Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/OCzx_78p6LuRZ2Y9VdripBX2gM8.roa
File: OCzx_78p6LuRZ2Y9VdripBX2gM8.roa (raw, json)
Hash identifier: Mc0jDuk9HPzcuOYUP3zkI8gHInm8/SYkdeSbffcFADA=
Subject key identifier: 38:2C:F1:FF:BF:29:E8:BB:91:67:66:3D:55:DA:E2:A4:15:F6:80:CF
Certificate issuer: /CN=d9d0318f2685e32d2dba923f6662771427359738
Certificate serial: 01941FFAB34248A7D74D6FAF61DED5F11396
Authority key identifier: D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/OCzx_78p6LuRZ2Y9VdripBX2gM8.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8728
IP address blocks: 82.147.160.0/19 maxlen: 32
82.147.160.0/21 maxlen: 32
82.147.168.0/21 maxlen: 32
84.52.0.0/18 maxlen: 32
89.235.192.0/18 maxlen: 32
109.235.240.0/21 maxlen: 32
185.200.68.0/22 maxlen: 32
212.7.0.0/19 maxlen: 32
212.7.30.0/24 maxlen: 32
2001:1b28::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b3:42:48:a7:d7:4d:6f:af:61:de:d5:f1:13:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d0318f2685e32d2dba923f6662771427359738
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=382cf1ffbf29e8bb9167663d55dae2a415f680cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:14:e5:b9:92:fa:e5:2b:c3:4f:9d:21:04:
93:3c:99:8e:0f:42:bd:dd:22:a1:93:50:11:14:93:
98:95:a3:8d:41:c9:ee:09:5c:1c:8a:3a:ba:e6:76:
28:c8:1e:f9:f5:30:26:7a:67:d4:e3:fa:42:85:d9:
cf:12:7b:cf:f1:bb:b4:5f:3c:c3:89:cd:11:74:06:
e9:c1:cb:f4:a0:13:d6:d1:d9:5b:2f:39:11:0a:e9:
05:97:8d:c0:5e:13:c0:a2:ec:a8:ba:37:45:25:04:
1e:c9:83:2d:42:73:b0:45:9e:06:c4:ed:71:b0:d7:
69:d0:2f:1c:90:53:27:9b:a6:83:97:af:37:dc:d3:
34:56:3d:c0:48:45:24:69:3d:a6:10:67:c3:58:b9:
c3:0a:e9:5a:52:56:85:01:e4:2c:cb:f7:43:a5:fe:
c4:11:75:a7:c1:f4:79:9d:ca:20:68:ba:e6:03:32:
b1:20:7a:ac:76:7b:32:11:a0:dd:09:a9:0e:14:3b:
33:3b:07:e3:df:e6:bf:81:70:8c:ab:b0:41:7e:17:
26:1b:d2:cc:27:2d:32:d8:82:3c:cf:ea:c5:d6:1f:
9a:bd:db:26:38:98:67:14:f0:ce:30:46:8a:a8:d4:
bf:e0:aa:fd:69:16:e7:95:03:da:dd:ed:7c:ab:b1:
e5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2C:F1:FF:BF:29:E8:BB:91:67:66:3D:55:DA:E2:A4:15:F6:80:CF
X509v3 Authority Key Identifier:
keyid:D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/OCzx_78p6LuRZ2Y9VdripBX2gM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.147.160.0/19
84.52.0.0/18
89.235.192.0/18
109.235.240.0/21
185.200.68.0/22
212.7.0.0/19
IPv6:
2001:1b28::/32
Signature Algorithm: sha256WithRSAEncryption
72:2f:c1:3d:e2:13:e7:8c:bd:c8:74:9c:61:ab:39:b5:91:72:
d5:1c:fb:4e:d0:26:65:44:1a:43:10:5f:0f:e9:fc:93:13:c7:
c6:35:22:75:d1:89:48:77:e8:a5:d9:dd:88:3b:ec:69:40:4a:
06:f3:89:1a:cf:90:30:f2:15:dd:52:eb:0b:7e:db:13:07:01:
d4:94:bd:22:b3:c8:17:27:60:c8:6c:8f:ec:12:7d:25:b0:ed:
0f:d1:bf:f4:f0:95:03:78:da:bc:0f:c7:6b:d2:e6:0b:26:32:
62:8a:6f:8f:43:72:ef:c8:3f:73:5b:58:d4:6f:97:5a:75:4f:
7c:67:48:b3:3f:f0:ca:3c:e1:67:47:aa:5b:1b:7a:4d:28:49:
ac:dd:00:44:30:70:25:f3:31:77:0e:f7:06:4a:13:a8:2f:6a:
ff:0c:c3:5e:e1:83:78:4d:65:79:73:08:53:06:03:a3:15:d7:
d5:ba:59:55:81:41:9f:29:b0:11:21:09:f0:35:36:31:4b:ed:
2c:b9:ff:dd:36:bf:fa:ef:da:b1:68:c4:fa:37:84:fe:24:f3:
4f:4f:51:e4:70:93:0d:51:71:68:33:c5:aa:0e:36:e4:48:bf:
ba:ee:3b:66:53:7a:93:92:43:58:a2:4f:3d:89:b2:a8:b8:82:
04:22:5b:89
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZQf+rNCSKfXTW+vYd7V8ROWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDAzMThmMjY4NWUzMmQyZGJhOTIzZjY2NjI3NzE0Mjcz
NTk3MzgwHhcNMjUwMTAxMDM0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODJjZjFmZmJmMjllOGJiOTE2NzY2M2Q1NWRhZTJhNDE1ZjY4MGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP8U5bmS+uUrw0+dIQSTPJmOD0K9
3SKhk1ARFJOYlaONQcnuCVwcijq65nYoyB759TAmemfU4/pChdnPEnvP8bu0XzzD
ic0RdAbpwcv0oBPW0dlbLzkRCukFl43AXhPAouyoujdFJQQeyYMtQnOwRZ4GxO1x
sNdp0C8ckFMnm6aDl6833NM0Vj3ASEUkaT2mEGfDWLnDCulaUlaFAeQsy/dDpf7E
EXWnwfR5ncogaLrmAzKxIHqsdnsyEaDdCakOFDszOwfj3+a/gXCMq7BBfhcmG9LM
Jy0y2II8z+rF1h+avdsmOJhnFPDOMEaKqNS/4Kr9aRbnlQPa3e18q7HlaQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFDgs8f+/Kei7kWdmPVXa4qQV9oDPMB8GA1UdIwQY
MBaAFNnQMY8mheMtLbqSP2ZidxQnNZc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRBeGp5YUY0eTB0dXBJX1ptSjNGQ2MxbHpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84Y2U2MDktZGIxZC00OTk3LTlkOGEt
OTZkZGQ1YTAyMzlkLzEvT0N6eF83OHA2THVSWjJZOVZkcmlwQlgyZ004LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi84Y2U2MDktZGIxZC00OTk3LTlkOGEtOTZkZGQ1YTAyMzlk
LzEvMmRBeGp5YUY0eTB0dXBJX1ptSjNGQ2MxbHpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQFUpOgAwQG
VDQAAwQGWevAAwQDbevwAwQCuchEAwQF1AcAMA0EAgACMAcDBQAgARsoMA0GCSqG
SIb3DQEBCwUAA4IBAQByL8E94hPnjL3IdJxhqzm1kXLVHPtO0CZlRBpDEF8P6fyT
E8fGNSJ10YlId+il2d2IO+xpQEoG84kaz5Aw8hXdUusLftsTBwHUlL0is8gXJ2DI
bI/sEn0lsO0P0b/08JUDeNq8D8dr0uYLJjJiim+PQ3LvyD9zW1jUb5dadU98Z0iz
P/DKPOFnR6pbG3pNKEms3QBEMHAl8zF3DvcGShOoL2r/DMNe4YN4TWV5cwhTBgOj
FdfVullVgUGfKbARIQnwNTYxS+0suf/dNr/679qxaMT6N4T+JPNPT1HkcJMNUXFo
M8WqDjbkSL+67jtmU3qTkkNYok89ibKouIIEIluJ
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:29:06 2025 by rpki-client