Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/Ovv3jRDadSuJuvhS-S0kK_fQ9ro.roa
File: Ovv3jRDadSuJuvhS-S0kK_fQ9ro.roa (raw, json)
Hash identifier: X1g4S0KOxzsTxSeEns4d0ko+VlZEXePzUj9xmUEL7Qw=
Subject key identifier: 3A:FB:F7:8D:10:DA:75:2B:89:BA:F8:52:F9:2D:24:2B:F7:D0:F6:BA
Certificate issuer: /CN=7ee8e84cdc0f49dac293adfb5e04a49108ced646
Certificate serial: 0194274744A4BE9460AC3D4C64F24F9182B5
Authority key identifier: 7E:E8:E8:4C:DC:0F:49:DA:C2:93:AD:FB:5E:04:A4:91:08:CE:D6:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/Ovv3jRDadSuJuvhS-S0kK_fQ9ro.roa
Signing time: Thu 02 Jan 2025 13:49:29 +0000
ROA not before: Thu 02 Jan 2025 13:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216439
IP address blocks: 84.234.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:44:a4:be:94:60:ac:3d:4c:64:f2:4f:91:82:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee8e84cdc0f49dac293adfb5e04a49108ced646
Validity
Not Before: Jan 2 13:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3afbf78d10da752b89baf852f92d242bf7d0f6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:03:43:85:2b:8f:1d:56:fb:6c:1e:f9:b1:
4d:ee:b6:f1:a0:c6:99:84:1b:8e:76:31:bf:bf:5b:
48:b6:46:a7:d7:43:15:fb:a1:06:db:cc:af:13:3f:
c9:fb:54:11:51:21:d2:0b:90:be:f8:2c:28:14:6e:
b2:21:b1:e9:60:5e:3f:ca:00:ec:76:73:5c:3a:f1:
b4:cd:5d:8a:c0:20:bd:85:c9:0d:87:a8:bf:c9:5e:
fe:a0:4f:5e:93:a2:f5:91:b1:1a:32:aa:3d:0f:4c:
2d:c8:60:ac:4d:1b:b0:ca:02:61:d4:9d:b0:90:0f:
f3:1f:3b:50:12:7c:64:0e:f0:2f:f6:7a:11:f5:a6:
61:41:22:ae:ef:8d:77:4c:a8:f0:ad:60:bd:04:61:
d6:f3:6e:e0:77:4f:71:fd:3d:96:ce:a9:ef:bb:6e:
c7:75:e5:61:d6:bb:d5:07:19:6c:69:fa:2a:94:d8:
71:57:e4:85:d2:bb:93:94:20:d8:00:c2:04:2b:3b:
e7:aa:ca:00:ce:aa:e9:8d:1e:81:9c:a6:34:d4:7c:
ec:2a:7a:d2:f7:86:f8:87:f1:3f:3f:4d:3d:8e:40:
ef:50:ec:0b:07:60:75:83:5a:36:22:15:a5:a1:39:
c6:1f:bd:eb:41:9c:4a:3c:ef:6e:79:a4:7a:6e:44:
83:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FB:F7:8D:10:DA:75:2B:89:BA:F8:52:F9:2D:24:2B:F7:D0:F6:BA
X509v3 Authority Key Identifier:
keyid:7E:E8:E8:4C:DC:0F:49:DA:C2:93:AD:FB:5E:04:A4:91:08:CE:D6:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/Ovv3jRDadSuJuvhS-S0kK_fQ9ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.127.0/24
Signature Algorithm: sha256WithRSAEncryption
31:20:ba:42:19:09:dc:6e:b4:4f:a6:2e:cd:c1:9b:eb:5d:3d:
07:5c:4e:9f:8a:da:01:60:d8:d8:f0:86:14:3b:9f:ef:cb:ac:
8d:38:08:d1:a4:48:86:d1:11:01:86:0f:14:9a:85:12:38:36:
0a:25:03:6b:81:ad:f3:9c:22:0d:dd:13:96:d1:59:cf:07:f0:
86:8b:48:32:59:70:cb:d5:25:4b:42:4e:93:e2:4c:66:1b:90:
cb:1a:ff:7d:62:29:b8:04:16:9f:2c:0e:b0:d1:d4:7e:c1:01:
b5:0d:f5:c0:0a:ab:38:4a:e5:76:eb:18:17:c7:db:b9:a2:a0:
7f:4c:c6:6b:16:29:b3:cf:f1:b3:34:9d:6b:b8:85:50:e7:0e:
0e:6a:c5:61:cb:b6:56:fd:82:32:c6:78:76:ec:96:21:32:66:
3f:1c:33:e2:a8:25:79:48:63:71:3d:84:63:4e:06:48:35:24:
b4:d0:c5:de:86:39:0b:57:a4:74:36:7f:f0:43:22:31:30:43:
d3:85:b4:3a:26:60:64:b6:52:57:9d:a7:c8:fb:a7:68:49:d4:
c2:64:29:72:79:54:fd:4b:56:87:00:e0:1a:b0:69:f5:dc:46:
75:c6:77:a9:46:03:7e:4c:20:44:ad:26:37:da:d9:b1:1b:33:
ce:3d:e3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:34:20 2025 by rpki-client