Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/O8vYugo1IMFhRrolkiJ5A2F_9k4.roa
File: O8vYugo1IMFhRrolkiJ5A2F_9k4.roa (raw, json)
Hash identifier: vT082QVsehcKVaVyOGMEheCQhaYoT8jhfxj4aHEzNiI=
Subject key identifier: 3B:CB:D8:BA:0A:35:20:C1:61:46:BA:25:92:22:79:03:61:7F:F6:4E
Certificate issuer: /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Certificate serial: 01942067D4337509A3BE44317398B0823AE6
Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/O8vYugo1IMFhRrolkiJ5A2F_9k4.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57119
IP address blocks: 185.215.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d4:33:75:09:a3:be:44:31:73:98:b0:82:3a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bcbd8ba0a3520c16146ba2592227903617ff64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b8:6e:cb:3c:5c:6f:66:03:11:f5:f1:c4:3a:
18:3a:7f:48:33:00:e1:50:52:13:77:83:0e:6b:70:
87:66:49:79:70:cf:5e:14:3d:61:06:6e:28:55:08:
8c:bd:64:fa:02:5a:b7:84:b6:5c:fc:73:b6:46:d0:
77:04:5f:b1:f6:4d:c5:de:82:5a:d8:4b:53:e4:d7:
e3:5f:ef:29:73:cc:11:77:0d:d3:11:05:81:b9:8a:
a8:5f:c7:ec:c9:1b:a4:76:12:cc:84:a1:1c:22:c1:
cd:7c:4e:ae:eb:34:8d:66:85:e2:3e:ad:59:9b:74:
ae:a9:e9:5e:e5:30:b0:0a:55:90:42:00:65:cd:50:
78:0b:3d:33:58:ae:bb:49:cd:78:e9:0c:b2:97:50:
a8:5e:be:a1:a5:de:72:8f:70:b4:8b:98:79:f7:4e:
ff:eb:24:09:f1:86:51:42:6d:e9:e8:b1:55:ff:62:
22:44:f9:81:22:01:b6:f8:96:ab:23:a9:0f:89:84:
2e:74:73:66:4a:d9:92:7f:f4:41:3c:68:bb:ee:f4:
d8:89:2b:dd:0c:f1:b0:63:77:8e:b2:f2:6e:b6:59:
5e:46:47:43:1a:94:a4:f4:09:94:62:5b:6a:55:20:
c9:21:60:07:a4:3c:ca:d2:a1:db:b6:8d:cf:78:c5:
3a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CB:D8:BA:0A:35:20:C1:61:46:BA:25:92:22:79:03:61:7F:F6:4E
X509v3 Authority Key Identifier:
keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/O8vYugo1IMFhRrolkiJ5A2F_9k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.24.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:5d:85:00:92:64:86:e2:5a:f5:a2:d7:ce:6c:2b:d1:69:d0:
d9:57:74:11:73:4f:67:18:5e:67:30:fd:75:23:07:ce:9c:88:
e2:f3:0e:76:21:79:f5:c9:99:8d:51:f2:60:f5:28:9a:0f:e0:
1f:49:15:22:ee:1a:6b:4d:25:c1:31:92:20:e3:51:3d:9e:8c:
e8:90:4c:1f:d0:4d:87:8f:b0:d7:73:7c:f6:48:cc:ec:bc:71:
72:e8:43:d1:32:4e:0f:cd:45:fe:40:79:3f:14:d1:df:fd:68:
af:c4:12:4f:15:ff:f8:83:0a:47:de:c9:a4:3c:33:03:70:74:
3b:aa:20:3c:92:04:4c:cc:c4:34:19:ad:42:5c:3e:5f:ea:df:
d4:77:ae:3b:87:d0:77:f3:6b:c6:de:f4:ad:84:3f:65:39:ef:
7e:0d:0d:76:4a:b6:c3:4d:d9:c5:85:d5:f9:e7:55:94:9c:c1:
66:c6:84:a9:9d:90:c0:4e:30:da:97:13:90:b1:a8:df:c5:4d:
58:e8:f7:f3:09:04:0e:d7:f4:41:f4:2a:b1:ab:20:3b:f5:49:
fa:36:2d:20:fe:9d:9f:84:0f:70:cd:3f:8a:9b:e6:5b:dc:04:
c2:9b:4f:df:0f:4e:8e:2b:97:6d:5d:85:81:13:58:88:a3:d0:
1d:1d:3b:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ9QzdQmjvkQxc5iwgjrmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjVhNDBiMjc0YTk2M2U1ZWQzZWYwMmU4Mzk5Y2I5YjFi
YjBjN2IwHhcNMjUwMTAxMDU0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmNiZDhiYTBhMzUyMGMxNjE0NmJhMjU5MjIyNzkwMzYxN2ZmNjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLhuyzxcb2YDEfXxxDoYOn9IMwDh
UFITd4MOa3CHZkl5cM9eFD1hBm4oVQiMvWT6Alq3hLZc/HO2RtB3BF+x9k3F3oJa
2EtT5NfjX+8pc8wRdw3TEQWBuYqoX8fsyRukdhLMhKEcIsHNfE6u6zSNZoXiPq1Z
m3Suqele5TCwClWQQgBlzVB4Cz0zWK67Sc146Qyyl1CoXr6hpd5yj3C0i5h5907/
6yQJ8YZRQm3p6LFV/2IiRPmBIgG2+JarI6kPiYQudHNmStmSf/RBPGi77vTYiSvd
DPGwY3eOsvJutlleRkdDGpSk9AmUYltqVSDJIWAHpDzK0qHbto3PeMU6BQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDvL2LoKNSDBYUa6JZIieQNhf/ZOMB8GA1UdIwQY
MBaAFIS1pAsnSpY+XtPvAug5nLmxuwx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExXa0N5ZEtsajVlMC04QzZEbWN1Ykc3REhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zZDk3NzctYzk5Ni00NmZjLTlkNjct
YTcyMGFmODYxZmVlLzEvTzh2WXVnbzFJTUZoUnJvbGtpSjVBMkZfOWs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8zZDk3NzctYzk5Ni00NmZjLTlkNjctYTcyMGFmODYxZmVl
LzEvaExXa0N5ZEtsajVlMC04QzZEbWN1Ykc3REhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudcYMA0G
CSqGSIb3DQEBCwUAA4IBAQB/XYUAkmSG4lr1otfObCvRadDZV3QRc09nGF5nMP11
IwfOnIji8w52IXn1yZmNUfJg9SiaD+AfSRUi7hprTSXBMZIg41E9nozokEwf0E2H
j7DXc3z2SMzsvHFy6EPRMk4PzUX+QHk/FNHf/WivxBJPFf/4gwpH3smkPDMDcHQ7
qiA8kgRMzMQ0Ga1CXD5f6t/Ud647h9B382vG3vSthD9lOe9+DQ12SrbDTdnFhdX5
51WUnMFmxoSpnZDATjDalxOQsajfxU1Y6PfzCQQO1/RB9CqxqyA79Un6Ni0g/p2f
hA9wzT+Km+Zb3ATCm0/fD06OK5dtXYWBE1iIo9AdHTtB
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:31 2025 by rpki-client