Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/ohgD8-N3Yv7NQzLZJWc5scQw6QQ.roa
File: ohgD8-N3Yv7NQzLZJWc5scQw6QQ.roa (raw, json)
Hash identifier: 20jNFYqr0NGffL4IoffodCrdDRS2Ai2SWHLddki63Jo=
Subject key identifier: A2:18:03:F3:E3:77:62:FE:CD:43:32:D9:25:67:39:B1:C4:30:E9:04
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 0194827C8768C0E986E6700759639E5DE755
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/ohgD8-N3Yv7NQzLZJWc5scQw6QQ.roa
Signing time: Mon 20 Jan 2025 06:53:06 +0000
ROA not before: Mon 20 Jan 2025 06:53:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34655
IP address blocks: 5.159.216.0/24 maxlen: 24
5.159.217.0/24 maxlen: 24
93.93.50.0/24 maxlen: 24
93.93.53.0/24 maxlen: 24
93.93.54.0/24 maxlen: 24
95.128.120.0/24 maxlen: 24
95.128.121.0/24 maxlen: 24
95.128.122.0/24 maxlen: 24
95.128.123.0/24 maxlen: 24
95.128.124.0/24 maxlen: 24
95.128.125.0/24 maxlen: 24
95.128.126.0/24 maxlen: 24
95.128.127.0/24 maxlen: 24
109.71.162.0/24 maxlen: 24
109.71.163.0/24 maxlen: 24
109.71.164.0/24 maxlen: 24
109.71.165.0/24 maxlen: 24
109.71.166.0/24 maxlen: 24
109.71.167.0/24 maxlen: 24
185.13.89.0/24 maxlen: 24
185.13.90.0/24 maxlen: 24
185.13.91.0/24 maxlen: 24
2a03:9c40::/48 maxlen: 48
2a03:9c40:200::/48 maxlen: 48
2a03:9c40:400::/48 maxlen: 48
2a03:9c40:600::/48 maxlen: 48
2a03:9c40:800::/48 maxlen: 48
2a03:9c40:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:7c:87:68:c0:e9:86:e6:70:07:59:63:9e:5d:e7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Jan 20 06:53:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a21803f3e37762fecd4332d9256739b1c430e904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:68:bb:45:7f:de:4b:1e:75:37:25:72:10:86:
14:66:37:ca:f6:c9:b9:2c:3d:ea:0d:fa:e8:8d:1e:
2b:a2:06:d8:dd:7f:06:8c:4b:a3:27:b4:67:73:3c:
5f:ad:21:59:81:8c:cc:95:89:4c:fe:1f:45:84:b0:
c2:b1:0c:6a:43:e3:96:8c:29:ea:a5:6e:bb:3c:04:
07:4a:36:0c:5a:a5:74:b1:c5:ba:05:76:dc:a3:d0:
46:6d:92:f7:e0:69:61:2c:7a:69:94:e8:71:d5:a4:
c9:00:43:47:dc:3d:ef:06:b2:b9:3e:d3:17:18:a2:
f4:56:a5:af:80:c0:85:12:a7:9c:ea:52:9a:8f:79:
a2:d2:b8:e1:c5:f8:9a:e7:d0:de:ae:71:30:08:02:
73:05:6f:55:41:f5:52:82:a9:49:4d:3a:e6:3d:10:
6b:5f:bd:9b:24:cf:8d:80:cb:8d:f9:4b:85:d7:b1:
c5:41:2a:fe:b9:1e:f3:15:74:a0:41:a7:29:82:11:
5b:c3:b5:43:eb:25:e5:3d:c5:41:30:37:c2:7c:d1:
ba:3d:61:d8:47:4f:29:db:e1:8c:9d:1d:c2:b2:4d:
eb:d2:c1:c8:0d:cd:cc:fe:4e:6a:d7:d8:3c:86:fa:
cf:96:ca:33:4a:7f:20:bb:2a:cf:6f:0b:3b:da:37:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:18:03:F3:E3:77:62:FE:CD:43:32:D9:25:67:39:B1:C4:30:E9:04
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/ohgD8-N3Yv7NQzLZJWc5scQw6QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.216.0/23
93.93.50.0/24
93.93.53.0-93.93.54.255
95.128.120.0/21
109.71.162.0-109.71.167.255
185.13.89.0-185.13.91.255
IPv6:
2a03:9c40::/48
2a03:9c40:200::/48
2a03:9c40:400::/48
2a03:9c40:600::/48
2a03:9c40:800::/48
2a03:9c40:1000::/48
Signature Algorithm: sha256WithRSAEncryption
b0:c3:b3:1c:a8:05:93:3c:0e:51:be:2a:6d:8a:22:13:77:15:
44:a0:de:4c:7f:6c:4d:92:e7:17:4b:f4:4b:38:cd:55:24:5b:
e6:55:14:8e:9e:b4:28:14:04:02:2f:a9:78:06:83:df:db:1f:
57:34:67:30:3d:11:7b:0a:e0:d4:ce:b7:10:8b:70:26:64:df:
4f:2f:c1:c6:3e:dc:8a:3d:37:79:05:bc:22:4e:60:4c:33:73:
ff:3c:cd:2a:50:61:01:39:f9:12:27:c8:69:6f:66:1f:c8:fa:
26:23:54:cc:b8:95:0c:4f:9a:82:9a:0d:d1:27:4b:34:36:c6:
ea:18:f5:1d:85:7f:83:f2:87:a1:f3:ae:3d:09:30:a0:46:78:
bc:07:dd:b4:88:74:aa:6b:c3:3a:18:07:ad:6e:ba:4c:6d:8b:
44:4b:a5:b0:7e:5e:f7:da:ee:0c:a3:ef:b3:7d:40:71:7c:24:
e5:de:46:45:18:b1:e3:34:37:8a:6e:51:fc:db:59:dd:19:de:
80:9f:51:56:45:e7:42:6a:87:36:c2:98:0b:ca:2f:2e:a6:80:
a6:8c:17:fa:54:e5:46:4c:9b:ac:ac:9f:32:06:e4:a3:20:1f:
2b:ed:c7:72:2b:bc:2c:79:af:28:aa:d5:df:78:e3:f4:79:e8:
13:29:c9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 15:45:23 2025 by rpki-client on console.sobornost.net