Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/oYl1-NMXXzEXtTi3L5l80mvOKew.roa
File: oYl1-NMXXzEXtTi3L5l80mvOKew.roa (raw, json)
Hash identifier: HGKJcqJks4x1KvA9MPs1IeJtaKWdWbE52yFjhD/1Aak=
Subject key identifier: A1:89:75:F8:D3:17:5F:31:17:B5:38:B7:2F:99:7C:D2:6B:CE:29:EC
Certificate issuer: /CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Certificate serial: 01942825F3AD989F7D5AB52FED9E2266C812
Authority key identifier: 21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/oYl1-NMXXzEXtTi3L5l80mvOKew.roa
Signing time: Thu 02 Jan 2025 17:52:43 +0000
ROA not before: Thu 02 Jan 2025 17:52:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206988
IP address blocks: 185.169.224.0/22 maxlen: 22
2a0a:6d00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:f3:ad:98:9f:7d:5a:b5:2f:ed:9e:22:66:c8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Validity
Not Before: Jan 2 17:52:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a18975f8d3175f3117b538b72f997cd26bce29ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d1:dc:7d:c4:b4:fc:83:d3:eb:05:00:92:d2:
68:62:01:c4:62:14:cd:91:fb:0e:02:f9:48:16:d8:
08:5f:3c:f6:59:cb:1a:0e:ef:ed:02:13:e8:5a:e9:
4b:b5:4f:24:ac:9b:d8:df:74:42:1c:48:ac:bd:ab:
c2:91:74:5e:d3:84:92:83:0f:dd:f1:de:74:62:27:
7b:ba:bc:41:b7:b5:43:33:6f:ee:ab:9e:87:4d:e8:
43:25:32:fb:db:21:35:08:4e:3a:4b:4f:53:69:9c:
d0:d3:1f:e2:89:28:fd:19:23:20:10:11:c1:8b:dc:
aa:c6:74:31:04:72:87:fc:68:7b:50:b9:aa:59:07:
ef:47:f8:8b:ae:58:73:04:92:e8:3a:65:f5:e9:af:
69:77:06:2e:92:50:8d:fe:64:4d:3e:13:d6:df:30:
6d:0c:50:f9:62:ea:85:17:db:76:f0:36:68:e2:06:
4c:f0:a6:51:b7:50:c9:a5:25:f7:4e:cc:68:89:ca:
ed:10:ff:a2:ff:d0:d3:e0:25:1f:c1:ea:d8:f2:27:
93:e1:2b:c0:5a:f7:f8:93:0c:2a:e5:4e:18:2a:cc:
f6:e5:79:ec:27:d8:2b:07:a0:cd:d6:81:57:23:82:
4e:99:1d:b0:95:ec:b7:e4:a8:f8:7a:83:5f:d4:72:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:89:75:F8:D3:17:5F:31:17:B5:38:B7:2F:99:7C:D2:6B:CE:29:EC
X509v3 Authority Key Identifier:
keyid:21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/oYl1-NMXXzEXtTi3L5l80mvOKew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.224.0/22
IPv6:
2a0a:6d00::/29
Signature Algorithm: sha256WithRSAEncryption
3f:00:47:8f:b4:83:2e:dd:26:de:68:5b:1b:bb:2c:19:47:70:
fe:69:cf:15:2e:3c:5c:15:6c:c1:a9:91:40:70:06:4e:a2:a1:
df:66:ee:9b:04:53:fa:80:e2:c1:69:a4:1e:09:03:14:59:53:
c2:5c:8a:22:fe:df:66:9e:7f:8c:fe:b1:c0:23:42:6a:33:d2:
3b:d3:fb:09:60:b4:76:89:ca:f2:33:32:68:f1:62:0d:ed:a0:
9b:a7:60:49:31:3e:56:d1:7d:98:83:39:56:38:03:20:de:f4:
df:bd:36:0d:3b:04:6d:f3:4f:66:5d:be:d3:f2:4e:05:1f:ed:
58:24:d5:6b:ca:e4:30:64:b2:67:7c:fa:be:a5:39:aa:79:8a:
2d:8a:e6:a8:64:c5:3b:38:9f:bc:a4:39:a6:9a:bc:01:a6:20:
41:63:44:2a:31:d2:a4:3a:e4:b3:63:69:2d:53:49:2b:71:e2:
0c:b5:fb:7d:61:0b:bf:de:b5:93:76:f5:e3:75:a4:8b:4f:28:
53:f1:2d:3c:32:06:65:9c:7a:d9:b0:e2:66:7b:8d:3b:c5:5f:
70:b1:80:51:cf:d8:12:61:75:2c:13:4e:7b:64:d8:3d:1d:23:
30:66:66:1b:7e:90:dd:58:8c:25:6b:0b:bd:cc:58:14:ef:d1:
5b:4b:ad:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:53:10 2025 by rpki-client