Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/Ocmt4jUZ7mV3GEDP4V_J5USsmhQ.roa
File: Ocmt4jUZ7mV3GEDP4V_J5USsmhQ.roa (raw, json)
Hash identifier: FYS5oyulHe5jFBDp8cQAU5FujX28XBCqFxC7ytK6HbQ=
Subject key identifier: 39:C9:AD:E2:35:19:EE:65:77:18:40:CF:E1:5F:C9:E5:44:AC:9A:14
Certificate issuer: /CN=2d35f65df2cb3ea16e51152fac75947fa9c30bf7
Certificate serial: 019425FC8BC86A609A6FD8F8CF38A753BA9A
Authority key identifier: 2D:35:F6:5D:F2:CB:3E:A1:6E:51:15:2F:AC:75:94:7F:A9:C3:0B:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTX2XfLLPqFuURUvrHWUf6nDC_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/Ocmt4jUZ7mV3GEDP4V_J5USsmhQ.roa
Signing time: Thu 02 Jan 2025 07:48:15 +0000
ROA not before: Thu 02 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60930
IP address blocks: 91.147.84.0/22 maxlen: 24
213.134.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:8b:c8:6a:60:9a:6f:d8:f8:cf:38:a7:53:ba:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d35f65df2cb3ea16e51152fac75947fa9c30bf7
Validity
Not Before: Jan 2 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39c9ade23519ee65771840cfe15fc9e544ac9a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d3:d0:1e:4e:f0:f2:a3:5a:61:aa:0c:f3:fb:
81:b6:c2:1f:9c:6d:d0:2b:8f:83:27:01:21:e2:41:
48:b4:e1:1d:51:c4:a4:8b:2f:2a:ad:33:05:29:8a:
fa:70:a1:b2:bb:fa:92:ed:50:03:c8:16:18:a5:81:
9a:d1:c2:6e:09:ef:1b:ff:2f:2a:6a:3f:3f:25:82:
b3:46:d9:7d:7b:2f:a8:a9:fe:7d:6d:f5:58:54:a6:
38:7e:80:83:58:95:c2:88:4c:83:8c:91:91:c3:8b:
a3:39:24:b2:35:78:9e:af:4a:7a:50:bf:d6:c5:62:
d3:a1:6e:ec:5f:80:19:95:ee:f2:22:82:f7:ba:2f:
cb:c3:59:ef:b5:5b:b1:b8:50:09:3a:9c:19:07:59:
17:c2:8b:d8:e7:36:5d:1f:3f:c1:3b:25:1c:f5:36:
84:66:cc:77:15:56:24:5d:15:e4:82:aa:8d:27:2d:
24:12:91:98:32:d6:0b:b4:31:cb:cd:4b:9f:51:fc:
73:c0:d3:d7:0b:7b:4d:85:78:a3:84:82:af:c0:60:
8c:27:5b:44:cb:a3:49:63:3a:80:f3:d7:df:31:3f:
87:25:5b:02:cd:3b:a4:de:9b:4b:cf:50:5b:ed:68:
5c:0b:57:a0:9f:4d:00:5d:e3:7b:d2:c2:70:d8:3c:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C9:AD:E2:35:19:EE:65:77:18:40:CF:E1:5F:C9:E5:44:AC:9A:14
X509v3 Authority Key Identifier:
keyid:2D:35:F6:5D:F2:CB:3E:A1:6E:51:15:2F:AC:75:94:7F:A9:C3:0B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTX2XfLLPqFuURUvrHWUf6nDC_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/Ocmt4jUZ7mV3GEDP4V_J5USsmhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.84.0/22
213.134.30.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:ab:6c:b6:55:b5:fe:11:d1:0c:73:13:9c:00:99:10:0a:93:
86:ea:99:6c:a3:0d:b6:ea:a0:38:c0:ee:90:0f:28:75:cc:4b:
6e:3f:92:64:32:82:d3:79:1c:0f:bf:3e:da:fe:2c:49:0a:b6:
8f:63:bd:be:d4:3a:4f:c7:53:cb:92:b7:28:79:57:5c:b8:ea:
6f:d4:ce:6a:7d:5a:d4:d6:81:65:b1:12:8d:14:31:d3:91:c0:
1a:e9:db:2f:bc:d6:e2:d9:8f:d4:03:6c:7a:5b:18:41:e9:c0:
67:13:26:4c:39:3e:d2:57:b1:56:11:57:50:ea:69:26:53:50:
a8:d0:d8:3d:b4:f4:f0:15:f1:36:67:1f:7e:db:68:d4:b9:ce:
59:90:c0:8c:61:a3:4f:18:0a:a0:b2:64:b7:80:00:d7:f7:2f:
a6:6f:f1:fc:1a:8b:2a:73:1e:1b:9f:15:cd:91:6d:63:d6:bd:
bc:32:ef:83:20:38:2c:79:ea:68:1b:f3:70:47:3e:0b:12:52:
ff:c9:63:f5:f7:6f:3c:e6:3d:07:d2:ad:20:0c:87:73:19:08:
96:e0:69:88:fc:c3:f6:e7:26:8c:a9:04:fc:d4:04:f3:3c:e0:
d9:2d:37:fa:6d:76:8e:57:cb:8b:86:a1:06:a8:d4:91:a5:fe:
ba:25:db:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:42 2025 by rpki-client