Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/OVOzZ2g8zifvqCY8wDqOXjL1AOc.roa
File: OVOzZ2g8zifvqCY8wDqOXjL1AOc.roa (raw, json)
Hash identifier: ei5vXf6WAl7FEI5d5Hm8KKAZYtO3URaho5E46M2Vof8=
Subject key identifier: 39:53:B3:67:68:3C:CE:27:EF:A8:26:3C:C0:3A:8E:5E:32:F5:00:E7
Certificate issuer: /CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Certificate serial: 019420684799657956D321D434E196D809F6
Authority key identifier: 0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/OVOzZ2g8zifvqCY8wDqOXjL1AOc.roa
Signing time: Wed 01 Jan 2025 05:48:12 +0000
ROA not before: Wed 01 Jan 2025 05:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201290
IP address blocks: 185.214.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:47:99:65:79:56:d3:21:d4:34:e1:96:d8:09:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3953b367683cce27efa8263cc03a8e5e32f500e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:80:f5:f8:b1:88:93:45:6e:ee:1c:62:48:
c3:cd:75:b2:4f:e6:ea:28:ca:0d:7a:cd:2d:8b:cc:
85:ac:c0:eb:61:63:53:5b:61:77:dd:12:da:e4:b7:
b7:11:5f:6b:6d:0c:b8:95:42:b5:0a:53:86:28:c2:
80:7b:b2:0e:e0:8a:9f:93:21:98:93:d5:c9:ea:e3:
7b:b4:f4:aa:a4:de:cd:6c:1d:5d:6b:a8:0e:3e:17:
56:07:37:b3:1c:b0:4c:ec:87:7a:77:11:8c:27:08:
53:a4:68:76:6d:1f:9c:84:6a:ab:c0:6d:32:0a:94:
35:76:63:bb:22:d2:33:5d:a0:7c:54:99:23:ed:ac:
17:44:f5:57:60:c7:b1:01:1b:cd:97:d0:43:d7:6c:
b9:83:2f:52:e6:53:a8:ac:b2:20:34:64:57:4f:20:
7b:f6:26:c7:03:12:df:d5:4d:95:50:b6:a9:19:72:
23:bd:a0:b9:42:da:a5:9f:2e:c8:92:bc:32:25:98:
bd:b7:bb:03:79:4d:a7:b9:4d:13:b2:c0:b4:49:6d:
ed:b6:75:b4:7e:8f:7f:47:cb:47:e2:31:0a:22:32:
f1:c4:12:54:83:a3:3e:9c:72:b8:75:06:e6:f2:3b:
b3:55:3e:13:52:9e:0f:27:54:a3:77:e9:02:44:35:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:53:B3:67:68:3C:CE:27:EF:A8:26:3C:C0:3A:8E:5E:32:F5:00:E7
X509v3 Authority Key Identifier:
keyid:0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/OVOzZ2g8zifvqCY8wDqOXjL1AOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.88.0/24
Signature Algorithm: sha256WithRSAEncryption
63:69:36:c2:a8:a2:36:75:65:c9:fd:61:49:4e:b1:62:d6:5e:
0a:62:c7:83:08:ad:99:f6:f6:5b:7e:05:1f:ad:93:35:6e:ed:
9b:e7:51:20:8f:d3:b6:4d:7b:7a:01:ce:73:e0:be:42:27:10:
7e:f2:eb:de:a9:40:ec:ca:29:c2:94:a3:da:0d:c3:65:f7:47:
08:ac:d2:fa:10:26:51:68:62:05:bc:ea:10:2c:8d:4d:fb:09:
af:ce:c8:ef:a5:0b:4d:58:8c:95:eb:de:09:89:60:ac:f7:47:
3b:18:74:5b:3d:f8:7e:0c:b1:bc:89:ce:f5:a7:bc:bb:06:95:
7b:8f:4d:26:46:db:b9:28:8b:0b:3b:3e:f7:06:6d:ca:71:f8:
2f:72:cd:03:6b:47:93:20:17:6f:2b:3f:a8:21:02:39:57:57:
5a:65:fb:c1:55:c8:fc:03:a4:d8:69:a4:e3:0c:15:a0:68:e7:
08:98:f8:2d:35:2e:6f:aa:d9:6f:a3:60:b3:fd:ad:a4:f4:ee:
9b:01:f3:79:1b:fa:31:0d:e7:81:1c:ba:39:cb:f6:74:c7:ad:
a8:a6:3b:d7:5c:15:5e:aa:7b:e7:ca:5c:78:ed:ae:e6:86:43:
37:49:94:37:5e:11:48:d4:2a:d5:08:ab:4c:c6:cf:14:42:de:
66:41:26:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:06 2025 by rpki-client