Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/oWiKdHHtLRtyOG1MQXQtoMbsqrs.roa
File: oWiKdHHtLRtyOG1MQXQtoMbsqrs.roa (raw, json)
Hash identifier: FkljHYs9OQLaaIGLU+13XTwbJqOZ63En1MAJgsyShrE=
Subject key identifier: A1:68:8A:74:71:ED:2D:1B:72:38:6D:4C:41:74:2D:A0:C6:EC:AA:BB
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 0182984875DA63EFB9D0424BC401A81F7C31
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/oWiKdHHtLRtyOG1MQXQtoMbsqrs.roa
Signing time: Sat 13 Aug 2022 17:37:41 +0000
ROA not before: Sat 13 Aug 2022 17:37:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.42.25.0/24 maxlen: 24
185.42.26.0/24 maxlen: 24
185.42.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:98:48:75:da:63:ef:b9:d0:42:4b:c4:01:a8:1f:7c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Aug 13 17:37:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1688a7471ed2d1b72386d4c41742da0c6ecaabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:84:1b:31:74:fe:1e:8b:f1:51:1d:4f:49:
89:44:ce:1c:1f:11:a3:17:dd:64:c9:65:78:24:b0:
2d:3f:54:7e:f7:9a:93:99:65:3c:50:d4:f8:f6:b8:
fe:04:07:63:3c:bc:b7:7d:04:5c:fa:74:d6:0b:54:
87:76:53:66:9e:5d:81:56:8d:53:cc:cf:9a:c8:b6:
34:ac:89:25:b9:88:3b:b3:8e:2f:e5:4a:ad:d1:41:
80:0c:cb:8a:b6:f0:2c:6e:10:0e:c3:4b:db:15:a3:
e5:e2:0b:8e:97:9b:48:4b:e4:1c:8e:d4:34:9e:1b:
a8:fc:8a:f0:05:24:0e:28:9c:c1:ee:3e:67:35:c5:
b2:73:47:04:95:c0:70:37:a9:44:75:cb:49:3a:cf:
42:49:5f:dd:5d:5a:c0:82:0c:76:6c:27:d1:03:c9:
9d:e2:37:d7:a4:2a:fb:32:ea:d8:2c:03:c3:62:ce:
de:41:bc:e1:38:0a:c4:3f:d8:3a:ba:7c:7a:0f:c1:
f2:76:9b:5a:af:78:67:24:78:c8:e8:86:56:62:b1:
7b:77:ed:29:ab:db:1e:5a:dc:0a:c5:cf:fb:aa:29:
78:5d:73:31:4d:34:77:4f:b0:38:05:a1:e8:5b:ba:
e3:c4:3a:b4:ac:58:6d:a6:ad:8a:03:3b:e0:76:26:
2a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:68:8A:74:71:ED:2D:1B:72:38:6D:4C:41:74:2D:A0:C6:EC:AA:BB
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/oWiKdHHtLRtyOG1MQXQtoMbsqrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.25.0-185.42.27.255
Signature Algorithm: sha256WithRSAEncryption
43:1c:ec:cf:60:5e:1a:dc:4f:c6:dd:78:67:db:84:db:a7:57:
e1:a2:c6:c4:b1:cc:90:c9:fa:29:7e:55:a6:ca:90:36:e9:e0:
e9:65:df:58:e2:c2:fa:b3:6f:bc:f0:7a:80:d5:1c:a0:ea:c2:
92:db:77:3f:3f:0a:44:b8:12:fb:9c:d6:dc:34:2f:7f:84:aa:
85:72:e0:12:3f:eb:02:62:17:61:9a:9a:ef:2d:2d:30:88:27:
ee:13:58:86:61:ed:05:d8:76:21:e3:2b:24:98:4f:01:61:6c:
55:e4:f9:aa:5c:8a:ca:57:fe:f9:e1:e3:c0:05:31:45:6e:91:
82:73:bb:5f:8b:21:12:4e:41:61:92:84:54:ce:50:f3:99:eb:
78:59:cd:80:d3:1e:96:18:8c:a8:4b:11:ff:3c:dd:2f:f8:e7:
26:ee:eb:6d:7b:0b:32:18:f5:bc:d4:77:28:f8:24:92:c1:3f:
83:23:25:24:59:49:71:a0:10:41:2f:b6:4d:ec:c9:4d:3d:e1:
17:17:b0:ce:e5:dd:e4:a9:fe:41:df:aa:22:1f:24:36:7b:b3:
ff:60:78:7d:b8:96:41:65:a4:30:a0:d7:9e:f9:8d:0e:6c:48:
f2:fd:31:30:7a:10:6e:21:ed:60:e8:73:29:7b:b0:21:91:04:
b4:e8:c8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:54 2025 by rpki-client