Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/OctDu_DWJM_ePhGKcxjKDU812B4.roa
File: OctDu_DWJM_ePhGKcxjKDU812B4.roa (raw, json)
Hash identifier: 8PSwDnEoVXcVpWULLxMU/tnZb/t/w988BD3T8r1Vyqk=
Subject key identifier: 39:CB:43:BB:F0:D6:24:CF:DE:3E:11:8A:73:18:CA:0D:4F:35:D8:1E
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019424B3EC424AA591F653C4B987F8977926
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/OctDu_DWJM_ePhGKcxjKDU812B4.roa
Signing time: Thu 02 Jan 2025 01:49:18 +0000
ROA not before: Thu 02 Jan 2025 01:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209326
IP address blocks: 62.106.79.0/24 maxlen: 24
79.110.225.0/24 maxlen: 24
130.193.0.0/24 maxlen: 24
194.69.166.0/24 maxlen: 24
213.109.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ec:42:4a:a5:91:f6:53:c4:b9:87:f8:97:79:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 01:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39cb43bbf0d624cfde3e118a7318ca0d4f35d81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:a6:eb:6f:bb:56:3b:8d:6b:06:3e:24:a7:
e8:f7:30:7f:8d:3e:88:50:6e:51:26:d0:29:f7:f5:
76:da:70:3b:ce:9a:3e:f4:46:32:fa:ee:11:42:ca:
bb:28:68:f0:f1:d3:13:d9:19:3c:21:fe:e9:01:00:
9f:29:08:6b:63:77:26:2e:e5:4f:d2:38:0a:af:13:
e5:4e:c7:39:2d:0e:79:7e:27:c2:51:5b:bf:62:c3:
b7:d2:a1:f2:a2:4f:4f:2f:f3:f4:1f:f9:78:d7:07:
ab:ec:b5:ba:04:bc:f4:f2:49:fa:ff:c1:70:68:7d:
d7:f8:e7:a2:77:bd:3a:09:9b:07:61:65:c5:87:c9:
fe:48:5c:b1:e2:51:70:a5:05:ea:bd:1f:9a:98:9b:
1b:fc:d9:98:a4:48:88:72:dc:8c:08:63:34:34:c9:
1e:a5:5b:b6:c8:c2:53:fa:69:67:a7:ec:bc:02:d7:
7e:c5:3b:ac:74:0f:aa:0b:fc:6a:a0:f3:93:2f:5f:
44:af:63:34:2d:79:ed:15:d1:62:48:6e:dc:60:70:
80:b7:37:c5:d8:1f:2f:4b:b2:e9:b7:e4:f3:30:ff:
58:8c:14:9f:5f:c7:23:93:1b:0a:b9:be:53:d9:12:
45:9b:ce:2f:d8:95:c0:3c:12:17:4b:f9:67:05:de:
62:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CB:43:BB:F0:D6:24:CF:DE:3E:11:8A:73:18:CA:0D:4F:35:D8:1E
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/OctDu_DWJM_ePhGKcxjKDU812B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.79.0/24
79.110.225.0/24
130.193.0.0/24
194.69.166.0/24
213.109.194.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:11:c0:bb:90:b2:5f:19:48:dc:08:63:fa:bd:87:aa:06:c9:
e2:40:b1:02:6d:e6:9d:68:c6:cc:2d:19:12:ec:f2:86:8b:fc:
a0:cc:ba:aa:ed:0f:52:fe:dc:b8:66:c4:59:43:9d:57:2b:ca:
2c:d9:4d:54:af:4a:77:1e:c5:9b:38:b4:37:68:b6:ca:3b:6a:
50:08:c2:06:d4:8a:77:fd:ff:72:6b:21:da:c2:3f:4b:86:4e:
bf:df:4f:a4:89:9a:ec:49:ad:01:96:05:ac:74:45:0d:4d:f2:
bf:b7:e9:a8:fd:45:dd:97:e7:f5:34:97:98:f0:bd:a1:6e:56:
fc:91:c9:81:15:fd:98:8b:b6:5b:28:3c:cf:5e:0c:b1:04:a7:
6c:04:34:eb:1f:6c:4b:8a:72:a7:8b:11:99:13:34:da:43:e0:
d8:7d:19:0b:f6:82:c8:05:56:f4:61:d4:12:bc:c0:00:bf:a2:
d3:68:15:07:58:53:35:25:48:94:9e:f7:c5:6d:23:70:66:a0:
79:e5:07:e3:41:80:31:dd:f0:fa:51:29:02:60:af:b2:ae:2b:
6d:f6:34:5c:44:70:b8:fd:d9:38:89:3b:69:f1:9e:eb:5c:f1:
ea:73:84:1a:df:63:a2:b5:9b:04:2f:f0:16:71:d8:fe:cf:c1:
12:1a:47:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:35 2025 by rpki-client