Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Ox8NDyO7Lu2pVppSpwPpBrklgoc.roa
File: Ox8NDyO7Lu2pVppSpwPpBrklgoc.roa (raw, json)
Hash identifier: cdngPKwKptE72CQ/axAKXaUmzgT1mhIjk6pmelzFUgg=
Subject key identifier: 3B:1F:0D:0F:23:BB:2E:ED:A9:56:9A:52:A7:03:E9:06:B9:25:82:87
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 019426D99FB4DEA42F41288B45005D906DE7
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Ox8NDyO7Lu2pVppSpwPpBrklgoc.roa
Signing time: Thu 02 Jan 2025 11:49:43 +0000
ROA not before: Thu 02 Jan 2025 11:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50870
IP address blocks: 94.243.208.0/22 maxlen: 22
94.243.212.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:9f:b4:de:a4:2f:41:28:8b:45:00:5d:90:6d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Jan 2 11:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b1f0d0f23bb2eeda9569a52a703e906b9258287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:39:7b:54:65:7e:bc:85:af:bc:bb:b7:e2:64:
92:78:57:d3:da:fd:72:37:64:29:e0:cd:c9:58:c6:
26:92:f7:08:23:df:fc:1f:8b:4c:3c:97:b9:52:e9:
eb:37:05:9f:0f:22:95:5c:78:ac:88:03:af:60:2e:
1a:99:c6:cc:a0:36:e2:7c:49:69:aa:7b:6b:5e:2c:
df:80:05:01:90:01:7b:63:c7:32:2f:a1:b3:3a:c6:
0d:16:ad:ac:ce:aa:9f:45:f3:5c:32:57:59:8d:54:
09:dd:39:8d:55:89:5c:ef:dc:ad:b8:fa:32:de:0f:
0f:9a:89:b8:d8:03:d5:82:17:20:cc:47:b1:b9:69:
28:75:ec:3f:cd:c3:8d:17:09:07:54:12:9e:43:c2:
d6:9e:c1:fe:ab:56:d9:02:d6:de:86:de:cd:69:c1:
26:16:09:eb:ab:d1:87:52:b8:91:6b:9d:52:e7:94:
61:69:07:77:c3:6e:d6:75:46:96:79:dc:8e:c7:36:
6c:8b:2f:8c:d0:46:da:0c:23:0d:52:8d:45:68:c6:
bf:e9:b4:20:48:1b:4f:a3:65:c1:8a:25:33:cf:60:
cc:36:72:4f:08:84:96:df:f5:5d:e7:1c:ed:da:66:
3b:7f:27:a5:ac:ee:97:58:6c:48:03:3a:b5:b4:cc:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1F:0D:0F:23:BB:2E:ED:A9:56:9A:52:A7:03:E9:06:B9:25:82:87
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Ox8NDyO7Lu2pVppSpwPpBrklgoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.243.208.0/21
Signature Algorithm: sha256WithRSAEncryption
43:9c:ab:e5:ce:4b:28:ae:d5:b9:4b:fe:27:0d:5b:d3:02:f0:
a2:af:4f:0e:2b:ce:be:84:55:2f:45:45:60:4f:cb:7d:93:ea:
13:25:06:c8:48:7a:7e:ff:e7:35:2f:58:f3:1d:bc:3b:81:78:
ff:06:b8:16:02:44:3e:b1:be:18:94:8b:af:3d:ae:e2:c8:f2:
1c:95:28:72:30:9e:00:ba:1c:9b:31:b1:88:38:65:06:9c:cf:
ef:5c:06:13:aa:6b:81:aa:bd:b6:9b:62:6e:ea:7d:60:ff:11:
5b:8f:e5:a6:f3:c2:75:72:0c:63:ee:f0:65:c7:4d:21:2b:27:
c8:7c:10:65:9d:3b:be:bd:8f:08:8d:86:19:32:f7:08:5d:76:
6a:e4:92:4e:fe:94:14:f8:2a:3d:2d:5a:be:b5:56:fa:31:48:
ab:45:e6:4d:8b:54:d2:42:99:7f:77:b3:6f:d4:b8:d1:c1:43:
f7:c6:00:bb:dd:0f:e4:65:8b:af:9a:e6:11:fe:f8:fb:ed:c0:
d8:94:d3:2c:eb:d4:15:89:37:42:93:84:c3:1e:d5:d5:9a:5c:
20:33:28:39:72:f0:f0:dd:2c:d3:8d:84:1e:ce:c1:9c:90:35:
4d:7d:0e:aa:5b:e6:cb:0c:e7:87:78:21:a8:d4:82:d0:1b:25:
c1:98:c3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net