Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/O4pL8bOkm7k8Dc5goVDu8nvKS30.roa
File: O4pL8bOkm7k8Dc5goVDu8nvKS30.roa (raw, json)
Hash identifier: gSjW+R9kyQFRuzzqYc+aNmr8UDNGwt1WHFY4+D72xpk=
Subject key identifier: 3B:8A:4B:F1:B3:A4:9B:B9:3C:0D:CE:60:A1:50:EE:F2:7B:CA:4B:7D
Certificate issuer: /CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
Certificate serial: 0194258F4256084D9C63371FA85370C570FD
Authority key identifier: 2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/O4pL8bOkm7k8Dc5goVDu8nvKS30.roa
Signing time: Thu 02 Jan 2025 05:48:53 +0000
ROA not before: Thu 02 Jan 2025 05:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43425
IP address blocks: 194.50.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:42:56:08:4d:9c:63:37:1f:a8:53:70:c5:70:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
Validity
Not Before: Jan 2 05:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b8a4bf1b3a49bb93c0dce60a150eef27bca4b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:93:0e:cc:55:95:d4:5a:78:d8:22:0d:18:4c:
08:e1:f1:2b:2d:45:94:03:48:cd:50:73:f5:af:02:
42:f9:15:1e:c3:8e:80:48:6b:19:28:a8:8b:04:41:
e5:c3:15:36:3f:bc:a2:2c:65:ed:71:68:03:d2:74:
01:fe:11:37:8b:42:f6:62:c4:7e:4e:e1:b4:d2:07:
1c:54:ea:90:50:ce:17:9f:45:7e:34:36:aa:f5:e8:
8c:fb:24:2e:a3:08:96:cb:58:14:f5:1d:27:73:3c:
16:5a:1e:f8:c6:31:33:89:5d:b1:f1:dd:88:70:5b:
db:e2:46:49:d3:10:71:ab:14:55:15:ed:1a:31:60:
9d:1d:27:38:1a:02:63:95:4e:45:ad:9c:1c:ca:eb:
f8:b2:1c:95:a2:47:f5:ac:6c:cc:77:2d:12:44:dd:
eb:c2:7f:8e:aa:89:23:98:98:79:72:1b:69:a9:f2:
d2:4f:16:6a:0b:87:bc:3d:91:14:88:60:68:00:22:
b4:2d:cc:a3:ba:18:d4:fb:13:05:21:38:b0:84:49:
ed:1f:40:be:d6:13:af:54:76:ab:7e:87:2d:5f:f7:
f7:fc:3b:38:58:df:00:68:56:40:30:8e:8a:28:55:
a4:72:64:da:a1:1b:24:7d:bc:5f:86:d6:cb:c7:e9:
06:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8A:4B:F1:B3:A4:9B:B9:3C:0D:CE:60:A1:50:EE:F2:7B:CA:4B:7D
X509v3 Authority Key Identifier:
keyid:2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/O4pL8bOkm7k8Dc5goVDu8nvKS30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.179.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:c7:29:89:d5:1f:68:1e:23:59:8c:a4:02:01:7e:11:dd:20:
09:02:6a:4a:56:03:cc:24:0f:fb:c4:b5:78:fe:43:cc:cf:9b:
8a:fc:98:98:99:5e:b5:01:fa:d7:2d:4e:e8:83:65:70:21:12:
c3:35:06:fc:9e:9c:3b:b3:13:54:3c:20:06:ff:5c:41:8c:23:
2a:45:ee:00:93:b5:de:35:c1:00:1b:c3:38:5f:58:5b:55:8b:
ac:d6:72:e3:63:07:45:d9:df:b8:ca:77:6c:cd:bd:4b:a8:12:
db:48:bf:c5:d7:78:f5:7b:84:0a:6a:61:d9:c9:5a:2e:08:4d:
25:8c:d7:60:33:64:35:fc:51:38:4e:ce:1f:d3:50:4d:64:d3:
ec:fe:bc:2b:ab:44:bd:d4:df:b4:af:f4:e2:4b:58:fa:b9:67:
b9:6e:95:a1:45:3a:a1:15:56:01:17:02:64:62:3c:c0:90:d3:
78:ad:3e:90:af:2c:18:29:c3:c4:b9:f6:98:e5:81:2c:d4:eb:
d7:3a:d2:23:ae:e0:c2:b4:c8:59:84:02:1e:d0:f1:06:92:b7:
8a:89:62:24:a0:34:13:db:e5:1f:38:df:e3:61:ab:08:5c:5c:
4a:35:08:e7:21:5a:6f:0e:85:7e:91:e7:92:10:62:0c:01:ed:
0d:31:ce:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:11 2025 by rpki-client