
5e:e2:b5:57:60:d0:58:d6:97:0a:11:0c:18:ca:9a:
73:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:64:2B:B1:1A:6E:DB:50:33:3C:55:92:2B:1E:BE:89:C1:48:B8:39
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/O2QrsRpu21AzPFWSKx6-icFIuDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.92.0/22
IPv6:
2a07:4f40::/29
Signature Algorithm: sha256WithRSAEncryption
85:e3:a9:e0:42:f2:7d:12:8e:13:d7:fc:f8:12:a0:b8:55:ce:
aa:ca:00:3d:27:55:a3:70:0d:4f:d2:cf:0a:f0:ff:a4:a2:78:
5a:a6:0d:4e:98:cd:10:d1:ae:6f:21:ab:d9:31:a4:24:c0:5d:
01:d3:22:b1:e6:1d:22:ee:fc:7f:e7:38:25:b6:a1:f6:48:f3:
af:09:d5:3b:c7:32:64:ab:0f:bb:8b:91:70:5d:ab:66:2a:f8:
81:52:c8:ce:2e:03:41:83:80:ca:8b:74:5a:d6:f8:91:f9:c4:
ba:9d:e5:0b:ef:9e:07:58:56:2f:be:f5:f4:a9:db:6c:b1:ec:
9b:60:47:0a:01:ac:bd:ec:04:fa:05:78:3b:48:db:9d:b6:e6:
d7:dc:6a:b3:a1:98:e5:4d:20:78:2d:22:94:a2:7b:20:18:fc:
e1:d4:93:4b:80:2e:ac:f4:e4:05:df:4a:d4:a9:2f:49:7b:93:
6b:75:9d:2f:68:c8:b3:07:c8:55:81:76:6b:08:26:be:80:ba:
96:18:74:96:19:49:ac:ea:aa:d0:d3:2f:6e:c6:6f:99:e7:a3:
f2:16:26:74:51:16:27:63:a9:5d:e0:ec:fc:71:00:33:c7:9f:
31:39:e8:64:05:65:e9:63:cb:99:d2:e6:3b:df:35:2e:6e:e5:
9d:59:27:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:02:55 2025 by rpki-client