Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/Oh-cQnXBc3lf8_SsKrCv90dr1do.roa
File: Oh-cQnXBc3lf8_SsKrCv90dr1do.roa (raw, json)
Hash identifier: /clQdBNjFo+DPpzGiAtMduHa7oP5zjEdGJ0IRP2uvgo=
Subject key identifier: 3A:1F:9C:42:75:C1:73:79:5F:F3:F4:AC:2A:B0:AF:F7:47:6B:D5:DA
Certificate issuer: /CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Certificate serial: 0194258FB111A0D611CD8193F26CA546D698
Authority key identifier: 5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/Oh-cQnXBc3lf8_SsKrCv90dr1do.roa
Signing time: Thu 02 Jan 2025 05:49:21 +0000
ROA not before: Thu 02 Jan 2025 05:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205521
IP address blocks: 185.215.124.0/22 maxlen: 22
185.215.124.0/24 maxlen: 24
185.215.125.0/24 maxlen: 24
185.215.126.0/24 maxlen: 24
185.215.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b1:11:a0:d6:11:cd:81:93:f2:6c:a5:46:d6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Validity
Not Before: Jan 2 05:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a1f9c4275c173795ff3f4ac2ab0aff7476bd5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:68:6b:cc:51:8a:4a:6b:0a:5f:12:47:5a:
ba:a5:94:39:ba:8c:15:e3:29:84:f5:c1:8e:06:5a:
6c:f3:5c:fc:50:2b:10:57:1c:f1:40:ba:5f:50:89:
46:64:c7:2e:57:25:35:77:2b:71:0c:18:0e:18:5d:
18:5f:d1:7f:2b:13:a4:83:43:b5:f9:91:ff:1d:16:
ff:cc:39:96:fc:cc:cb:c3:5c:b0:c4:d3:a4:65:72:
39:ed:68:a9:42:a7:69:88:a8:66:e4:04:80:01:1f:
4d:df:0d:f4:70:e9:5a:72:c1:5e:ea:63:2b:32:5e:
f1:41:08:34:47:46:e7:d1:fc:c1:00:0b:d4:a9:cf:
3e:95:4f:eb:d1:af:88:52:1b:a0:59:0b:98:6e:e0:
50:f9:55:da:40:96:fc:75:88:b0:25:c1:fb:08:49:
4d:a9:4a:16:ec:fb:e6:c0:14:25:ca:3a:95:13:6f:
8e:69:cf:28:17:be:1d:07:b7:0e:3f:66:56:e1:d1:
54:2d:26:c7:7e:6a:c0:91:8e:0a:4f:22:67:09:09:
19:17:20:8d:6a:b6:da:f2:6f:e3:4f:85:fa:3e:ea:
9e:94:40:45:a6:3a:a2:ef:50:72:aa:71:c7:b8:6f:
80:b0:84:a5:89:f1:ad:11:ea:c9:d8:76:52:31:c0:
cc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1F:9C:42:75:C1:73:79:5F:F3:F4:AC:2A:B0:AF:F7:47:6B:D5:DA
X509v3 Authority Key Identifier:
keyid:5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/Oh-cQnXBc3lf8_SsKrCv90dr1do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.124.0/22
Signature Algorithm: sha256WithRSAEncryption
59:b6:74:b1:49:26:95:53:29:df:87:58:05:b1:57:9d:65:45:
c5:33:a8:9e:3a:94:f7:f9:9c:8b:90:4f:c2:27:f3:c6:67:7f:
0b:33:2d:0c:92:05:ca:db:6f:fb:a3:0f:78:2a:5f:e1:29:1a:
f5:51:eb:a3:35:10:71:0e:fe:eb:67:d8:b4:14:7e:f5:8c:b7:
80:5b:1e:8f:e7:73:b2:52:ec:58:6f:e9:e6:e9:3f:29:35:10:
50:2b:5e:66:ac:3e:6f:6e:eb:aa:05:89:34:1b:10:96:07:b5:
37:41:6f:1b:e5:b9:2f:6e:28:00:b0:f9:c6:79:b3:fc:59:33:
a1:af:a0:96:43:c9:38:c7:8b:86:bc:98:4f:86:35:49:c3:a0:
28:ba:fc:d9:6b:36:f0:b6:a8:d9:b1:4c:6f:45:fb:07:95:b3:
7f:c1:0a:fa:da:fc:50:8b:f1:73:a2:b3:da:18:0d:f7:73:83:
db:29:89:cb:a8:b2:81:ea:c2:79:ed:bb:32:8e:97:b4:ff:26:
02:b9:39:19:96:c4:8b:60:c1:2e:a0:20:a2:16:f3:49:b6:dc:
b3:93:2b:f7:e2:d4:6b:c8:da:80:ef:34:06:b9:c4:a8:38:9b:
94:01:da:3d:66:76:eb:25:6f:89:60:2d:41:fe:78:ef:15:6e:
50:84:63:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj7ERoNYRzYGT8mylRtaYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMTU1ZTMyYzRhOWNkYTFhODFiZDljNzM3MGRjMzRhYjAw
NjUzYTAwHhcNMjUwMTAyMDU0OTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTFmOWM0Mjc1YzE3Mzc5NWZmM2Y0YWMyYWIwYWZmNzQ3NmJkNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYxoa8xRikprCl8SR1q6pZQ5uowV
4ymE9cGOBlps81z8UCsQVxzxQLpfUIlGZMcuVyU1dytxDBgOGF0YX9F/KxOkg0O1
+ZH/HRb/zDmW/MzLw1ywxNOkZXI57WipQqdpiKhm5ASAAR9N3w30cOlacsFe6mMr
Ml7xQQg0R0bn0fzBAAvUqc8+lU/r0a+IUhugWQuYbuBQ+VXaQJb8dYiwJcH7CElN
qUoW7PvmwBQlyjqVE2+Oac8oF74dB7cOP2ZW4dFULSbHfmrAkY4KTyJnCQkZFyCN
arba8m/jT4X6PuqelEBFpjqi71ByqnHHuG+AsISlifGtEerJ2HZSMcDM+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDofnEJ1wXN5X/P0rCqwr/dHa9XaMB8GA1UdIwQY
MBaAFFoVXjLEqc2hqBvZxzcNw0qwBlOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MmJjZGEtZjk3ZS00NzY1LWFhOTUt
Y2QyZjU3NzFkYTk4LzEvT2gtY1FuWEJjM2xmOF9Tc0tyQ3Y5MGRyMWRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81MmJjZGEtZjk3ZS00NzY1LWFhOTUtY2QyZjU3NzFkYTk4
LzEvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudd8MA0G
CSqGSIb3DQEBCwUAA4IBAQBZtnSxSSaVUynfh1gFsVedZUXFM6ieOpT3+ZyLkE/C
J/PGZ38LMy0MkgXK22/7ow94Kl/hKRr1UeujNRBxDv7rZ9i0FH71jLeAWx6P53Oy
UuxYb+nm6T8pNRBQK15mrD5vbuuqBYk0GxCWB7U3QW8b5bkvbigAsPnGebP8WTOh
r6CWQ8k4x4uGvJhPhjVJw6AouvzZazbwtqjZsUxvRfsHlbN/wQr62vxQi/FzorPa
GA33c4PbKYnLqLKB6sJ57bsyjpe0/yYCuTkZlsSLYMEuoCCiFvNJttyzkyv34tRr
yNqA7zQGucSoOJuUAdo9ZnbrJW+JYC1B/njvFW5QhGPm
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net