Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/O26SvIi-iLlAArpGPoL_kcRMLz8.roa
File: O26SvIi-iLlAArpGPoL_kcRMLz8.roa (raw, json)
Hash identifier: x6EwUP7G9se/ub/wgAs57oTYgG0nrtLTkuveOv5jyO4=
Subject key identifier: 3B:6E:92:BC:88:BE:88:B9:40:02:BA:46:3E:82:FF:91:C4:4C:2F:3F
Certificate issuer: /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial: 0194228E11AA1EEDA5AF4C3F3285348D0FC5
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/O26SvIi-iLlAArpGPoL_kcRMLz8.roa
Signing time: Wed 01 Jan 2025 15:48:43 +0000
ROA not before: Wed 01 Jan 2025 15:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 185.59.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:11:aa:1e:ed:a5:af:4c:3f:32:85:34:8d:0f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Validity
Not Before: Jan 1 15:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b6e92bc88be88b94002ba463e82ff91c44c2f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6b:06:7d:dc:84:31:11:87:e0:c6:b2:9c:80:
e2:87:47:38:7c:8c:7d:7e:f3:af:a3:31:84:b2:b9:
0b:03:d2:9c:c8:f1:55:47:39:ee:39:c3:b4:e0:d7:
4e:75:af:e2:de:22:8d:f1:3b:26:a8:15:33:27:a5:
0b:e1:db:87:50:f5:d5:6c:5b:b3:cb:44:2b:5a:6e:
cd:b9:50:24:93:19:88:86:8c:a7:bc:36:69:f5:66:
84:3e:67:90:8e:6c:82:99:b3:54:94:25:a3:94:39:
9f:60:fa:b0:5b:81:0c:a3:e7:05:67:fb:35:49:28:
a1:0e:28:3b:3c:59:16:e4:53:da:34:fa:95:e6:10:
93:5f:87:f6:8f:e2:b0:83:a1:7e:a6:61:72:bb:a9:
56:2a:79:c4:bb:8b:66:08:4e:20:23:9d:d7:f7:8d:
86:0d:bb:61:1f:5b:cb:c1:8d:95:82:ff:87:15:7f:
fa:65:be:5b:e6:1f:53:73:b7:37:6e:34:9c:09:ab:
a3:f4:d0:f2:d7:2f:d8:8d:f0:12:fe:22:47:e3:77:
e4:64:11:a4:56:a1:66:10:90:ae:8a:61:7a:f4:37:
a3:4d:23:75:10:8b:32:1f:d3:4d:c9:9c:ed:2d:c5:
05:33:22:bc:8c:7c:fc:2d:85:01:72:fc:2a:1a:02:
36:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6E:92:BC:88:BE:88:B9:40:02:BA:46:3E:82:FF:91:C4:4C:2F:3F
X509v3 Authority Key Identifier:
keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/O26SvIi-iLlAArpGPoL_kcRMLz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.52.0/22
Signature Algorithm: sha256WithRSAEncryption
41:6f:3b:72:52:39:55:e5:da:94:54:f5:af:0a:22:dc:64:12:
f6:dc:d0:e5:11:ae:26:17:18:cb:a5:6a:3c:0d:b5:ac:86:88:
6c:d6:b3:a1:e1:f5:6b:02:59:57:62:73:7e:b2:9b:ec:19:41:
00:fb:ee:2d:54:9a:0f:fb:54:ab:92:a0:0e:f6:0e:ca:4b:f3:
63:05:dd:71:03:4b:c9:50:e1:50:b1:1f:3a:31:83:f6:76:6d:
3d:aa:94:fd:96:df:9b:6e:29:6f:71:03:e6:ba:1f:91:48:d1:
ea:be:c2:37:71:d1:ec:77:c9:42:ad:b7:71:f6:27:43:bf:97:
c6:fe:74:c2:02:65:c9:2c:67:26:1d:b9:c2:1d:fb:16:2b:d9:
16:97:b9:5f:2e:d3:86:a8:c2:a7:09:2b:e2:2f:f4:1e:f5:0e:
31:8f:c3:f7:d3:40:bc:d5:9f:c8:8b:85:c3:a7:3d:86:59:32:
50:16:5b:be:1e:0f:62:2a:e8:b9:05:2d:ab:75:f0:81:61:9f:
4f:8b:92:9b:88:fe:34:b8:da:20:59:41:09:33:fc:ea:1a:c8:
72:48:3f:a7:81:13:cd:d2:78:10:9f:4c:bc:02:43:24:07:a2:
f1:ee:c2:3f:8f:2e:22:1d:98:9e:1f:f3:51:8f:de:bf:b9:fe:
74:9b:91:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:47 2025 by rpki-client