Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/O8Ie2UFyR26_in9H9ZehlUhv6CE.roa
File: O8Ie2UFyR26_in9H9ZehlUhv6CE.roa (raw, json)
Hash identifier: op5RgQZfGCiE+Ienp4xwxhQmRHhljBmY6akepNSvK9c=
Subject key identifier: 3B:C2:1E:D9:41:72:47:6E:BF:8A:7F:47:F5:97:A1:95:48:6F:E8:21
Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial: 019422FB42D5EF7CAE53082FDEECD2815A7A
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/O8Ie2UFyR26_in9H9ZehlUhv6CE.roa
Signing time: Wed 01 Jan 2025 17:47:59 +0000
ROA not before: Wed 01 Jan 2025 17:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198385
IP address blocks: 45.147.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:42:d5:ef:7c:ae:53:08:2f:de:ec:d2:81:5a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Validity
Not Before: Jan 1 17:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bc21ed94172476ebf8a7f47f597a195486fe821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:86:1b:e4:c5:c4:2b:f8:70:9d:5b:9b:8d:e9:
40:ff:95:27:1b:d4:fb:e1:6c:d2:7e:40:22:7a:c4:
ee:55:3b:0a:fd:8d:92:83:98:c0:c9:88:d6:cc:8a:
e7:e1:9f:a5:ae:f6:bb:48:3e:1a:10:7b:46:77:c6:
a7:be:75:8e:aa:3c:e9:82:a7:0d:a1:b2:17:c8:05:
d1:4e:c1:ba:47:ad:30:f1:ed:54:12:26:1e:f4:7e:
c9:47:98:53:45:75:bd:c2:dd:e4:0c:da:60:ab:14:
a2:c5:33:56:97:5b:1f:a6:97:22:6b:b4:04:16:6a:
25:52:70:c7:01:6a:0a:68:89:46:55:2e:68:31:cd:
8d:17:b2:84:07:77:4a:be:a7:0f:67:a2:8f:96:dc:
89:81:3b:6f:94:b3:df:7b:a8:4d:8b:13:2e:78:46:
4a:81:64:00:ce:15:53:8f:a7:e1:75:88:fd:b6:49:
c7:a4:b7:60:c7:32:e0:6b:cb:05:ac:a1:18:42:7d:
0a:b4:16:73:cd:2f:a0:15:2a:ce:26:db:3a:26:6f:
19:8f:6f:df:35:a9:5b:d1:e2:36:5a:6c:4f:65:d4:
8b:81:aa:b0:a2:9f:e6:27:c6:d8:0e:cb:ba:f8:75:
fa:6b:96:c9:86:05:59:d3:85:d9:92:2f:46:07:33:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C2:1E:D9:41:72:47:6E:BF:8A:7F:47:F5:97:A1:95:48:6F:E8:21
X509v3 Authority Key Identifier:
keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/O8Ie2UFyR26_in9H9ZehlUhv6CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.41.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a0:a5:23:c4:97:f9:47:5f:59:15:5e:d8:81:c6:f8:8c:e4:
0f:9c:0f:d8:88:6d:4b:c1:2b:66:f5:e0:22:a2:a8:55:f6:59:
e1:b6:8e:8e:54:12:4f:cc:45:ae:43:a6:63:ed:6f:f3:5a:a4:
87:af:45:da:44:eb:2b:8a:d5:5f:53:23:a0:48:38:e5:ff:a7:
9b:ad:5d:25:4e:91:15:c0:a9:e8:16:a5:23:ef:6e:94:ff:a9:
82:b5:fb:9b:fc:57:80:5e:82:0f:b0:4e:84:51:0d:c0:7b:5f:
c8:a7:03:ef:5f:9c:dd:dd:24:d0:d6:e4:0b:3e:a4:26:9e:97:
bd:ed:47:21:7c:57:72:ba:6e:38:08:cd:ba:38:1e:75:4f:3d:
3b:60:67:83:5f:18:51:f2:28:3b:0a:13:0f:4b:e8:0b:a8:a5:
83:0f:01:1b:7f:c4:59:6a:67:6a:e8:f4:95:78:44:f9:0d:cd:
84:ce:17:44:ae:2c:87:6b:a2:6a:70:a7:94:d5:06:f6:f5:e3:
9a:2f:04:c9:d4:f9:82:15:45:09:5f:81:38:c4:bd:72:c8:43:
bc:f5:14:76:ea:3e:30:c8:78:32:33:fd:42:13:74:47:7c:ec:
3f:9c:64:67:23:94:2c:b9:cc:ab:bf:e1:fb:5a:87:95:1b:8d:
14:ce:c4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:14 2025 by rpki-client