Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/OX-bEI30XI3qZt_0uPtv4ZRBwqM.roa
File: OX-bEI30XI3qZt_0uPtv4ZRBwqM.roa (raw, json)
Hash identifier: R7u83JZv+jgtAvgDHO6iu/lmN813J7jjtpcNdpp0wSc=
Subject key identifier: 39:7F:9B:10:8D:F4:5C:8D:EA:66:DF:F4:B8:FB:6F:E1:94:41:C2:A3
Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial: 01941FFA818203F6E1FDBC1D37B7CD489387
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/OX-bEI30XI3qZt_0uPtv4ZRBwqM.roa
Signing time: Wed 01 Jan 2025 03:48:18 +0000
ROA not before: Wed 01 Jan 2025 03:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44187
IP address blocks: 46.226.232.0/22 maxlen: 24
87.237.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:81:82:03:f6:e1:fd:bc:1d:37:b7:cd:48:93:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
Validity
Not Before: Jan 1 03:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=397f9b108df45c8dea66dff4b8fb6fe19441c2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:82:a2:a4:cb:3a:73:eb:63:6f:f2:1c:5a:
4e:63:f3:b5:c1:6a:2e:d7:1a:2f:b6:ad:f0:f1:fd:
fc:5b:2e:0e:dc:41:41:69:9f:03:06:49:76:12:61:
98:26:90:b1:6d:7e:61:eb:31:23:f4:f8:ba:f5:2f:
cb:fa:45:0b:46:70:7e:1c:87:33:27:ca:39:fb:16:
3f:af:21:76:9d:cf:93:62:19:af:7a:26:86:91:9d:
a6:f3:8a:a0:67:68:77:33:9b:8b:f6:9f:46:ca:36:
51:3b:94:67:90:77:cd:61:21:ec:e4:05:d3:00:bd:
4e:f7:66:b6:f3:00:9e:63:ca:38:fc:38:06:83:8a:
d6:0a:5e:50:9e:99:77:d5:f6:1e:fd:6b:ea:88:e3:
24:79:60:0b:65:b2:8b:40:7e:89:8a:89:53:fa:d5:
94:3e:a4:95:d7:07:0a:f1:69:0b:40:f0:67:ab:59:
c1:80:eb:e5:c4:e6:97:87:60:98:e2:53:4f:ce:67:
5e:3e:d5:2c:58:d8:fd:25:d7:7b:ec:be:78:e0:62:
ff:6c:97:03:56:a6:04:b9:3c:e7:4a:4b:09:6a:b2:
d1:ac:22:86:66:78:01:ef:15:3c:f5:93:e9:4f:24:
cb:50:aa:8d:e9:df:03:7f:fd:45:20:45:cd:3f:60:
1b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7F:9B:10:8D:F4:5C:8D:EA:66:DF:F4:B8:FB:6F:E1:94:41:C2:A3
X509v3 Authority Key Identifier:
keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/OX-bEI30XI3qZt_0uPtv4ZRBwqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.232.0/22
87.237.24.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:3f:1f:b4:0d:f3:3c:2e:88:70:c3:89:f2:4f:f9:20:22:b2:
ea:c2:a3:d6:93:bd:bf:6d:45:b8:84:c8:b4:c9:2b:82:5c:e4:
f2:31:53:bd:b9:00:da:27:20:82:a6:60:95:35:a0:53:ee:d5:
93:6a:d3:d8:10:af:4b:7b:34:d6:7a:6a:9b:3c:e5:8a:bd:56:
81:57:f5:81:91:53:56:94:4f:42:e9:7a:ee:9a:2a:bc:52:e0:
68:2c:c5:a5:f5:db:4f:95:3f:02:55:10:4a:5a:34:c8:fd:57:
32:92:c1:73:fd:97:61:aa:18:d5:1d:e4:7e:06:1a:15:d4:a9:
f9:f7:d6:10:6a:b6:e0:ae:66:a4:b5:f6:29:0f:cd:0d:ca:78:
f2:dc:19:7f:b9:87:fb:e6:b1:17:31:8b:d6:80:06:22:86:f5:
49:65:27:cb:1f:c9:41:a7:77:b6:46:40:02:71:9e:8c:3c:f1:
70:6a:58:78:08:36:d2:5c:05:6c:f0:02:89:f5:b7:3b:3a:ac:
56:1a:ea:2e:53:fe:58:a2:8e:9c:de:a3:14:f2:38:92:b2:f5:
30:c6:ba:2d:c1:43:9c:71:d7:a3:31:92:07:6e:29:0e:1c:39:
b0:b4:5e:2d:3e:87:44:29:a5:f1:3b:61:f1:84:5c:14:e6:64:
1d:44:c9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:29 2025 by rpki-client