Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/Om-V-EmCFMGXb43s9fZ-DXbAF08.roa
File: Om-V-EmCFMGXb43s9fZ-DXbAF08.roa (raw, json)
Hash identifier: S2SC8pR//ywuBG9ZV7ZWtalhcLPclQLz9j+fN0Z1bo4=
Subject key identifier: 3A:6F:95:F8:49:82:14:C1:97:6F:8D:EC:F5:F6:7E:0D:76:C0:17:4F
Certificate issuer: /CN=a2c56441d83df94bbd0e60144a554639e40e0535
Certificate serial: 019426D944C816BCC3B213D0DB9BD97B3B94
Authority key identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/Om-V-EmCFMGXb43s9fZ-DXbAF08.roa
Signing time: Thu 02 Jan 2025 11:49:20 +0000
ROA not before: Thu 02 Jan 2025 11:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208614
IP address blocks: 194.145.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:44:c8:16:bc:c3:b2:13:d0:db:9b:d9:7b:3b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c56441d83df94bbd0e60144a554639e40e0535
Validity
Not Before: Jan 2 11:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a6f95f8498214c1976f8decf5f67e0d76c0174f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7a:79:d2:34:26:24:47:d2:9e:12:c6:79:13:
2a:a8:d3:09:b0:0b:e1:0c:c0:4f:9e:ea:84:77:8d:
ce:32:e4:34:f3:b6:2f:ef:3c:b2:6d:29:f9:0a:a3:
26:e5:b3:7a:1e:79:c6:0c:3a:15:7d:be:60:76:f9:
61:01:79:05:f6:ae:aa:27:a4:f8:d6:ae:df:a9:0f:
07:17:4a:8c:d6:3a:b0:55:6d:6e:d3:a8:bb:c7:1b:
2d:53:21:53:32:1b:2f:c0:ce:8f:e2:0f:9c:e8:9e:
c8:8b:7c:29:a5:b8:6e:ab:9f:43:41:62:c3:13:14:
c3:e8:22:1e:95:ec:6e:12:32:c7:cd:e1:a2:23:1f:
2c:5a:34:b0:85:3a:4e:e8:46:8c:c9:0f:ed:1a:c8:
ad:34:98:56:bf:d4:f2:8f:6c:67:cb:88:ae:b3:87:
21:24:d6:a4:0a:67:89:b7:a5:06:4e:34:82:a0:8e:
16:13:8d:bf:b3:48:9c:e2:75:56:4d:8f:82:1c:13:
07:28:16:61:ef:56:f8:7c:b0:ad:e5:1b:91:d8:67:
f2:64:85:40:62:dd:e6:92:ba:11:59:97:e6:77:e4:
ea:15:0a:79:ee:08:d0:a7:a6:d3:f3:42:71:1a:3a:
d8:11:0e:f3:ec:ea:fb:dd:f2:a5:d6:a4:60:07:55:
5b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6F:95:F8:49:82:14:C1:97:6F:8D:EC:F5:F6:7E:0D:76:C0:17:4F
X509v3 Authority Key Identifier:
keyid:A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/Om-V-EmCFMGXb43s9fZ-DXbAF08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.230.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:a7:5c:b8:7c:c0:9f:f3:cf:0c:fd:b9:01:56:ae:72:53:9b:
46:da:c0:f8:e0:56:73:b7:23:e6:84:4f:f6:1e:74:09:c8:88:
2e:15:b8:be:d9:08:0f:fa:87:a9:09:6e:81:c3:28:50:d0:fd:
04:77:ee:ad:fe:ed:05:b5:22:34:4a:57:77:3d:2d:9b:85:80:
08:11:e6:60:1b:bb:c4:b6:af:2e:90:0a:15:29:41:19:15:97:
1f:f7:4e:7e:95:59:f4:74:a9:9c:ee:80:76:50:1e:e7:49:80:
61:37:4a:1d:1d:9d:5c:7e:f2:f1:e8:ac:05:86:af:6b:cb:39:
ec:f1:24:11:5b:92:74:25:df:03:f8:ae:3a:f0:4c:3c:c2:37:
34:13:79:76:99:9c:a3:61:1c:a1:7b:0c:6a:08:8a:c5:3c:fd:
98:48:27:a9:62:f6:db:07:cf:88:91:73:b9:fc:83:3b:58:90:
e1:5f:7d:1f:bc:b8:6e:48:ad:e5:99:fc:bb:6a:d6:20:c4:99:
2a:b3:3f:60:d8:33:44:70:1e:ef:d4:a4:59:c4:7d:77:92:3d:
8c:0b:bf:1c:56:eb:6a:13:95:04:d5:36:98:8b:b6:77:9e:c3:
dd:8f:f6:8b:78:6a:5c:a9:bc:3d:15:53:07:f9:b8:b1:04:ca:
36:5d:4a:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2UTIFrzDshPQ25vZezuUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYzU2NDQxZDgzZGY5NGJiZDBlNjAxNDRhNTU0NjM5ZTQw
ZTA1MzUwHhcNMjUwMTAyMTE0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTZmOTVmODQ5ODIxNGMxOTc2ZjhkZWNmNWY2N2UwZDc2YzAxNzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3p50jQmJEfSnhLGeRMqqNMJsAvh
DMBPnuqEd43OMuQ087Yv7zyybSn5CqMm5bN6HnnGDDoVfb5gdvlhAXkF9q6qJ6T4
1q7fqQ8HF0qM1jqwVW1u06i7xxstUyFTMhsvwM6P4g+c6J7Ii3wppbhuq59DQWLD
ExTD6CIelexuEjLHzeGiIx8sWjSwhTpO6EaMyQ/tGsitNJhWv9Tyj2xny4ius4ch
JNakCmeJt6UGTjSCoI4WE42/s0ic4nVWTY+CHBMHKBZh71b4fLCt5RuR2GfyZIVA
Yt3mkroRWZfmd+TqFQp57gjQp6bT80JxGjrYEQ7z7Or73fKl1qRgB1VbTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDpvlfhJghTBl2+N7PX2fg12wBdPMB8GA1UdIwQY
MBaAFKLFZEHYPflLvQ5gFEpVRjnkDgU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3NWa1FkZzktVXU5RG1BVVNsVkdPZVFPQlRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82MjExYzQtNWE5Yy00NDFlLWI4MDAt
ZjY1ZGRkZmEwZTFkLzEvT20tVi1FbUNGTUdYYjQzczlmWi1EWGJBRjA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC82MjExYzQtNWE5Yy00NDFlLWI4MDAtZjY1ZGRkZmEwZTFk
LzEvb3NWa1FkZzktVXU5RG1BVVNsVkdPZVFPQlRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpHmMA0G
CSqGSIb3DQEBCwUAA4IBAQCqp1y4fMCf888M/bkBVq5yU5tG2sD44FZztyPmhE/2
HnQJyIguFbi+2QgP+oepCW6BwyhQ0P0Ed+6t/u0FtSI0Sld3PS2bhYAIEeZgG7vE
tq8ukAoVKUEZFZcf905+lVn0dKmc7oB2UB7nSYBhN0odHZ1cfvLx6KwFhq9ryzns
8SQRW5J0Jd8D+K468Ew8wjc0E3l2mZyjYRyhewxqCIrFPP2YSCepYvbbB8+IkXO5
/IM7WJDhX30fvLhuSK3lmfy7atYgxJkqsz9g2DNEcB7v1KRZxH13kj2MC78cVutq
E5UE1TaYi7Z3nsPdj/aLeGpcqbw9FVMH+bixBMo2XUpU
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:53 2025 by rpki-client on console.sobornost.net