Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/ommcgtarI65YI1kcqlSBP2uGJm0.roa
File: ommcgtarI65YI1kcqlSBP2uGJm0.roa (raw, json)
Hash identifier: 4y+wKlBvRSXHODdQDqeioxxZ7eEyNb3DpNEaFBajPZU=
Subject key identifier: A2:69:9C:82:D6:AB:23:AE:58:23:59:1C:AA:54:81:3F:6B:86:26:6D
Certificate issuer: /CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Certificate serial: 01942368E0EB66A281A16277866D53317A93
Authority key identifier: 06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/ommcgtarI65YI1kcqlSBP2uGJm0.roa
Signing time: Wed 01 Jan 2025 19:47:43 +0000
ROA not before: Wed 01 Jan 2025 19:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41562
IP address blocks: 195.34.72.0/23 maxlen: 23
195.34.72.0/24 maxlen: 24
195.34.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:e0:eb:66:a2:81:a1:62:77:86:6d:53:31:7a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Validity
Not Before: Jan 1 19:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2699c82d6ab23ae5823591caa54813f6b86266d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:64:f3:4e:47:84:3e:f3:8b:e3:94:05:27:cd:
7b:eb:6c:2b:04:79:d2:af:e8:02:cf:7c:16:64:66:
c4:65:ed:0e:fa:94:d6:c7:4f:f4:a5:37:c2:41:99:
26:94:ab:2c:3b:06:d6:d5:62:93:19:f2:d9:72:2d:
ff:dc:88:76:b6:69:f9:3a:0c:a2:c7:b7:a6:43:ff:
15:84:da:e0:4f:16:10:19:1e:fb:33:c1:81:22:68:
2b:13:b2:32:9b:cf:9a:db:07:28:32:b8:d3:98:e4:
ec:ed:9f:a5:df:bc:a0:05:8c:f8:0a:62:40:df:00:
9f:38:25:d6:63:1b:d1:90:dd:48:e9:c5:30:15:8d:
4e:c1:89:0b:ca:1c:fd:27:3f:bd:25:f5:63:45:e5:
03:63:90:d9:24:a9:de:ab:8b:71:9f:9f:15:1c:5c:
1e:dd:0e:22:32:70:63:6d:a3:b9:8c:bb:f8:e7:10:
21:e5:0c:bf:96:21:76:76:64:1b:3d:e1:ec:48:0d:
28:ca:2b:27:a9:ad:ba:35:fe:28:b9:f3:f4:dc:f1:
fd:02:4e:4e:78:1b:01:b4:19:27:82:92:17:87:e6:
85:d2:f4:91:ff:1b:50:ba:61:bc:49:bf:51:80:25:
f3:4a:7e:ec:86:b6:d8:b6:46:00:e0:30:4b:f9:bd:
20:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:69:9C:82:D6:AB:23:AE:58:23:59:1C:AA:54:81:3F:6B:86:26:6D
X509v3 Authority Key Identifier:
keyid:06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/ommcgtarI65YI1kcqlSBP2uGJm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.72.0/23
Signature Algorithm: sha256WithRSAEncryption
27:65:0b:71:47:ee:b1:77:7d:ec:ee:21:31:7e:17:e2:bc:89:
d4:18:1e:b4:fc:2f:bc:1b:73:86:83:c0:31:21:e7:d1:c5:9e:
60:ae:94:67:8d:e7:1d:94:50:a9:8e:15:1e:8a:08:2b:48:d6:
cd:64:e0:ca:f7:2a:c4:0f:49:14:65:d2:1f:fd:4a:96:0d:9e:
7c:eb:3c:41:9a:ce:79:4d:99:a8:e5:d1:c0:61:2c:13:1a:80:
e5:72:f1:5f:ec:b5:44:5f:19:cf:40:64:09:c0:f3:7e:a2:5f:
7f:60:12:40:9c:07:3f:3f:5f:8b:5d:52:31:1b:4c:08:0e:cb:
8a:ba:29:c9:32:89:6d:9d:ce:16:eb:c2:94:76:ff:4e:48:29:
f0:28:84:66:48:04:7c:c1:ef:c6:dd:b8:c3:1f:8e:8b:64:59:
94:a8:f8:96:29:cc:fc:04:df:6f:c5:54:2b:d2:d7:85:3b:cf:
33:86:6c:cf:d7:d1:f7:ff:f6:69:e6:7d:ba:20:d6:85:d8:e5:
73:5f:8f:97:97:fd:31:0b:ee:7a:a5:72:9b:6d:39:36:b8:42:
e7:26:b1:86:29:49:b0:66:ed:45:1f:9f:9f:73:c9:6a:9b:cd:
5e:b9:2f:00:ac:75:33:23:d7:a2:6e:8c:be:92:c9:a5:06:d7:
a4:4a:e1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:57:01 2025 by rpki-client