Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oZj-NdszqMXJsckaidS9MYS5r00.roa
File: oZj-NdszqMXJsckaidS9MYS5r00.roa (raw, json)
Hash identifier: rUWPqyKK4+GiULfUtha1OVgKeFkKTvieBixz9DumghU=
Subject key identifier: A1:98:FE:35:DB:33:A8:C5:C9:B1:C9:1A:89:D4:BD:31:84:B9:AF:4D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824628643121EB9A27EF5BBACBB448A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oZj-NdszqMXJsckaidS9MYS5r00.roa
Signing time: Thu 02 Jan 2025 17:51:00 +0000
ROA not before: Thu 02 Jan 2025 17:51:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 194.55.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:62:86:43:12:1e:b9:a2:7e:f5:bb:ac:bb:44:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a198fe35db33a8c5c9b1c91a89d4bd3184b9af4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:9e:6a:cd:69:d6:d3:48:b1:fb:d6:46:c8:
02:28:6c:ae:44:a8:1e:92:26:19:6c:59:0c:f8:1c:
8e:99:be:07:c5:20:37:1d:75:65:ba:1c:e3:12:03:
47:7c:dd:ad:30:c3:56:88:a0:1e:f7:ab:a8:b1:bf:
03:e3:0d:79:6d:ce:e1:b0:e0:fa:4a:87:e0:f8:cc:
73:76:f8:b7:1f:b6:f5:5c:77:83:24:5c:6f:f0:31:
88:c8:7a:45:97:f4:fb:b4:0a:2e:ee:41:8f:a2:1b:
79:b1:e3:55:72:a2:a0:74:29:e5:f1:09:6f:73:f3:
0f:b0:ed:61:af:d2:f0:73:7c:54:4d:a5:41:4b:c4:
41:34:14:65:32:8d:45:ac:7f:33:c0:7f:d4:fd:b6:
98:fe:0d:1b:8d:34:db:a3:a5:e1:e6:b3:11:69:80:
82:a9:dc:e4:a0:b3:b5:4e:3c:0f:61:6a:5b:6e:9f:
67:7b:88:96:94:79:b3:96:ab:55:9d:7f:75:ff:91:
41:68:20:c7:e6:e5:11:c7:70:21:ba:eb:c5:fa:58:
3c:e8:b2:46:db:f2:db:01:f7:da:3d:13:8e:82:4a:
e5:d8:a5:29:ba:88:83:0b:58:43:f9:7f:27:39:a0:
8d:d0:b5:71:9c:28:b6:db:57:26:15:ca:e9:20:9a:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:98:FE:35:DB:33:A8:C5:C9:B1:C9:1A:89:D4:BD:31:84:B9:AF:4D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oZj-NdszqMXJsckaidS9MYS5r00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:3c:c0:16:b6:cb:79:5d:09:97:3a:8c:dc:9c:b3:fa:51:b5:
d8:7e:cb:f9:90:47:e8:a0:3b:ab:9e:6d:25:50:a3:c3:0d:bd:
a8:3f:cb:01:93:fe:10:ca:87:c8:6d:fe:9b:b7:b7:04:28:7b:
4f:11:b7:df:a8:73:5b:83:fa:78:3b:d7:7f:a7:78:13:c4:db:
1d:cb:e7:08:42:1c:0a:c5:b8:4d:39:23:f4:fd:fd:3a:ff:6d:
39:36:5e:46:76:5b:1a:fa:97:45:6a:d3:b8:a6:a0:2f:be:66:
3d:39:1b:43:80:b8:64:38:c7:60:67:d6:f3:fc:1d:80:e4:f8:
ea:ab:ed:70:9e:13:74:cd:b4:99:65:c0:68:8f:1f:e7:e3:02:
69:21:26:7d:1f:a5:13:72:53:c1:5e:42:8a:df:fc:04:c5:4e:
06:01:e0:b0:db:89:5d:f1:28:61:42:42:70:4b:16:c3:4c:45:
84:c7:50:b4:ac:d0:c0:bd:66:a9:d7:ac:f6:06:71:96:6b:9f:
63:68:09:ca:cf:7e:d3:00:26:f7:bf:f6:99:49:8b:60:25:45:
63:d1:09:1d:f3:ce:20:8f:88:dd:13:37:67:28:35:1b:1a:48:
cc:72:7f:7f:fe:4e:24:a8:5e:d9:0b:89:90:0e:0a:91:52:b1:
99:ed:de:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:57:15 2025 by rpki-client