Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/OHUMAhwuz8j9ycFP0uC93_9dMsI.roa
File: OHUMAhwuz8j9ycFP0uC93_9dMsI.roa (raw, json)
Hash identifier: K0wUqFGby+8hOwpjxyeCuygnkldFbJEc1krNUlngfaA=
Subject key identifier: 38:75:0C:02:1C:2E:CF:C8:FD:C9:C1:4F:D2:E0:BD:DF:FF:5D:32:C2
Certificate issuer: /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial: 019427485569B5E6302CD7343F01699514A2
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/OHUMAhwuz8j9ycFP0uC93_9dMsI.roa
Signing time: Thu 02 Jan 2025 13:50:39 +0000
ROA not before: Thu 02 Jan 2025 13:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202124
IP address blocks: 185.235.46.0/24 maxlen: 24
185.235.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:55:69:b5:e6:30:2c:d7:34:3f:01:69:95:14:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
Validity
Not Before: Jan 2 13:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38750c021c2ecfc8fdc9c14fd2e0bddfff5d32c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:be:4d:7c:83:57:bb:c9:2e:36:50:dc:40:
02:58:8a:24:e5:d9:e3:f2:82:b8:72:c5:67:e9:04:
b2:bf:1d:dd:90:ed:7c:97:5c:54:80:c5:4a:51:a2:
4b:8e:9c:b0:39:17:99:c5:a5:b1:b3:09:c2:2c:02:
c0:b3:33:2f:d9:18:7d:97:2b:2d:23:1e:36:42:b5:
09:df:1c:81:35:1d:cf:d7:ba:39:fa:da:f1:ff:44:
f3:5c:12:f0:84:3e:63:75:d1:39:a3:b7:98:36:33:
2a:ce:b4:ab:f6:1c:20:9d:41:00:c7:a0:0c:ac:b5:
e6:6a:e1:fc:45:d8:de:67:47:0a:b1:15:bd:33:b9:
28:96:33:54:ad:1a:0a:2a:4a:59:ea:dc:2f:d7:12:
16:49:d2:82:d2:4c:de:58:06:15:40:fa:db:db:b2:
aa:2b:81:39:86:c1:16:b3:71:ca:99:3f:66:c3:4d:
fc:5b:76:a3:d6:f0:21:a1:fc:7f:b8:df:cf:a0:50:
5e:c3:d6:99:d4:60:01:34:20:81:be:78:da:c3:3d:
c6:eb:3b:37:7d:3d:3f:7f:9b:0d:72:3b:6c:eb:45:
d6:1e:24:ab:4a:22:fa:0d:89:7a:1e:7f:33:61:51:
2f:ad:2e:bb:d3:59:d0:dd:2e:90:92:03:84:28:d9:
75:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:75:0C:02:1C:2E:CF:C8:FD:C9:C1:4F:D2:E0:BD:DF:FF:5D:32:C2
X509v3 Authority Key Identifier:
keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/OHUMAhwuz8j9ycFP0uC93_9dMsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.46.0/23
Signature Algorithm: sha256WithRSAEncryption
67:90:9c:87:8e:b5:a7:b5:1b:5c:5c:44:cd:fe:8f:b8:30:69:
cf:81:30:d8:5d:8d:a1:54:00:b1:12:ec:92:f0:9c:79:94:31:
05:0f:d0:62:8d:13:09:1a:a2:0a:af:fb:36:74:07:c2:cd:a1:
18:2c:b7:c3:bf:11:74:bf:48:a8:6d:c3:af:f9:77:b1:9d:d3:
02:3a:da:99:05:b2:b7:59:ad:5a:92:08:1e:54:80:89:ee:2d:
b4:5d:06:d1:73:d7:29:00:a1:3d:a2:cb:04:9b:65:57:7e:4d:
0b:03:67:df:20:a7:d5:9b:5d:83:2f:f2:cc:f4:b9:3b:58:2d:
a5:3d:ce:1e:10:d7:c3:5c:ef:2f:86:2e:1b:f5:6b:c4:ad:19:
d6:f7:40:41:45:fc:cc:ec:f7:a7:e0:13:7d:23:06:96:c8:48:
5a:68:d9:6a:76:1a:81:7c:cf:cf:54:e0:d9:69:61:7d:4e:26:
84:97:92:70:4c:9f:49:ce:1c:68:86:07:c0:41:69:a8:ef:c0:
ed:b7:3e:5a:3a:93:f6:1f:f0:0c:bb:36:e3:04:04:26:10:71:
12:a4:65:e5:3c:68:fc:49:0c:d1:e8:f5:4e:8b:09:35:ad:ff:
0d:05:30:3a:53:65:4f:74:37:18:df:a1:56:d2:95:ba:94:97:
88:4f:53:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:47 2025 by rpki-client