Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/OhFs8ELf0BkBqUqSta-UtJTxxOY.roa
File: OhFs8ELf0BkBqUqSta-UtJTxxOY.roa (raw, json)
Hash identifier: eORqJrZ4eHwt+ZtqWQMblZ7ybIDSjazTPoe3DTl1tC8=
Subject key identifier: 3A:11:6C:F0:42:DF:D0:19:01:A9:4A:92:B5:AF:94:B4:94:F1:C4:E6
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 01941F8C73F9A772CFCB89FFE21CF3D38A05
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/OhFs8ELf0BkBqUqSta-UtJTxxOY.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 185.155.207.0/24 maxlen: 24
185.186.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:73:f9:a7:72:cf:cb:89:ff:e2:1c:f3:d3:8a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a116cf042dfd01901a94a92b5af94b494f1c4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:95:fa:78:4e:b8:db:38:77:b5:11:d4:a0:a8:
0b:41:6e:ae:65:47:3c:e3:f9:9d:6c:51:94:91:62:
99:d8:df:ef:8a:a5:f0:b5:42:db:2b:b0:8b:58:fe:
f0:27:85:cc:8d:36:77:c0:8d:df:ab:a2:6a:a3:05:
45:7c:b5:7b:42:f8:8b:8c:97:f2:36:3e:d1:11:42:
7e:dc:dd:ab:47:c9:a1:d9:32:3f:f8:8e:87:06:62:
5f:66:a5:82:a8:80:f8:04:34:c8:7d:37:00:49:9b:
b3:36:75:0f:39:12:67:e2:78:ce:9e:a3:13:b8:31:
6b:c9:e3:a1:bb:75:47:0b:db:0a:22:29:a7:e9:85:
23:4c:76:bf:44:2b:b1:ed:90:0c:6c:76:39:3d:72:
4f:cf:6e:0f:5d:eb:35:64:87:ba:7f:5d:ea:92:56:
8c:c3:e5:9f:26:c1:0f:95:ef:60:e0:e1:6e:a2:71:
10:eb:62:9c:c0:29:a1:c2:bb:bc:4c:46:92:39:a3:
bd:b2:19:bf:41:ac:a2:93:a5:0b:cd:78:a1:e3:87:
90:42:a4:38:36:0f:d0:20:87:8b:34:d7:d2:d2:0a:
2c:d5:64:f7:fb:4e:19:45:fb:d0:c9:23:65:a2:e2:
2f:50:4d:4f:84:60:ae:10:2b:1f:b9:e6:cb:fb:4f:
89:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:11:6C:F0:42:DF:D0:19:01:A9:4A:92:B5:AF:94:B4:94:F1:C4:E6
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/OhFs8ELf0BkBqUqSta-UtJTxxOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.207.0/24
185.186.183.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:8c:da:67:0d:f0:1f:36:51:e6:63:61:85:92:b8:25:36:d3:
7f:4d:fc:9b:18:c2:97:6d:19:b0:34:40:92:a8:c9:8b:27:6d:
cb:18:c3:32:5a:d3:47:4f:4e:51:c1:e2:2a:b3:ee:4f:26:29:
c2:49:51:70:72:58:cd:04:c3:67:a1:85:4f:75:c7:28:c2:cf:
fb:42:7e:a5:6c:dc:89:1f:74:ed:45:6e:90:36:29:8e:5f:a2:
89:e9:3c:1b:ae:1e:33:75:7c:24:16:38:15:17:bf:94:2f:31:
33:e3:0a:4b:e3:78:23:fd:7f:39:50:62:8a:45:cd:1a:8e:5d:
a6:ba:17:74:bd:d7:dd:b2:44:2b:c9:59:e5:35:2d:54:20:e0:
71:fa:bd:25:eb:54:86:1f:61:5a:c6:50:61:91:4c:d5:dd:54:
c6:eb:82:e0:fc:68:7c:fa:5e:10:b7:26:9c:a8:de:78:fb:fc:
61:8c:6a:00:ba:62:02:19:b3:f4:d1:d0:62:37:d2:88:25:52:
9f:b6:4a:3c:23:db:b1:0f:ae:d4:03:30:ed:ae:5f:c3:ef:28:
49:d3:9c:9a:1d:fe:6c:36:ea:88:99:d5:5c:db:1a:c4:75:62:
7d:c6:e3:97:7f:3d:cc:f8:ed:4a:dc:6d:15:57:83:85:a6:c2:
9d:9b:59:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:51 2025 by rpki-client