Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/orOsP0rs2ff7STwYpI2t2_50MTo.roa
File: orOsP0rs2ff7STwYpI2t2_50MTo.roa (raw, json)
Hash identifier: o5pPTCCPZuPMBRMWmMSYExhsj/8nITrHMx5Um0qrkAo=
Subject key identifier: A2:B3:AC:3F:4A:EC:D9:F7:FB:49:3C:18:A4:8D:AD:DB:FE:74:31:3A
Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Certificate serial: 01942747B4EAC7A53F43A1784E5FC432719F
Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/orOsP0rs2ff7STwYpI2t2_50MTo.roa
Signing time: Thu 02 Jan 2025 13:49:58 +0000
ROA not before: Thu 02 Jan 2025 13:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43528
IP address blocks: 91.195.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b4:ea:c7:a5:3f:43:a1:78:4e:5f:c4:32:71:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Validity
Not Before: Jan 2 13:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2b3ac3f4aecd9f7fb493c18a48daddbfe74313a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:25:b8:94:29:c4:39:07:d4:2d:07:94:96:f5:
d3:9e:b6:3b:a0:6f:73:b1:c9:f7:34:94:ed:67:ff:
c8:c1:3b:40:45:aa:f6:14:8c:e1:9e:00:26:9c:b4:
80:2e:bb:fa:c2:7b:d1:83:75:17:5e:0c:07:ad:c2:
89:cd:c6:ac:3c:6f:ab:27:c8:f7:a6:ea:41:73:43:
28:1c:31:19:ee:c6:c8:88:40:5d:38:b3:61:68:8c:
c3:2b:d6:d0:3d:35:f4:d6:5b:5f:ec:03:97:61:01:
db:d6:f3:de:54:dc:1d:00:69:84:71:5f:66:bc:27:
10:7a:3a:fd:db:a9:10:34:71:b1:cd:e6:7e:e5:52:
81:d5:4a:02:1a:f7:ee:4f:b9:3a:ef:72:da:dc:7e:
bc:12:0c:13:ff:bf:a7:e5:1a:66:c9:14:59:9f:17:
1d:29:35:6e:5f:d4:e8:dd:1a:aa:27:9b:c6:aa:38:
b6:e0:58:78:7c:b9:d8:bf:d4:f9:94:fe:1f:4b:f2:
33:3b:15:0a:ab:4d:c6:90:48:65:45:65:9b:ff:32:
6d:a7:64:97:13:bc:6d:91:a3:88:81:da:dd:80:90:
35:69:a4:e5:d5:27:75:15:85:b4:fb:e8:fa:e1:c6:
84:46:68:72:e7:fc:6f:4b:a9:1c:ec:b6:71:e9:b9:
d4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B3:AC:3F:4A:EC:D9:F7:FB:49:3C:18:A4:8D:AD:DB:FE:74:31:3A
X509v3 Authority Key Identifier:
keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/orOsP0rs2ff7STwYpI2t2_50MTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.34.0/23
Signature Algorithm: sha256WithRSAEncryption
16:f8:36:b6:11:36:dd:20:de:60:af:ed:e8:64:56:f9:5e:92:
77:97:9c:07:4a:8a:4e:7a:ff:27:f8:e6:d5:a1:3d:1f:d9:e2:
58:e8:50:53:04:d4:fb:aa:b8:23:9e:1f:4a:f0:ca:7e:0d:cc:
3d:8d:9f:c1:04:bb:14:8f:02:a8:d4:53:60:ed:1c:73:cd:92:
31:66:91:7a:97:5c:6f:80:f2:61:3f:d0:12:f5:e5:f2:f6:1c:
38:93:9b:0c:1e:fa:0a:d9:43:ae:df:d2:45:c5:d8:2e:57:bf:
db:bc:a7:07:83:85:e6:58:91:2c:ba:dd:c6:54:89:bf:54:c8:
14:9b:f5:9a:3b:31:62:0f:0a:4f:3f:9c:9b:f9:8e:65:e1:25:
a4:11:a8:7a:a3:44:54:de:d1:13:a7:ad:8a:fc:a9:fc:32:f3:
58:d9:f3:69:e0:d8:7f:cf:ce:ba:53:ce:24:e1:00:23:93:f5:
48:dd:10:12:7f:15:a9:2d:83:8a:f3:3b:19:35:51:0b:03:7d:
fd:10:b7:c2:ff:fe:7f:ab:87:c7:44:2b:03:8a:d5:a6:a3:bb:
4b:6a:01:c1:16:6c:32:9e:e8:34:eb:d5:c2:b1:c4:a8:3b:22:
7a:a9:3f:11:86:41:eb:79:a3:01:e5:40:2a:39:9a:68:2c:00:
c5:9f:f3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:35:28 2025 by rpki-client