Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/1-OHLRD334FWm6Zrjcgppie9BswM.roa
File: 1-OHLRD334FWm6Zrjcgppie9BswM.roa (raw, json)
Hash identifier: urCbs2jOMpV/xBqYvz6vgOCjI2x8EVTTMcQlzcrKQKU=
Subject key identifier: F8:E1:CB:44:3D:F7:E0:55:A6:E9:9A:E3:72:0A:69:89:EF:41:B3:03
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01941F8C3BFE8E5055204338E932AFBD887A
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/1-OHLRD334FWm6Zrjcgppie9BswM.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 91.108.226.0/24 maxlen: 24
91.108.227.0/24 maxlen: 24
91.108.244.0/24 maxlen: 24
91.108.245.0/24 maxlen: 24
91.108.246.0/24 maxlen: 24
91.108.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3b:fe:8e:50:55:20:43:38:e9:32:af:bd:88:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8e1cb443df7e055a6e99ae3720a6989ef41b303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:d8:a2:68:15:0d:64:1c:fe:15:2d:42:9c:
e9:b5:98:95:35:0e:fe:99:88:02:cf:12:e1:44:f1:
34:ff:ca:0a:6b:ee:7c:35:2a:4a:51:f8:73:2f:7a:
8b:3f:9c:e9:a5:53:c4:8e:bb:96:33:54:e0:4e:db:
3a:89:cf:71:bf:94:ee:62:50:0f:b5:99:c0:e0:dc:
18:60:b9:78:c4:f8:10:db:22:68:ae:46:2f:d3:fa:
8b:81:61:ce:0c:06:ac:52:94:df:b0:85:5b:74:23:
c4:54:2b:c4:f7:03:ae:42:78:fe:a4:09:a5:d6:54:
40:e3:61:ee:a8:df:b4:de:20:1c:3c:01:b4:22:25:
36:c3:2a:3a:43:a4:78:c4:5c:4c:4d:cd:0c:cf:04:
24:a5:a3:7b:af:ca:3c:5e:90:0e:b6:a4:15:28:fb:
a8:b5:40:7f:80:23:e5:f9:58:e4:02:3e:72:ea:c0:
43:59:78:36:5e:c2:ff:9d:57:59:ca:7f:56:b8:e7:
f1:63:bf:53:89:a1:32:c1:88:cc:b9:e8:14:fe:da:
25:89:9b:ba:94:54:06:bf:0f:f4:e5:c1:f6:64:53:
9d:c4:4a:4c:31:91:48:4d:de:8f:be:0d:07:ee:15:
37:e2:03:2e:6f:c7:c2:2c:cc:cb:7f:b3:e4:69:54:
16:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E1:CB:44:3D:F7:E0:55:A6:E9:9A:E3:72:0A:69:89:EF:41:B3:03
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/1-OHLRD334FWm6Zrjcgppie9BswM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.226.0/23
91.108.244.0/22
Signature Algorithm: sha256WithRSAEncryption
24:da:04:90:0b:e5:95:7e:e5:78:a1:58:b5:d7:b6:bd:31:e1:
d8:ef:ab:73:19:9f:3f:d0:1e:74:1c:de:7e:5a:62:f1:95:1c:
46:aa:9c:06:16:8e:60:ae:1c:e7:1b:6c:26:61:57:e1:96:b2:
ad:f2:23:07:35:1a:db:d4:81:fd:af:e6:4d:88:63:8e:6f:d6:
d2:73:47:e2:e4:8b:e2:a8:21:00:72:b9:c7:3f:74:2c:e0:82:
14:bd:10:0f:cc:9d:2d:03:69:55:78:4c:f9:0e:19:b8:87:ff:
30:83:25:2c:d1:52:c8:5e:d1:a6:7f:b6:f8:ff:dd:8c:94:f7:
52:d1:d6:9b:b0:4f:7b:4d:2a:51:02:74:29:a4:f7:c4:1c:3f:
9c:0c:40:b6:4b:8a:6e:ce:ff:6e:8e:44:8f:a1:ec:b2:50:ad:
bf:0a:c9:e2:28:17:19:d6:9e:c6:0f:13:96:e2:ed:69:8a:d0:
6a:19:c6:1d:e3:da:3c:08:df:bc:17:12:78:d8:e8:8b:68:fb:
df:4e:d3:1b:b3:c1:fa:9f:7e:03:ce:0b:18:69:56:2b:2f:02:
f8:ec:87:d4:ae:fd:59:86:ae:69:c8:55:a2:1f:1d:63:a8:95:
09:49:33:bc:8d:22:ba:1a:39:99:30:d6:62:d5:50:4b:9c:9b:
ad:28:4b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:06 2025 by rpki-client