Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/Oub2lhgmfvMfqkmPb5LyvG3fgGg.roa
File: Oub2lhgmfvMfqkmPb5LyvG3fgGg.roa (raw, json)
Hash identifier: +9dI9QuGP90crJ0Jy+OL+st47BSK3Y6Vx4rFFytlOnk=
Subject key identifier: 3A:E6:F6:96:18:26:7E:F3:1F:AA:49:8F:6F:92:F2:BC:6D:DF:80:68
Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial: 0194221FBCA3F55F0DA13068E6CFDBE2C7F8
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/Oub2lhgmfvMfqkmPb5LyvG3fgGg.roa
Signing time: Wed 01 Jan 2025 13:48:12 +0000
ROA not before: Wed 01 Jan 2025 13:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57456
IP address blocks: 31.24.87.0/24 maxlen: 24
45.152.122.0/24 maxlen: 24
185.124.64.0/24 maxlen: 24
193.26.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:bc:a3:f5:5f:0d:a1:30:68:e6:cf:db:e2:c7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Validity
Not Before: Jan 1 13:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ae6f69618267ef31faa498f6f92f2bc6ddf8068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:29:f8:ad:8d:71:ce:a4:31:39:e4:49:f8:
af:7c:80:1c:75:fa:ab:f1:cb:25:24:e1:2f:a1:9c:
80:fb:e8:7a:83:d5:9f:a4:c8:4d:23:e4:f3:f5:e3:
79:7e:5c:d1:c1:60:14:94:a7:65:31:aa:eb:98:51:
32:92:73:57:e0:34:d5:ad:a5:0c:d6:e8:fb:50:75:
5b:6c:95:0f:59:ca:4c:5a:3c:a3:d8:6e:25:ee:b1:
6d:f8:f5:ea:c0:58:76:ca:66:67:23:a0:66:17:27:
77:d5:af:ef:e0:fd:bc:0f:88:ef:40:28:34:99:13:
ac:34:8d:8a:31:b3:4e:1e:04:ad:51:d7:51:ac:82:
73:cc:af:56:44:cc:fe:40:84:a4:8e:80:65:3e:32:
04:a8:47:bc:1f:15:bf:ac:9d:f9:67:97:19:1d:03:
87:67:80:66:c6:d2:b2:03:d5:dc:0f:a1:fd:0a:94:
e4:69:09:c6:4a:71:84:99:5a:42:60:dc:32:52:0a:
6d:5e:52:1c:89:7c:35:4a:30:36:0c:83:24:1f:19:
4b:97:cd:46:50:d2:b1:51:1f:d5:65:18:cd:94:1e:
5b:df:ba:99:90:28:af:ed:2d:88:69:61:f1:e1:a6:
89:6c:55:45:9a:f8:bf:4b:14:6d:5b:e7:d9:95:02:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E6:F6:96:18:26:7E:F3:1F:AA:49:8F:6F:92:F2:BC:6D:DF:80:68
X509v3 Authority Key Identifier:
keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/Oub2lhgmfvMfqkmPb5LyvG3fgGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.87.0/24
45.152.122.0/24
185.124.64.0/24
193.26.127.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ea:dc:2c:13:95:5e:8a:ea:9d:0b:2d:a6:75:76:ae:03:7f:
95:e4:87:c2:7f:e1:2f:98:d2:9d:56:c2:7f:e3:ca:9a:44:54:
4f:c7:82:c7:07:11:52:20:3b:09:23:31:2f:b5:6e:c6:83:5c:
0b:3e:90:8a:b1:bd:06:b2:a5:b1:f1:df:01:e5:c4:b6:4d:5b:
be:30:6e:fb:60:f7:22:3e:c2:60:da:da:6d:d0:f1:4e:48:86:
35:78:97:5d:01:cf:dc:62:56:d3:da:4a:62:70:94:d0:10:35:
86:be:a8:cf:9e:78:25:e3:ff:cc:d5:15:77:cf:16:65:73:55:
b9:10:5f:5a:a1:91:4c:84:ed:38:10:bd:4d:56:7e:ea:16:28:
37:4e:26:98:6b:95:2c:50:b1:38:a5:e1:79:a1:ad:92:4a:a4:
77:ce:df:c1:f1:8e:58:79:d2:76:94:fc:bb:e4:e1:a0:ab:81:
ee:43:c6:30:f0:46:2a:2c:c7:02:5c:c3:ec:25:45:68:79:b4:
73:f1:bf:48:89:89:f9:59:eb:0d:8a:b7:10:b7:47:07:3b:07:
bf:2f:21:4d:ef:27:e3:39:a3:97:21:65:d3:ff:0b:24:cd:6d:
2b:d3:d2:3f:50:96:82:3c:23:5a:5e:b1:03:87:dd:de:20:00:
59:6e:1f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:14 2025 by rpki-client