Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/oeUHXPRVWNrr1QJirrKSZQy6zrU.roa
File: oeUHXPRVWNrr1QJirrKSZQy6zrU.roa (raw, json)
Hash identifier: SxbvFYL3nEPIvag7xzWrtYfbRcEggJtZoR9CvV7aWPA=
Subject key identifier: A1:E5:07:5C:F4:55:58:DA:EB:D5:02:62:AE:B2:92:65:0C:BA:CE:B5
Certificate issuer: /CN=0d7d3c72802223577880d38f048c81891226403b
Certificate serial: 019425212B2EB111E174FF039AA56A2E893B
Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/oeUHXPRVWNrr1QJirrKSZQy6zrU.roa
Signing time: Thu 02 Jan 2025 03:48:38 +0000
ROA not before: Thu 02 Jan 2025 03:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29240
IP address blocks: 193.142.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:2b:2e:b1:11:e1:74:ff:03:9a:a5:6a:2e:89:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7d3c72802223577880d38f048c81891226403b
Validity
Not Before: Jan 2 03:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1e5075cf45558daebd50262aeb292650cbaceb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:36:9f:ec:fb:03:e9:0d:9f:36:00:bf:b9:02:
cb:c8:a8:df:98:a1:82:ce:ef:a1:e6:88:22:b9:b3:
2c:d2:06:d7:43:71:c4:47:f1:2c:1c:80:2c:9e:c1:
0e:ed:cb:8d:07:7a:78:9d:12:52:40:a9:eb:91:8a:
de:20:01:dd:3b:b4:e8:7f:08:5c:6c:1f:82:4d:9f:
82:d1:e7:9e:57:55:fd:9e:72:28:6b:c1:e1:d4:bf:
5a:67:cf:a5:15:29:d9:dc:26:04:62:9d:38:26:9c:
92:86:8a:de:ee:6c:55:a9:1a:dd:a0:cd:f5:15:48:
1b:7f:1c:94:0f:09:8a:bb:e2:2b:ee:8b:a6:77:95:
8c:63:b4:68:ce:34:b2:7d:3e:f6:d9:f7:26:68:49:
3d:2f:e2:37:07:04:a2:9e:aa:b9:42:69:72:cc:67:
ef:b4:2b:6d:25:9b:36:24:9c:b5:f9:2d:73:bb:f6:
28:ff:a9:f2:1d:3f:de:90:84:e4:53:dc:08:66:48:
2a:6b:20:df:68:53:27:4c:c4:54:bb:95:d3:e3:22:
0c:d2:d7:bf:9e:ff:0b:e8:fc:58:24:c4:ac:35:08:
47:46:48:55:26:4b:33:a8:52:32:b4:a0:65:8e:a0:
c1:8a:80:b2:cb:5c:a0:6e:db:91:73:23:e2:39:61:
31:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E5:07:5C:F4:55:58:DA:EB:D5:02:62:AE:B2:92:65:0C:BA:CE:B5
X509v3 Authority Key Identifier:
keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/oeUHXPRVWNrr1QJirrKSZQy6zrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:39:00:4d:b4:0a:c1:4c:4b:58:90:09:65:8b:ba:ce:8f:6c:
c3:34:45:43:bf:91:9a:50:96:35:7d:b4:f5:cb:6a:37:de:5e:
02:b8:3c:d1:bf:ad:ba:0a:2c:3f:00:01:6d:3f:8d:0b:eb:38:
a5:52:c1:b1:70:dc:df:2b:5b:fe:7d:12:69:5b:61:78:c2:f9:
56:58:88:b4:4d:cd:97:dc:70:5d:2d:66:cd:57:cd:79:53:c1:
5d:d3:d4:4e:d0:0d:00:05:f1:cf:e7:85:12:7b:51:0e:29:00:
51:d8:5f:53:6a:fe:85:e3:6f:13:7b:cb:20:9a:61:ec:b3:8f:
5b:67:ce:54:ec:01:f0:eb:b4:88:4a:a8:6b:d8:e8:23:d5:f9:
70:7f:4b:e3:67:c5:a5:9b:74:28:0b:80:6e:be:a3:a2:20:37:
a4:0c:c3:73:48:05:5b:c8:1b:71:cc:dd:64:e9:8d:69:9b:aa:
36:64:ed:74:66:ec:5a:3f:8c:b2:62:a4:b1:e2:da:bb:22:d8:
85:49:b5:d2:c6:8c:9c:7e:4e:98:94:a8:55:30:1a:65:ef:41:
b0:32:8c:1f:8e:8e:a9:bc:7f:e2:94:48:11:75:fc:e3:84:07:
84:03:99:63:de:04:34:2a:70:58:b9:c2:38:88:90:fe:ea:c4:
91:79:70:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:08:02 2025 by rpki-client