Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/OywOw90-BmuDTm7-vAr4oYdaiWc.roa
File: OywOw90-BmuDTm7-vAr4oYdaiWc.roa (raw, json)
Hash identifier: 8bINvDgAJsHgmIljWuh30WywbwSEgdwt4RUZy9xG14w=
Subject key identifier: 3B:2C:0E:C3:DD:3E:06:6B:83:4E:6E:FE:BC:0A:F8:A1:87:5A:89:67
Certificate issuer: /CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Certificate serial: 019425FDDE6C0EA3093CDF76D553C8248D2D
Authority key identifier: AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/OywOw90-BmuDTm7-vAr4oYdaiWc.roa
Signing time: Thu 02 Jan 2025 07:49:42 +0000
ROA not before: Thu 02 Jan 2025 07:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39257
IP address blocks: 194.48.242.0/24 maxlen: 24
2a13:d500::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:de:6c:0e:a3:09:3c:df:76:d5:53:c8:24:8d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Validity
Not Before: Jan 2 07:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b2c0ec3dd3e066b834e6efebc0af8a1875a8967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:d1:30:75:97:21:e4:17:6b:15:c9:89:a6:
65:9f:ed:27:4b:6d:1d:89:e3:24:18:80:6e:b4:7d:
42:fc:01:f3:67:5b:8e:de:ec:55:72:44:26:cd:91:
de:58:7b:13:e9:c3:4a:54:df:46:92:0a:9c:87:16:
dd:c5:a6:f2:a6:3b:37:f2:cc:98:05:cd:3a:e8:ff:
55:66:1f:13:3c:65:4b:ce:ba:22:e9:fb:b2:8b:2c:
d3:3d:f4:28:a0:59:f2:3c:37:62:22:85:d4:65:49:
b7:bf:ae:2a:f0:f8:b9:e4:81:c2:3c:fc:a5:d7:dd:
2b:30:12:c1:d0:36:56:7c:c3:61:8c:1a:b3:91:ba:
cf:4e:ec:28:e3:39:4f:e8:34:7a:1e:4d:74:00:c1:
23:a4:2b:b8:1d:62:f5:80:f6:3a:c3:e7:a2:7c:90:
82:7c:aa:c0:f3:06:52:4e:ee:64:5d:93:b6:f3:eb:
8a:98:88:6b:b9:24:4b:05:3e:e9:3e:91:8c:6d:8c:
21:0c:2e:25:55:9c:60:f0:71:a6:9d:ea:14:be:84:
95:59:3e:5b:e4:af:dd:d2:17:c0:9e:43:7e:8f:68:
f3:19:2e:bb:21:77:6f:55:d5:41:93:0c:83:1f:04:
f0:f1:5a:be:98:95:72:c1:58:ba:41:8e:44:10:6e:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2C:0E:C3:DD:3E:06:6B:83:4E:6E:FE:BC:0A:F8:A1:87:5A:89:67
X509v3 Authority Key Identifier:
keyid:AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/OywOw90-BmuDTm7-vAr4oYdaiWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.242.0/24
IPv6:
2a13:d500::/32
Signature Algorithm: sha256WithRSAEncryption
30:7b:49:2d:5c:12:26:16:52:70:8a:ab:de:b4:57:a1:88:dd:
e8:41:da:96:bb:a1:ba:64:04:0b:d2:08:e2:95:99:e5:e4:c5:
1f:95:d0:a8:7c:33:da:d5:bb:6f:b7:09:7b:ac:62:ef:b7:78:
07:4a:70:ab:10:43:a2:b9:21:4a:cb:07:c9:53:b9:6e:b3:0a:
4c:f9:da:2c:a3:b9:c9:b7:54:06:3c:79:5f:ce:2a:31:da:a8:
d4:32:4c:a7:d3:02:05:9d:12:16:d6:a9:d3:68:79:48:06:5e:
cd:3b:dd:23:fa:08:5d:c1:7c:39:71:56:7a:fb:1d:11:1c:67:
a3:ee:2f:65:8f:d2:5a:c7:cb:62:38:8e:88:23:bf:53:d5:a5:
01:6a:e5:c3:f5:1d:6f:38:08:62:2f:59:99:6e:44:34:ed:f2:
0c:fa:de:9e:21:8e:a2:9d:42:f8:d0:7d:06:ab:95:92:58:ab:
f7:0f:be:45:f0:37:4e:4e:bb:6a:eb:8d:67:6b:68:64:4b:ac:
23:74:eb:93:f9:2c:4e:e6:2a:91:0c:98:c6:c0:24:8d:af:5e:
d6:25:28:4d:c6:32:03:db:3f:e0:50:16:94:13:85:ec:ad:8b:
32:98:6e:18:06:18:03:7d:8d:78:53:ed:50:f5:f0:11:7c:45:
51:26:2d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:33 2025 by rpki-client