Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/O-SsLGZDDis9x7Hdr9bjMmd2BoY.roa
File: O-SsLGZDDis9x7Hdr9bjMmd2BoY.roa (raw, json)
Hash identifier: HishzW2LB7SBBdcbiiTEBoYKX9Z+I6RhesW10ogdrys=
Subject key identifier: 3B:E4:AC:2C:66:43:0E:2B:3D:C7:B1:DD:AF:D6:E3:32:67:76:06:86
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 019427B64A1D5235A9A2C57B17C7C55263DB
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/O-SsLGZDDis9x7Hdr9bjMmd2BoY.roa
Signing time: Thu 02 Jan 2025 15:50:45 +0000
ROA not before: Thu 02 Jan 2025 15:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60661
IP address blocks: 83.96.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:4a:1d:52:35:a9:a2:c5:7b:17:c7:c5:52:63:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Jan 2 15:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3be4ac2c66430e2b3dc7b1ddafd6e33267760686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:05:87:df:6d:a1:2a:09:d2:5a:5b:e7:a4:a3:
30:ee:e6:68:4e:46:27:c3:f2:76:71:41:17:8c:79:
ad:99:35:6d:ca:31:12:c4:db:65:46:04:c8:75:ca:
04:41:ee:66:ee:0f:59:ae:f6:7e:03:33:91:16:e4:
f4:1d:89:59:ba:a5:7b:37:93:12:cd:9b:cd:f5:cd:
73:5b:dd:47:7b:3f:cf:98:fd:d9:dc:23:08:0f:1b:
65:27:cf:5a:c8:9f:f5:37:f0:d5:42:5c:0a:5e:b8:
f0:83:c6:77:6a:28:44:3b:9c:72:a2:9f:5f:29:8e:
c9:db:25:2d:51:9c:75:34:57:65:3f:f4:8d:69:fd:
51:fe:b2:ff:b3:e8:a7:a8:b3:d7:d5:c2:f5:a3:9e:
c7:ba:8e:d0:dc:fb:6b:96:69:6b:59:8a:c7:fd:18:
f3:a1:4e:a3:0e:53:4e:00:22:63:2e:88:8b:8a:19:
d6:72:e2:bd:14:ea:bf:3a:fb:60:60:d1:be:96:f0:
4e:7b:1d:5a:ab:5a:8f:bf:43:f6:ff:f6:a5:a6:0c:
71:e2:d0:84:28:76:87:12:c6:a8:7b:a2:dc:7d:85:
57:fd:2a:91:de:1d:21:ce:f9:ca:62:b6:e2:7c:79:
a3:21:83:da:5a:36:ff:a1:9d:b5:32:36:6d:e8:5b:
09:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E4:AC:2C:66:43:0E:2B:3D:C7:B1:DD:AF:D6:E3:32:67:76:06:86
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/O-SsLGZDDis9x7Hdr9bjMmd2BoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.96.31.0/24
Signature Algorithm: sha256WithRSAEncryption
68:54:f9:34:4f:0d:e8:cf:da:b9:10:40:6d:a4:49:cf:a3:7d:
b4:68:8f:c4:d8:7b:87:70:4a:3d:7b:de:64:5c:54:4c:de:5c:
68:37:1a:56:c9:cc:17:af:c8:e2:dd:73:b2:e2:41:43:82:41:
9c:62:78:3f:93:39:c4:fc:b0:b8:4d:58:fb:90:2c:8d:45:c5:
3f:c9:1c:1e:4e:cd:41:66:a8:1f:04:88:3a:c3:f0:52:73:df:
e2:d4:a3:55:12:d4:2c:f8:3a:ba:f4:71:84:1b:3c:20:d4:8a:
b4:ae:10:a2:75:79:f1:44:02:67:af:20:fb:47:46:ef:7c:c6:
52:3d:68:23:f9:14:d6:f6:79:51:f8:ad:6f:b9:a5:5e:30:07:
b1:79:4c:73:93:15:09:ec:52:0b:a3:c9:9a:b6:cc:f9:69:af:
ab:0d:e7:8d:63:6f:b7:ff:2b:d1:fd:8e:78:84:52:7d:4d:a8:
26:51:a2:da:7c:79:51:65:6c:71:c5:6f:cf:70:3d:0d:d2:3c:
71:15:52:76:d8:fb:3a:cb:c8:97:21:02:25:c3:27:1a:16:d6:
19:0e:50:2c:45:a0:f9:fa:9b:3d:cb:e6:84:9a:53:6c:d6:15:
70:77:b5:7e:89:7f:11:a5:22:10:b4:b1:c1:be:61:06:b8:a1:
ec:ae:af:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:07:59 2025 by rpki-client