Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/OH-wToKKpcLXZiKSEV9kWfR3r9E.roa
File: OH-wToKKpcLXZiKSEV9kWfR3r9E.roa (raw, json)
Hash identifier: +uO0A8wLAnAMRWqRTo4QJmUxBjNPBXZGwGTwpjPRQZs=
Subject key identifier: 38:7F:B0:4E:82:8A:A5:C2:D7:66:22:92:11:5F:64:59:F4:77:AF:D1
Certificate issuer: /CN=0d6f91a5216404942239e696e65cf2d37214e4af
Certificate serial: 019421B1E1CA75012065E6AEBD0A226F948A
Authority key identifier: 0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/OH-wToKKpcLXZiKSEV9kWfR3r9E.roa
Signing time: Wed 01 Jan 2025 11:48:13 +0000
ROA not before: Wed 01 Jan 2025 11:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203773
IP address blocks: 194.149.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e1:ca:75:01:20:65:e6:ae:bd:0a:22:6f:94:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6f91a5216404942239e696e65cf2d37214e4af
Validity
Not Before: Jan 1 11:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=387fb04e828aa5c2d7662292115f6459f477afd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:c4:48:43:3d:de:26:e7:0d:39:51:24:13:
3e:72:03:a7:d6:7d:c5:c7:5c:f7:49:86:d2:e3:81:
a4:9f:1d:5a:6b:5b:23:d7:70:bf:cb:36:b1:c1:23:
93:b1:42:12:e8:ce:8b:80:3f:62:97:30:da:84:ad:
8c:7f:32:2d:a6:3b:7d:06:38:e9:7f:ac:c9:da:ed:
f5:24:f4:25:dd:71:a6:9f:f2:97:f8:ab:c9:b9:b6:
43:71:02:23:f1:1f:35:4c:7d:33:73:6a:36:c8:b4:
41:2e:de:77:c3:a4:3b:68:ed:46:b7:5e:18:2d:23:
41:19:90:79:85:6b:06:3a:8e:21:ed:4c:7f:15:6f:
e0:96:bd:22:ce:de:be:73:4d:53:d4:d9:07:ae:c7:
f5:ae:9a:18:70:ad:b8:71:61:11:06:5f:17:d6:dd:
1a:15:42:c7:13:34:5a:89:4a:7e:35:11:f7:0d:94:
cc:1b:ae:31:d8:2c:62:27:5a:e8:40:47:9a:12:af:
aa:92:7b:29:b3:44:4d:63:61:94:90:fd:87:d1:49:
43:32:c4:a8:18:b2:d6:a9:c2:73:b7:6c:12:60:c4:
cd:fa:ff:0e:23:86:e6:a7:ad:09:bc:0c:ff:4a:85:
82:49:46:51:a6:98:9a:5c:c4:86:0c:05:fe:53:16:
08:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7F:B0:4E:82:8A:A5:C2:D7:66:22:92:11:5F:64:59:F4:77:AF:D1
X509v3 Authority Key Identifier:
keyid:0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/OH-wToKKpcLXZiKSEV9kWfR3r9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.149.237.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c8:0a:63:30:0a:42:72:00:d0:02:e5:99:e1:c2:7d:e1:b2:
ba:c8:d5:20:0b:01:61:ee:4f:76:90:e9:4a:c3:36:3a:33:99:
c8:e2:88:d3:e5:55:61:80:8b:87:78:fe:a5:1d:45:21:73:24:
32:be:d2:ff:d1:66:68:dd:ff:e0:90:c1:c2:ca:bc:15:37:ac:
ca:43:f0:87:4d:03:f3:04:f6:e4:82:c5:ff:4e:59:52:83:3c:
39:b0:3d:91:b3:48:e2:99:64:9a:49:09:a3:e9:c6:7b:1f:76:
dc:58:81:4e:09:8d:3e:c7:58:17:a3:16:22:c9:73:62:27:d9:
0f:23:d2:f4:02:87:f3:36:6c:97:8d:92:4e:90:8e:67:df:af:
df:a7:c5:c7:09:2d:ee:21:7d:8b:08:3b:ca:9a:eb:8d:57:a8:
79:85:45:10:a3:8b:7f:a7:9a:89:30:cb:4f:21:aa:c7:ca:4b:
21:6c:54:e6:fd:ff:2b:9e:db:59:9f:00:3d:03:08:98:03:b5:
db:f4:62:19:19:b5:d5:c7:02:ef:38:16:5c:2f:27:89:ab:58:
36:22:6b:b1:16:21:ec:ab:1e:1a:4d:a5:56:cb:07:d0:e8:3c:
d7:b6:b4:89:24:54:9f:7b:38:a1:86:fb:4b:2f:91:47:2f:ed:
05:1b:a7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:38:05 2025 by rpki-client