Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/OA9cjZfM9pcs189DQL3OK7PNscQ.roa
File: OA9cjZfM9pcs189DQL3OK7PNscQ.roa (raw, json)
Hash identifier: k0wLUi6w93vs71XE/cCMCBIvwa+yuzcb+Mk+I80oin8=
Subject key identifier: 38:0F:5C:8D:97:CC:F6:97:2C:D7:CF:43:40:BD:CE:2B:B3:CD:B1:C4
Certificate issuer: /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Certificate serial: 0194221FA04D76B5E37B0D25D8A496979296
Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/OA9cjZfM9pcs189DQL3OK7PNscQ.roa
Signing time: Wed 01 Jan 2025 13:48:05 +0000
ROA not before: Wed 01 Jan 2025 13:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42166
IP address blocks: 194.0.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a0:4d:76:b5:e3:7b:0d:25:d8:a4:96:97:92:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Validity
Not Before: Jan 1 13:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=380f5c8d97ccf6972cd7cf4340bdce2bb3cdb1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:bf:16:95:25:2e:fa:c3:f0:cd:0b:aa:26:
9c:bf:dd:f0:c5:ec:53:c4:d6:53:56:23:2b:b9:dc:
17:d7:2b:29:cf:96:49:e2:15:9d:ca:54:3d:e6:28:
02:05:0c:05:e3:cb:fb:1d:86:7d:c2:32:fd:00:7c:
fd:7c:ad:73:c7:78:07:59:75:44:a4:d7:6d:2f:99:
bf:b7:50:41:73:81:06:4f:fe:d9:0e:7e:a9:26:68:
36:07:e1:4a:96:f5:29:17:c1:4c:ff:c0:eb:40:00:
70:8c:74:a2:86:a8:bc:e3:89:ed:42:9b:35:07:2e:
e7:05:f6:e3:bd:44:65:d1:7c:49:48:f8:c8:58:ce:
1b:b0:28:48:bf:37:9c:75:20:cc:af:d9:46:5e:c5:
0e:9f:cb:99:f5:45:4f:6c:5a:fa:90:1a:6a:c8:01:
fa:d3:f3:83:ee:e2:9a:00:61:c8:65:0d:0b:63:0b:
b2:36:d6:39:a0:db:b1:9e:90:d2:71:03:04:17:c5:
18:7e:b2:f6:2e:ca:26:53:65:7e:0f:94:3d:71:3f:
44:0a:85:22:f3:58:4e:86:e2:10:4b:28:97:10:82:
8a:2c:20:1b:c6:b2:30:56:f8:fe:de:98:67:7e:8e:
e4:54:20:3d:70:fe:93:68:ae:f5:cd:24:95:cc:8d:
3a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0F:5C:8D:97:CC:F6:97:2C:D7:CF:43:40:BD:CE:2B:B3:CD:B1:C4
X509v3 Authority Key Identifier:
keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/OA9cjZfM9pcs189DQL3OK7PNscQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.149.0/24
Signature Algorithm: sha256WithRSAEncryption
94:10:d7:2d:80:8d:cf:49:ea:a6:89:f9:28:87:3b:4c:5f:db:
25:5c:13:69:84:2e:9f:ed:f0:8b:b5:39:7a:c7:3b:c1:bc:7e:
06:4e:df:d1:85:9d:1d:db:23:10:17:1f:f5:3b:59:a3:9f:f4:
35:e5:25:18:6d:b3:ab:1e:40:34:d8:50:d8:8a:fb:ef:e2:62:
6f:80:59:b8:aa:71:3d:c8:88:64:bf:86:8e:a6:cc:9f:29:f9:
19:8c:29:3f:0f:58:ae:0f:86:4c:0f:2a:06:78:e0:d1:d5:e6:
25:1d:1e:d2:45:7c:5e:e5:72:c1:82:05:57:4c:f5:34:76:b8:
00:fd:3b:e8:42:57:eb:2d:1f:a5:f3:66:94:77:87:17:a0:48:
aa:91:9e:27:90:aa:e0:49:12:60:8c:46:75:09:db:b6:02:66:
59:e9:b6:5c:cd:dd:95:64:65:e0:07:9f:02:c0:9e:e1:c9:f5:
d3:49:e6:c1:02:f0:97:2b:40:0a:e0:18:17:8c:32:25:d5:6a:
8c:90:2a:3e:a5:91:b6:69:1d:1f:51:a1:88:7e:c5:34:8a:30:
d1:75:e9:8e:bc:e8:9d:c7:59:d8:42:f6:7c:6e:18:b2:e7:3f:
18:8b:92:a1:f2:d2:d9:a8:1f:c2:4b:58:ba:c9:a4:69:56:5a:
02:41:a1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:20 2025 by rpki-client