Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/Ons9AaoAyvCYcIUP25LyIcwhhcU.roa
File: Ons9AaoAyvCYcIUP25LyIcwhhcU.roa (raw, json)
Hash identifier: 85miehMSdKEq0Wk2FNSFlFGMnw81ViE6nWiSyaYwlMk=
Subject key identifier: 3A:7B:3D:01:AA:00:CA:F0:98:70:85:0F:DB:92:F2:21:CC:21:85:C5
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B57343E8C07E17D280455D6A0FD321
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/Ons9AaoAyvCYcIUP25LyIcwhhcU.roa
Signing time: Thu 02 Jan 2025 15:49:50 +0000
ROA not before: Thu 02 Jan 2025 15:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22104
IP address blocks: 213.161.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:73:43:e8:c0:7e:17:d2:80:45:5d:6a:0f:d3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a7b3d01aa00caf09870850fdb92f221cc2185c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:8e:ec:f8:c6:20:e3:67:59:b2:25:0a:4d:
bc:73:60:b9:4a:04:fd:e9:42:d0:c1:87:2c:62:40:
55:2f:86:d8:09:d0:5b:a7:9d:8c:7e:54:76:64:c0:
12:9f:c9:5f:de:dc:18:4d:03:b0:d2:47:34:7a:a1:
4c:56:e9:ab:6e:40:a8:55:b0:47:37:4f:d8:b7:4c:
8c:c7:85:d5:93:7c:bc:80:d1:01:d1:fd:a9:6c:5f:
34:a7:b6:ae:d7:4a:b1:0d:9c:8c:90:15:bb:04:46:
32:f6:25:3d:69:77:ea:23:31:44:dc:8d:33:5b:cc:
49:75:ab:60:60:19:19:15:47:03:d5:78:c2:b3:61:
34:bd:7e:b1:60:33:46:99:d6:bf:b9:16:b8:50:bb:
a7:44:6c:d5:44:ef:d9:8e:8a:65:31:69:69:72:22:
30:30:8e:a6:8c:31:2b:6c:5a:95:82:0b:b7:43:31:
a0:42:af:35:7d:d7:35:1e:87:b0:d2:25:d3:68:c3:
f1:1b:72:df:14:0c:af:58:8c:f8:ff:aa:67:12:32:
15:7c:c7:ee:1a:da:4f:57:a5:55:50:9a:7a:d4:50:
15:99:aa:6e:c5:56:9b:00:1d:80:d3:16:1f:3e:39:
8a:69:8a:d8:0a:7d:f1:e5:9c:ab:1e:a7:b4:87:a3:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7B:3D:01:AA:00:CA:F0:98:70:85:0F:DB:92:F2:21:CC:21:85:C5
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/Ons9AaoAyvCYcIUP25LyIcwhhcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.161.87.0/24
Signature Algorithm: sha256WithRSAEncryption
99:fa:d4:34:9b:7a:20:07:0d:20:87:c9:18:40:9c:62:5f:9b:
d8:5a:dc:99:8c:1e:89:18:4d:97:a7:c6:f4:d3:1d:41:bf:90:
c1:24:aa:90:97:62:67:e2:89:8e:6f:70:7f:07:b8:c6:56:8c:
9b:71:42:1a:87:47:16:5e:2e:e2:1e:47:8d:e4:b6:d9:4d:76:
f2:70:9b:77:00:1f:3c:17:54:64:ff:37:48:6c:2f:33:36:80:
d2:ca:87:2d:ce:89:d0:14:88:1e:20:58:bd:44:e8:84:3d:8a:
8d:bb:9c:c4:a8:bc:61:b1:41:a5:64:7b:2b:82:24:08:18:d6:
e8:ce:fa:cc:dd:ca:75:45:5b:28:76:07:fc:56:76:4b:a2:ce:
4f:6a:cb:f9:c5:ab:68:e2:2e:76:66:76:b6:f1:70:48:c7:e9:
f0:39:3f:02:49:65:ee:b6:d5:9b:5e:a2:05:98:ea:fe:29:02:
61:58:a7:ac:27:99:9c:54:97:4f:e3:fc:bb:b9:a8:2d:f0:01:
e5:c5:bb:83:88:0a:30:d5:fb:12:d1:0f:50:03:d4:e7:94:a5:
bc:de:91:cf:8e:4a:6b:09:13:8c:c7:8d:6c:20:ca:da:d6:1e:
ac:8a:65:c2:05:ca:56:65:5e:da:e6:c7:3f:44:b4:86:75:7c:
a2:1c:ed:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:08 2025 by rpki-client