Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/OcxfXVrvYxkgLmxQUmK4efpt3cc.roa
File: OcxfXVrvYxkgLmxQUmK4efpt3cc.roa (raw, json)
Hash identifier: 9yuVp8SRMZUYM9hTDLvDJDMqxHqS1ktDbQ1bzB9Zyrs=
Subject key identifier: 39:CC:5F:5D:5A:EF:63:19:20:2E:6C:50:52:62:B8:79:FA:6D:DD:C7
Certificate issuer: /CN=08818cbb0f9d1e573773d791138a0122f28bec56
Certificate serial: 01942067CAE121A6D363481BB9A2C38DCDD4
Authority key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/OcxfXVrvYxkgLmxQUmK4efpt3cc.roa
Signing time: Wed 01 Jan 2025 05:47:40 +0000
ROA not before: Wed 01 Jan 2025 05:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206818
IP address blocks: 185.158.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ca:e1:21:a6:d3:63:48:1b:b9:a2:c3:8d:cd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08818cbb0f9d1e573773d791138a0122f28bec56
Validity
Not Before: Jan 1 05:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39cc5f5d5aef6319202e6c505262b879fa6dddc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:38:04:d5:e1:21:23:94:8d:f7:8f:68:eb:
bd:3c:d4:7d:ef:21:b1:56:90:72:96:c0:5f:bb:98:
b3:c6:ba:8c:70:b3:6f:2b:e2:fa:a1:58:d6:8b:3a:
88:9a:52:b3:3d:0a:16:f9:29:10:b1:2f:93:02:58:
51:51:b8:b5:83:1f:97:d9:23:a0:e7:46:eb:2e:c0:
c3:2a:97:3a:51:2a:b8:3f:ee:3f:a2:a0:6d:e2:e1:
0a:43:58:2d:b8:38:f1:dd:0b:2e:ce:7a:ff:67:40:
a6:ee:ef:f9:e3:f0:79:3d:0b:71:1f:c7:09:ad:c8:
32:cc:41:46:d2:4e:67:a8:2f:d5:1b:7a:bc:a1:03:
47:91:c3:f4:04:15:4a:2f:76:47:20:7c:c1:6b:a4:
84:41:9b:ac:ed:88:66:67:ee:a1:b0:48:42:f1:b7:
e6:56:fa:ea:59:94:88:4a:50:b2:2e:dc:63:f4:ab:
38:e3:a5:53:1a:04:c9:0b:df:17:7c:d1:a5:7a:67:
db:6b:38:9f:f7:eb:99:ab:3e:92:64:b9:64:27:bf:
ac:75:ae:84:3f:7a:b2:5b:e7:58:d3:fc:9e:54:7f:
71:ed:c5:2a:d5:1d:f5:de:f5:e3:da:6a:29:2c:e3:
d8:aa:51:16:2a:7f:bf:93:f6:3e:c3:94:e4:1e:70:
62:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CC:5F:5D:5A:EF:63:19:20:2E:6C:50:52:62:B8:79:FA:6D:DD:C7
X509v3 Authority Key Identifier:
keyid:08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/OcxfXVrvYxkgLmxQUmK4efpt3cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.126.0/24
Signature Algorithm: sha256WithRSAEncryption
76:74:2c:ff:09:4d:f2:62:cb:d4:c0:d3:b0:88:81:71:08:ba:
a6:d1:f5:e6:35:49:a7:af:8c:d4:71:6c:0c:cf:6f:2a:26:56:
af:e9:cb:6a:79:85:65:04:9c:8d:ff:2c:bc:ff:45:a2:a3:a0:
65:49:42:6e:a6:76:e4:89:50:6d:80:b9:39:72:2c:41:20:89:
7c:ac:1e:7b:c6:50:6c:70:c4:77:a6:f5:f2:5c:92:19:77:f8:
65:94:2f:d9:20:15:36:9b:eb:4c:64:e8:4e:93:da:d2:53:5f:
e5:6b:1e:70:8d:21:40:7a:90:0c:9d:7d:ae:02:be:e1:ec:09:
8e:d2:6c:17:26:26:ad:24:72:74:3c:c2:e9:86:83:ee:57:35:
91:0c:a6:48:04:d8:8c:ef:88:e9:df:71:db:a5:ed:cc:71:d4:
ae:f1:8f:87:8b:59:04:7a:c6:36:d4:5e:20:34:5c:8e:b8:90:
b4:c8:e3:b6:db:04:01:17:a9:6d:27:62:d7:1d:9a:94:bf:1a:
a2:ec:a7:61:d5:50:16:93:ce:fa:7b:f0:39:cc:27:84:18:30:
59:b8:37:07:e1:48:1e:1b:6a:69:b0:c2:3c:1a:e1:62:5e:11:
92:13:ce:37:c3:8b:1c:66:36:7c:d5:a2:7c:9c:05:f5:28:58:
73:56:ca:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:40 2025 by rpki-client