Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/OGklOhNmRIfFOkyioFpkzkp3JTk.roa
File: OGklOhNmRIfFOkyioFpkzkp3JTk.roa (raw, json)
Hash identifier: AUANJfJqQpsx/R1XqfBBf9FhTLHMmQbF6wgKD0TYzXs=
Subject key identifier: 38:69:25:3A:13:66:44:87:C5:3A:4C:A2:A0:5A:64:CE:4A:77:25:39
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019542541A87EF8134C10E4522397E4E9004
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/OGklOhNmRIfFOkyioFpkzkp3JTk.roa
Signing time: Wed 26 Feb 2025 12:56:02 +0000
ROA not before: Wed 26 Feb 2025 12:56:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 46.38.153.0/24 maxlen: 24
212.16.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:42:54:1a:87:ef:81:34:c1:0e:45:22:39:7e:4e:90:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 26 12:56:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3869253a13664487c53a4ca2a05a64ce4a772539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:6f:00:72:cf:92:6b:83:c1:39:7a:63:bf:
6e:a2:b7:19:fb:64:12:64:31:65:0e:1a:db:04:8e:
98:23:05:57:4c:d3:24:0b:77:8c:1a:84:d0:37:00:
aa:75:2a:bf:5a:cb:84:f6:8e:64:0b:b4:8a:65:36:
9a:26:99:82:28:0c:df:c2:5e:63:6e:19:dc:cb:49:
75:88:43:a5:1a:97:bc:dd:d7:95:4f:99:ba:13:c1:
9e:5d:1b:2d:8e:6d:be:27:31:bc:eb:83:8e:7e:64:
17:c4:93:34:8d:00:1a:0d:f5:32:33:cb:0f:f8:09:
df:8b:75:98:51:73:31:06:33:0a:b4:b2:0c:45:54:
8e:88:22:a2:d4:cc:72:4b:3a:d3:c8:61:e3:5b:6c:
62:d6:6a:d8:1a:9a:f1:fa:d4:92:c4:b9:11:49:98:
d0:e1:62:15:7a:79:f8:0a:0e:a3:69:11:1c:11:b4:
56:7b:ca:0e:18:9d:c2:e9:f5:4d:ae:e1:bc:df:de:
99:cd:16:29:5b:7a:70:ae:8e:32:dd:54:45:9b:51:
8b:7f:92:cd:ec:26:fb:53:fe:05:6e:86:e1:ce:c5:
84:a3:61:fa:85:de:ff:fd:7c:b3:81:db:fb:95:f3:
16:6a:2a:d5:ee:c9:24:25:a2:42:1e:58:bf:ce:27:
27:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:69:25:3A:13:66:44:87:C5:3A:4C:A2:A0:5A:64:CE:4A:77:25:39
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/OGklOhNmRIfFOkyioFpkzkp3JTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.153.0/24
212.16.87.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:72:74:0c:38:3b:6d:e9:74:3b:a8:d1:67:b5:13:c2:8f:62:
13:b9:89:23:8e:41:e3:84:7d:e1:67:d6:67:79:80:0a:cd:5a:
fc:55:64:54:af:97:16:76:dd:ad:8a:f9:6d:2f:8f:53:e2:7a:
e4:8d:66:3c:40:66:6b:34:1f:f1:a2:ad:4a:40:3f:ef:6a:47:
52:4c:ea:a0:c4:08:28:7a:c9:09:d1:9c:87:5e:f3:61:8d:54:
79:9c:1e:d7:d9:4e:1b:7d:4b:bf:dd:ed:5e:45:ca:68:fd:18:
5b:2d:e5:13:c0:85:7d:81:dc:9e:86:d1:10:fc:76:7a:a5:93:
e6:fb:13:94:17:fd:8a:37:1a:1e:59:09:82:fb:db:f5:82:d8:
ed:28:1d:7c:ed:77:5c:ed:3e:08:4f:80:91:33:50:cc:c5:ef:
4f:bb:0c:8a:fb:2d:26:94:17:fe:ae:db:bd:c5:03:02:2e:4e:
26:d1:70:d5:3c:57:fc:b8:15:b9:b0:4a:4c:0e:72:79:6f:2a:
4d:b9:54:33:07:75:a4:31:17:e9:25:54:19:7c:79:79:82:75:
f8:81:7e:80:32:16:77:a9:01:74:e1:01:53:ea:7e:5b:1d:a9:
4e:66:e7:f8:42:8a:77:5c:28:2b:fb:5e:28:2f:ba:c0:fc:a1:
4a:da:21:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:48 2025 by rpki-client on console.sobornost.net