Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/OtjJmI6Ls9Kg1YxzkMEdEkmTt7I.roa
File: OtjJmI6Ls9Kg1YxzkMEdEkmTt7I.roa (raw, json)
Hash identifier: /6BLR+AdUGXWQBTgTfTbrGkLKrcJvvynFVuSv1BHLUo=
Subject key identifier: 3A:D8:C9:98:8E:8B:B3:D2:A0:D5:8C:73:90:C1:1D:12:49:93:B7:B2
Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Certificate serial: 01942747B573BA8158827F0F9D60B6F36652
Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/OtjJmI6Ls9Kg1YxzkMEdEkmTt7I.roa
Signing time: Thu 02 Jan 2025 13:49:58 +0000
ROA not before: Thu 02 Jan 2025 13:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56822
IP address blocks: 176.32.48.0/23 maxlen: 23
176.32.51.0/24 maxlen: 24
176.32.52.0/24 maxlen: 24
176.32.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b5:73:ba:81:58:82:7f:0f:9d:60:b6:f3:66:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Validity
Not Before: Jan 2 13:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ad8c9988e8bb3d2a0d58c7390c11d124993b7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:35:9f:82:d2:34:91:12:83:47:a1:d0:15:f8:
25:71:73:b4:10:a9:df:f3:e7:66:a8:c2:a0:f9:6f:
ef:67:13:08:42:fb:cb:ff:57:26:b5:96:06:0d:5f:
b8:74:22:14:4b:26:60:cd:10:27:e6:5f:9f:ff:64:
78:3a:d7:cf:d4:5a:ef:a4:7e:9e:e5:cc:5e:c2:86:
41:b8:75:ea:e7:2f:13:68:98:ff:0e:1b:a0:94:65:
11:55:c3:07:92:59:01:cd:54:38:7a:37:85:ea:63:
38:f1:66:4a:13:11:81:a0:71:04:3f:19:46:35:ea:
78:96:6d:62:67:6a:25:11:d6:a4:4a:fb:af:93:a4:
bf:fa:75:16:67:51:3f:52:c3:a2:04:fb:ff:58:bc:
08:1c:c3:08:46:c1:d0:90:3a:82:98:33:bc:02:5d:
d3:61:34:ac:98:ba:1f:15:31:fd:e2:cb:32:0d:59:
f1:59:50:bf:85:47:65:a2:41:84:53:96:06:89:b5:
28:88:e5:db:4c:8d:82:c3:a0:a4:57:92:23:f8:97:
5f:7b:64:03:e3:32:e3:f7:5a:23:87:32:05:cd:30:
00:eb:9b:52:21:c6:a0:ee:99:34:ab:d7:63:e6:74:
88:b5:73:ac:0e:6a:2d:f8:28:c3:67:cd:5a:5d:1b:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D8:C9:98:8E:8B:B3:D2:A0:D5:8C:73:90:C1:1D:12:49:93:B7:B2
X509v3 Authority Key Identifier:
keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/OtjJmI6Ls9Kg1YxzkMEdEkmTt7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.48.0/23
176.32.51.0-176.32.52.255
176.32.55.0/24
Signature Algorithm: sha256WithRSAEncryption
49:06:ed:6a:8e:17:ed:7b:85:3d:45:03:5f:fb:f2:0b:ae:eb:
3d:10:b3:ad:e9:75:d2:03:7f:e7:e0:9a:ff:be:eb:05:da:06:
f4:81:6c:cd:00:b0:c7:c7:29:6e:04:a9:c0:0c:a4:4b:d0:54:
13:77:4c:30:75:62:1a:81:51:36:b1:17:64:a9:28:e0:01:d1:
9f:c1:41:9f:c0:2d:3b:bb:f7:c5:d1:6e:9b:eb:2d:ab:0c:e9:
32:d5:7b:18:c2:3f:fe:8e:e0:b2:ef:82:35:75:b0:a8:72:a4:
fb:27:d4:56:d5:05:dd:28:40:79:92:60:63:d7:f6:5d:e3:65:
7f:c0:58:5b:c9:38:28:c9:49:32:1d:03:de:02:d8:f2:d4:28:
99:dd:d3:2c:fc:d7:7b:64:ed:10:d2:e7:98:6d:65:52:a1:b2:
a3:34:e9:1b:87:12:3c:78:c7:45:d4:f3:92:dc:09:07:2d:2c:
7b:0a:bb:d8:44:30:0e:39:15:22:f1:a7:bf:27:47:66:bf:5c:
0b:60:f7:4a:67:fb:3b:53:91:c3:3b:b8:15:fe:ec:f7:d5:7a:
21:7c:83:d8:ba:6f:c1:88:ea:58:07:28:01:ac:93:83:32:bf:
5a:6d:ec:62:38:ea:8e:a6:ad:d6:8a:b9:77:c0:22:75:f7:a4:
fa:10:e4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:05:18 2025 by rpki-client