Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Oh4FLGHxy1-rnxuSpVMei6iMkxg.roa
File: Oh4FLGHxy1-rnxuSpVMei6iMkxg.roa (raw, json)
Hash identifier: t0XpRWtsKgAoA32Sc2xutvn6pHyDdFXpsGXl09aN/so=
Subject key identifier: 3A:1E:05:2C:61:F1:CB:5F:AB:9F:1B:92:A5:53:1E:8B:A8:8C:93:18
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB9FD900FB79CEF8BC1C117D08E7C2
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Oh4FLGHxy1-rnxuSpVMei6iMkxg.roa
Signing time: Wed 01 Jan 2025 17:48:23 +0000
ROA not before: Wed 01 Jan 2025 17:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204168
IP address blocks: 92.52.204.0/22 maxlen: 24
185.38.124.0/22 maxlen: 24
185.93.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9f:d9:00:fb:79:ce:f8:bc:1c:11:7d:08:e7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a1e052c61f1cb5fab9f1b92a5531e8ba88c9318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:00:0e:12:6a:53:87:48:cf:3f:74:a9:a2:ea:
ef:5b:05:b6:ee:3b:4f:98:e5:b4:ee:45:c4:b1:03:
cb:bf:a8:b1:b9:e5:15:77:09:51:e9:35:bf:4c:fc:
e2:64:4b:39:a6:de:25:e4:18:76:c9:d7:bd:19:20:
70:58:43:2a:82:e5:c0:29:bd:aa:4a:d3:9b:64:e5:
0d:7d:5c:89:ac:46:49:e9:68:8c:e6:f7:17:1a:8a:
91:46:55:05:49:a5:4b:94:d3:8a:f4:af:2f:d1:73:
93:29:3a:d1:cf:81:dc:92:18:03:82:6d:dc:ff:dd:
15:a1:2a:1f:26:05:32:b2:5a:c4:62:28:ca:72:1f:
af:ae:5e:b5:7b:75:76:87:dc:b6:5c:3e:b7:73:42:
c2:a0:12:ee:eb:e5:dc:d9:30:d7:59:90:70:2a:ec:
b9:c5:77:fc:d6:c7:51:e0:7d:46:48:68:06:0d:c4:
1b:6a:04:91:7a:e8:13:a1:34:96:66:12:a2:3a:b3:
db:b2:8c:80:ec:34:af:9f:bb:fc:83:78:34:b7:35:
69:a7:06:61:92:8d:16:bd:74:7c:d7:05:cc:3f:ab:
43:1e:ed:4d:41:bf:cc:38:59:49:7f:cf:05:6b:f3:
02:a7:1f:89:44:22:83:1b:c7:ab:cc:85:b1:f5:23:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1E:05:2C:61:F1:CB:5F:AB:9F:1B:92:A5:53:1E:8B:A8:8C:93:18
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Oh4FLGHxy1-rnxuSpVMei6iMkxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.52.204.0/22
185.38.124.0/22
185.93.64.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:a8:9b:09:54:aa:db:33:c3:6f:ed:4b:ae:89:dd:56:4f:a8:
ec:4c:44:65:00:ea:6a:82:9c:2e:79:24:c0:d6:de:e5:68:01:
89:25:73:f7:5c:6f:3f:2e:e1:4c:cf:fd:94:69:60:27:00:e5:
a0:5e:c9:08:7f:39:9b:84:73:af:e7:77:20:c6:4a:21:2a:7c:
9c:14:0c:4c:eb:86:c6:26:d2:17:53:fe:49:d1:ec:fa:84:c7:
88:c5:2e:73:dd:fa:3f:f5:d9:79:9b:02:b7:f2:e7:74:fb:3a:
07:38:e9:a0:ca:6f:07:dc:a4:28:07:e4:81:a0:3b:8a:55:7c:
5e:19:5d:51:f8:36:e3:7c:41:91:bc:81:ff:15:db:7a:b7:1c:
92:a0:04:39:89:91:be:33:26:21:63:4c:d2:ba:63:f1:0d:51:
42:59:56:86:a2:09:69:1a:e5:0d:05:0f:51:5b:20:ce:62:17:
47:6d:00:bd:7b:bd:8e:ea:a2:9c:3f:d2:44:b3:6a:e8:22:0f:
1e:fa:0e:7e:82:f6:22:c8:bf:20:a0:51:5d:8a:5f:08:3f:aa:
66:2a:0c:d0:72:67:9a:a0:c7:3e:5b:77:da:b3:b5:b4:46:8a:
9b:7a:ee:7e:50:0e:63:e5:74:ce:db:13:5e:b4:c6:17:c9:a0:
aa:c9:9b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:26 2025 by rpki-client