Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OItd_kWdFRuVFdH1-ckrZNPbNEE.roa
File: OItd_kWdFRuVFdH1-ckrZNPbNEE.roa (raw, json)
Hash identifier: EkewQhlR9A0XfgBO9ZfdsNfuMY5ttVvwHWEourNFtLw=
Subject key identifier: 38:8B:5D:FE:45:9D:15:1B:95:15:D1:F5:F9:C9:2B:64:D3:DB:34:41
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428249A34A0FE6EBED9ADCF8B026477E3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OItd_kWdFRuVFdH1-ckrZNPbNEE.roa
Signing time: Thu 02 Jan 2025 17:51:14 +0000
ROA not before: Thu 02 Jan 2025 17:51:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139660
IP address blocks: 94.156.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:9a:34:a0:fe:6e:be:d9:ad:cf:8b:02:64:77:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=388b5dfe459d151b9515d1f5f9c92b64d3db3441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:b0:60:b7:ef:54:f7:bc:4c:f4:5c:d2:28:
79:bf:da:df:2b:a9:6f:bd:98:89:db:25:d4:a2:08:
fd:9a:49:cf:49:0d:fe:36:f6:34:13:c0:47:79:1f:
03:7a:6b:af:1b:92:0c:f8:7e:72:98:92:50:b8:5e:
56:ce:e9:b2:3e:ae:b7:9e:1e:b1:98:21:89:db:5f:
ca:58:3d:64:e9:41:a4:7a:52:dd:de:e2:51:04:e1:
02:16:d5:f2:4c:59:9c:40:bf:e9:cb:e5:f8:8f:62:
10:22:68:9b:1b:78:1f:de:a4:fd:e7:26:b8:33:2e:
19:8f:6b:72:39:21:8d:43:d3:4d:57:8b:30:7f:43:
fb:ed:0c:28:c2:fa:3e:16:1c:64:b5:f0:c6:1b:d6:
c6:e6:8d:d8:16:71:61:41:08:a0:ba:94:db:bb:5a:
42:94:bb:3e:95:82:7c:d0:f1:81:ac:80:ce:55:3e:
e7:03:0d:54:92:f0:de:61:bc:6f:5d:37:b7:dd:d6:
25:31:7c:77:21:0b:17:0d:bf:08:b7:b0:38:f7:8a:
c0:2f:85:93:0f:85:a1:d6:54:dc:77:e5:8d:03:53:
e3:63:1f:8a:4a:6e:6f:8f:94:6a:0d:2f:a2:86:20:
84:8b:78:16:07:ca:53:a2:22:b4:55:29:99:e9:a4:
8e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8B:5D:FE:45:9D:15:1B:95:15:D1:F5:F9:C9:2B:64:D3:DB:34:41
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OItd_kWdFRuVFdH1-ckrZNPbNEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.14.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b7:70:19:78:ad:1c:33:0b:34:30:ff:8e:84:6d:d4:c9:ad:
c0:b3:1d:43:53:a8:a7:2d:b0:46:b4:5a:9c:01:c5:50:ba:01:
00:46:fe:92:58:a3:75:59:6c:1e:0f:be:18:8f:42:f4:9e:ac:
98:9b:32:b0:64:0c:0c:e4:e3:cc:64:90:8f:a3:10:38:80:ec:
c0:27:32:8d:12:73:3f:1a:5d:34:ce:af:ca:25:39:fc:04:de:
b5:92:19:4d:e6:dd:c6:0f:57:e9:5b:d5:88:7f:6d:0b:de:a6:
75:1f:f6:f2:00:cd:b9:24:f0:98:23:1b:9d:8f:6c:36:15:9c:
78:8c:6a:65:88:aa:f0:ac:c4:65:6c:bd:9c:a1:c0:d6:02:de:
13:a1:fe:90:60:ae:c9:9d:0f:4d:a6:97:04:53:49:6f:94:10:
6f:d4:02:12:da:bd:17:87:50:87:00:2a:19:54:1f:b4:48:4b:
5e:24:c6:79:19:ad:2f:f5:29:30:6f:d2:c7:86:e9:26:e2:23:
82:40:6b:99:9c:9e:d0:5f:34:d4:71:85:68:99:17:3e:50:51:
33:64:76:ae:ca:df:d8:01:3c:12:b9:a5:08:4f:2c:52:1b:fa:
34:f5:01:78:18:d1:84:f9:54:0a:a8:c7:27:0b:19:67:1c:eb:
85:c7:f9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:47 2025 by rpki-client