Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/OL33lS4QPQmM7I9OHiEuiYJ6cbo.roa
File: OL33lS4QPQmM7I9OHiEuiYJ6cbo.roa (raw, json)
Hash identifier: ZSfmXxLdNUI2V7qaL7IRrXX7xgldwECXYA4iml8z2JA=
Subject key identifier: 38:BD:F7:95:2E:10:3D:09:8C:EC:8F:4E:1E:21:2E:89:82:7A:71:BA
Certificate issuer: /CN=6b6b9a8241f08fff86c06e5c0ef1ecced643fef3
Certificate serial: 018E6B55BEE4997F10B65F17AB8257906004
Authority key identifier: 6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2uagkHwj_-GwG5cDvHsztZD_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/OL33lS4QPQmM7I9OHiEuiYJ6cbo.roa
Signing time: Sat 23 Mar 2024 12:42:45 +0000
ROA not before: Sat 23 Mar 2024 12:42:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.92.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6b:55:be:e4:99:7f:10:b6:5f:17:ab:82:57:90:60:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6b9a8241f08fff86c06e5c0ef1ecced643fef3
Validity
Not Before: Mar 23 12:42:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38bdf7952e103d098cec8f4e1e212e89827a71ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:0e:27:7e:8b:36:5c:91:e2:ff:a3:e2:20:
81:44:c8:aa:81:5f:d8:db:dc:65:7c:3e:e8:10:11:
a5:f6:aa:bc:96:bd:d8:8c:8a:2a:de:bb:ae:fc:d3:
ec:f9:28:cc:81:86:96:93:6a:50:f1:79:14:6d:04:
00:91:73:85:80:6b:06:21:b4:c1:e4:09:1a:cd:ab:
b4:80:b8:1a:8d:ab:38:b3:31:17:4f:77:52:fe:06:
ba:9c:25:4e:9c:38:d3:33:c5:95:75:09:b8:be:cc:
63:03:81:0a:8c:7a:81:8f:4f:69:9f:50:3b:51:6d:
99:06:41:48:05:28:f0:f0:cf:27:78:e6:90:4e:63:
ed:ee:3c:3b:e8:26:cc:57:52:16:53:e1:d7:5e:67:
e4:7f:4b:09:c5:fe:f9:95:a0:80:47:b4:3d:81:5f:
ff:0c:53:89:2f:bd:de:8f:4a:cc:79:0b:51:1e:b4:
ce:c8:12:a2:b7:a8:f2:e4:f1:cc:3c:c3:bb:73:8a:
36:86:f8:88:8e:f2:01:43:cd:2d:60:c7:45:33:85:
19:06:bc:f1:40:c1:2b:c3:07:e9:9f:ea:a0:95:2e:
58:cd:5c:e1:3b:a9:49:b2:af:26:21:04:99:c4:0f:
c7:ee:a2:7b:72:6c:2a:ef:4e:4a:b8:e4:fd:d4:dc:
c7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BD:F7:95:2E:10:3D:09:8C:EC:8F:4E:1E:21:2E:89:82:7A:71:BA
X509v3 Authority Key Identifier:
keyid:6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2uagkHwj_-GwG5cDvHsztZD_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/OL33lS4QPQmM7I9OHiEuiYJ6cbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/a2uagkHwj_-GwG5cDvHsztZD_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.77.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d0:33:8b:54:94:20:38:a6:a9:fe:c3:29:32:2d:77:3a:f9:
09:05:8b:f4:a3:14:98:96:50:0d:df:83:79:55:a2:40:a2:26:
73:c8:b5:39:ea:1e:db:1d:ee:ac:2f:29:d6:b1:35:ec:10:e9:
a8:0f:0d:b3:df:31:d6:0e:7b:b9:98:32:01:3d:ab:fa:ba:7a:
27:7a:3b:81:bb:59:a0:65:37:21:c0:36:0f:6c:a8:bf:af:40:
5f:63:f1:4c:0b:c8:6c:17:6a:24:5d:30:a1:e3:83:52:18:cf:
1d:5d:7c:ad:f8:8f:6a:eb:5f:73:fc:7f:40:f5:ef:e9:85:a6:
a7:0c:8a:d5:90:16:cf:07:7a:3b:eb:f8:3c:3c:9c:65:74:7a:
b0:6c:68:20:42:79:ad:a1:ca:3b:e3:b9:56:0f:00:b7:2c:00:
bd:2a:4f:48:a0:11:98:07:0f:69:ea:cc:e0:9d:ed:ba:ad:bf:
18:25:0d:84:33:41:21:dd:30:d6:f9:f6:17:d2:0b:b7:25:e7:
9c:fd:30:c5:cb:6d:c7:25:af:4c:b9:81:eb:26:f7:d2:e3:13:
79:0f:74:5f:33:6b:74:52:57:c2:a5:30:58:a0:87:04:1e:21:
fa:52:b5:b8:02:b7:b1:a9:cc:b4:59:7c:c0:59:e7:34:9d:21:
5c:1d:eb:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5rVb7kmX8Qtl8Xq4JXkGAEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNmI5YTgyNDFmMDhmZmY4NmMwNmU1YzBlZjFlY2NlZDY0
M2ZlZjMwHhcNMjQwMzIzMTI0MjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGJkZjc5NTJlMTAzZDA5OGNlYzhmNGUxZTIxMmU4OTgyN2E3MWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I8OJ36LNlyR4v+j4iCBRMiqgV/Y
29xlfD7oEBGl9qq8lr3YjIoq3ruu/NPs+SjMgYaWk2pQ8XkUbQQAkXOFgGsGIbTB
5Akazau0gLgajas4szEXT3dS/ga6nCVOnDjTM8WVdQm4vsxjA4EKjHqBj09pn1A7
UW2ZBkFIBSjw8M8neOaQTmPt7jw76CbMV1IWU+HXXmfkf0sJxf75laCAR7Q9gV//
DFOJL73ej0rMeQtRHrTOyBKit6jy5PHMPMO7c4o2hviIjvIBQ80tYMdFM4UZBrzx
QMErwwfpn+qglS5YzVzhO6lJsq8mIQSZxA/H7qJ7cmwq705KuOT91NzHkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDi995UuED0JjOyPTh4hLomCenG6MB8GA1UdIwQY
MBaAFGtrmoJB8I//hsBuXA7x7M7WQ/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJ1YWdrSHdqXy1Hd0c1Y0R2SHN6dFpEX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy83ZTVkNjAtNzA0MS00OWI5LTgyMGIt
ZmM4MzZlYjgzMDBiLzEvT0wzM2xTNFFQUW1NN0k5T0hpRXVpWUo2Y2JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy83ZTVkNjAtNzA0MS00OWI5LTgyMGItZmM4MzZlYjgzMDBi
LzEvYTJ1YWdrSHdqXy1Hd0c1Y0R2SHN6dFpEX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVxNMA0G
CSqGSIb3DQEBCwUAA4IBAQBU0DOLVJQgOKap/sMpMi13OvkJBYv0oxSYllAN34N5
VaJAoiZzyLU56h7bHe6sLynWsTXsEOmoDw2z3zHWDnu5mDIBPav6unonejuBu1mg
ZTchwDYPbKi/r0BfY/FMC8hsF2okXTCh44NSGM8dXXyt+I9q619z/H9A9e/phaan
DIrVkBbPB3o76/g8PJxldHqwbGggQnmtoco747lWDwC3LAC9Kk9IoBGYBw9p6szg
ne26rb8YJQ2EM0Eh3TDW+fYX0gu3Jeec/TDFy23HJa9MuYHrJvfS4xN5D3RfM2t0
UlfCpTBYoIcEHiH6UrW4Arexqcy0WXzAWec0nSFcHevc
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:12:04 2025 by rpki-client