Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/8Okcs_WzeZSlRzql6-e5V5V7syA.roa
File: 8Okcs_WzeZSlRzql6-e5V5V7syA.roa (raw, json)
Hash identifier: Bgf74cz9Nwo/ctlxM9vVhY3z4DibfYQP6Uszu31EXc8=
Subject key identifier: F0:E9:1C:B3:F5:B3:79:94:A5:47:3A:A5:EB:E7:B9:57:95:7B:B3:20
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 019427B58D588D52DC82DD63D14B6BFD482D
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/8Okcs_WzeZSlRzql6-e5V5V7syA.roa
Signing time: Thu 02 Jan 2025 15:49:57 +0000
ROA not before: Thu 02 Jan 2025 15:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152586
IP address blocks: 185.149.24.0/22 maxlen: 24
185.172.38.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:8d:58:8d:52:dc:82:dd:63:d1:4b:6b:fd:48:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Jan 2 15:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0e91cb3f5b37994a5473aa5ebe7b957957bb320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:ac:e0:2a:54:7e:64:0e:fc:51:53:fa:df:
3f:81:7f:7f:3b:47:3f:1a:57:12:c1:87:1b:fc:88:
bd:78:e0:bf:ad:fb:60:79:f4:4f:4d:68:37:f1:ba:
30:88:cc:00:de:bd:34:14:34:d7:36:12:4f:3f:b8:
dd:8c:fd:66:2d:ba:f8:3e:c6:c8:47:5d:93:63:bd:
b1:90:9f:f8:80:bf:43:82:fd:42:48:9c:95:46:4d:
b1:55:93:15:39:3c:e4:7a:8b:fc:fb:b1:0a:54:39:
fb:9e:c7:fb:b8:b8:55:78:79:f5:2f:8f:36:a1:ee:
8d:e0:b2:a4:6f:47:8b:bb:27:f1:fd:5f:0a:75:8a:
d6:81:ba:0e:e6:60:00:bf:94:9c:e2:78:bd:6a:df:
db:72:64:3a:b0:be:47:d7:d5:6b:06:50:8f:8f:ef:
be:55:4e:38:b9:50:5d:19:e2:23:f6:f6:ad:1c:2c:
27:2a:47:c6:77:fd:c1:dd:84:ff:55:a9:93:8f:35:
4e:09:89:f1:25:ca:40:d2:02:0a:ed:0c:00:8b:d7:
cb:67:04:98:d7:bb:86:04:12:df:91:68:53:27:64:
51:79:e0:8c:b0:39:be:f8:08:71:4e:b6:61:41:c9:
f1:74:e1:cd:ea:44:8e:5d:d6:08:3a:7d:3c:cb:a3:
5d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E9:1C:B3:F5:B3:79:94:A5:47:3A:A5:EB:E7:B9:57:95:7B:B3:20
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/8Okcs_WzeZSlRzql6-e5V5V7syA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.24.0/22
185.172.38.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:65:dd:fc:62:9d:f4:1e:6f:bf:e9:d1:00:ce:a9:b2:aa:06:
98:09:67:7c:dc:7e:8b:43:20:d2:15:57:34:31:c2:0a:1b:8f:
4b:4d:8f:91:3e:37:0d:3a:66:40:79:c2:3b:2a:b1:67:40:a2:
79:22:3b:9c:ab:c9:17:7d:7a:c2:71:f5:63:0c:05:73:53:e4:
bf:16:14:e9:7e:fc:45:51:f4:18:2d:b0:ad:ff:4f:c1:21:e7:
61:19:a8:ac:5e:1f:53:3c:0c:b2:b9:f5:10:40:dd:b2:71:f5:
f9:1f:4c:77:ae:4a:ec:c9:d1:05:50:74:cb:5d:84:28:4b:f1:
26:7a:70:f4:62:62:85:6c:a0:20:35:5a:d2:75:8c:05:4b:b2:
1b:26:8d:2f:ba:22:a6:b7:d4:bc:cf:11:c1:22:be:dc:c5:47:
24:77:de:d2:fd:14:c7:8f:2f:76:c8:63:fa:25:4f:bd:5f:b4:
77:49:ea:d8:3e:a2:e7:4f:83:9c:93:a3:0c:fb:89:ac:37:15:
ce:76:08:80:3c:ae:08:c8:ae:79:fd:ee:da:95:d2:61:bb:9d:
db:0a:29:aa:71:d3:13:9d:ea:72:96:6d:21:f8:4d:8f:8b:b8:
d8:ee:0d:98:da:39:22:4d:f7:68:f5:b7:ec:21:05:8d:a3:0e:
f5:47:c8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:05 2025 by rpki-client