Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/OjLmG96tUqpz0n6584FlWbg-aTU.roa
File: OjLmG96tUqpz0n6584FlWbg-aTU.roa (raw, json)
Hash identifier: Uu2jDC5rM569ajuJPSRsaUU0+CECn5ywLECKhVO3JFo=
Subject key identifier: 3A:32:E6:1B:DE:AD:52:AA:73:D2:7E:B9:F3:81:65:59:B8:3E:69:35
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 55C4DC
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/OjLmG96tUqpz0n6584FlWbg-aTU.roa
Signing time: Mon 02 May 2022 05:26:47 +0000
ROA not before: Mon 02 May 2022 05:26:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48687
IP address blocks: 89.23.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5620956 (0x55c4dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: May 2 05:26:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a32e61bdead52aa73d27eb9f3816559b83e6935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:23:5f:c9:57:5c:76:b8:1b:b0:d8:b4:d6:
aa:89:ae:d6:a6:f3:40:3f:b7:a5:23:e8:c5:3d:73:
6f:30:b2:49:ba:4b:51:2e:ab:42:b8:72:9a:41:1a:
8d:35:83:45:20:ca:c4:10:a0:63:42:6b:36:2a:fc:
f2:fe:ca:f8:64:37:23:45:f0:88:f7:61:64:76:b5:
00:f4:1b:5c:43:e6:ec:2f:53:df:e3:d5:af:1d:b9:
cd:14:91:a5:b0:f2:cd:8b:84:7b:78:d7:25:87:23:
3b:e0:7f:16:b2:72:40:8c:1f:61:d5:f7:7f:99:9e:
af:b1:e5:e8:fb:50:30:17:17:23:1b:ef:f0:ab:88:
25:39:04:40:1b:3a:1f:a1:c8:86:6c:4a:af:ab:0f:
da:91:52:c0:54:4a:a9:01:6d:91:59:54:41:61:10:
8a:d8:a6:76:53:bf:cc:da:fb:f1:f4:07:5f:36:38:
e4:31:53:1c:bd:ce:1d:76:f1:90:df:18:b1:af:a4:
32:17:07:9f:01:6c:6b:d1:93:65:53:6d:1d:b7:9a:
2e:0e:43:39:82:b1:fa:09:c5:13:2c:28:fe:58:3a:
52:77:ff:17:38:71:91:38:90:81:9c:50:c0:be:10:
5f:01:df:a8:b2:fd:bf:c8:e8:95:d3:2a:87:48:21:
db:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:32:E6:1B:DE:AD:52:AA:73:D2:7E:B9:F3:81:65:59:B8:3E:69:35
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/OjLmG96tUqpz0n6584FlWbg-aTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.96.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:67:f5:60:75:0e:e8:7e:c6:c3:b6:53:7f:e3:b8:ca:c5:9c:
a1:f3:9b:08:15:52:14:5d:1e:76:fd:a2:93:d4:b5:89:c9:80:
b7:4f:22:ce:cb:d6:7c:89:1e:c4:02:23:69:51:53:38:c0:37:
3a:2a:1f:25:0c:97:6d:d3:3b:be:c9:02:b2:80:6f:2d:fb:84:
c7:57:37:17:09:26:16:8d:05:a3:08:39:d3:c9:a1:e4:86:e1:
a9:68:03:4a:e5:cd:31:a1:db:8b:2f:aa:91:75:c8:95:e6:ba:
bb:e9:b5:00:ec:38:e0:01:77:8d:37:7a:4d:d5:b6:2c:87:cb:
a6:08:06:3e:39:26:c6:14:45:e3:b7:b3:c2:68:19:d9:cd:69:
46:8b:58:df:dc:0d:d3:46:f6:ad:60:d5:f8:c2:27:ff:97:74:
73:d1:b7:12:23:74:ab:d0:b9:0a:bc:03:e2:e6:76:34:23:29:
2d:3f:7d:d6:21:d7:95:a4:69:2d:81:5d:f1:b1:0c:98:db:bb:
06:c3:f7:f1:be:8b:e0:59:9b:42:1d:02:89:a8:7b:b0:4f:82:
44:fb:15:6c:6a:97:cf:34:e5:66:98:40:03:22:bb:ce:7a:db:
49:15:de:43:1c:94:d9:3e:08:96:f5:5b:78:94:2b:75:61:1b:
e0:18:4f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:18 2025 by rpki-client