Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/OMC8JBvCYl7bQ9ngInMd0aMZ-oE.roa
File: OMC8JBvCYl7bQ9ngInMd0aMZ-oE.roa (raw, json)
Hash identifier: 4qqAXlUiD4s2s0wNKmpYnzZpaP7ycT4Hqs2PhA8Ebd4=
Subject key identifier: 38:C0:BC:24:1B:C2:62:5E:DB:43:D9:E0:22:73:1D:D1:A3:19:FA:81
Certificate issuer: /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial: 01942747D0AA3F1C06CDAF055174AA6A165A
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/OMC8JBvCYl7bQ9ngInMd0aMZ-oE.roa
Signing time: Thu 02 Jan 2025 13:50:05 +0000
ROA not before: Thu 02 Jan 2025 13:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56553
IP address blocks: 5.83.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d0:aa:3f:1c:06:cd:af:05:51:74:aa:6a:16:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Validity
Not Before: Jan 2 13:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38c0bc241bc2625edb43d9e022731dd1a319fa81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:43:cb:bd:5f:c5:58:db:55:ee:b7:ea:03:
7c:93:3e:54:83:0b:fa:e5:16:cc:a5:84:f2:91:d8:
79:8a:be:83:2e:88:ed:97:b5:69:5c:f4:0f:31:6f:
8f:87:e5:02:33:9a:dd:d1:d4:49:68:a2:c4:c1:38:
37:1d:e0:65:a4:79:fd:31:46:f9:06:3c:96:4a:f9:
ee:b2:1d:ff:54:53:d4:ce:f4:e2:93:ed:09:80:74:
25:06:4f:b8:bc:78:6f:fd:af:75:ee:ef:c4:c2:5c:
d1:5d:ee:0f:9c:8a:c5:ff:3b:63:c0:cf:15:6a:8d:
ba:b7:7b:c8:dd:0b:fd:97:44:4d:3a:52:d2:e8:40:
70:8a:61:98:bc:15:d4:3f:3b:65:10:80:f5:29:19:
34:e9:31:65:c5:b6:50:2d:c4:fa:c8:b2:9e:ad:ac:
a8:fc:8d:57:8e:b4:69:e1:30:dd:ca:ab:68:6d:32:
06:d9:75:1d:ba:fa:c5:d2:1b:c0:46:2d:7e:8e:dc:
44:8b:10:f7:ac:9b:32:77:f2:c5:f2:ae:29:6b:e0:
ed:af:ef:e5:03:12:7c:a4:a5:f0:66:1a:32:71:f4:
63:31:40:60:0f:ec:05:9a:27:18:05:90:d4:91:99:
b3:6e:11:7d:6b:15:9d:24:85:70:a3:aa:e4:0f:f7:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C0:BC:24:1B:C2:62:5E:DB:43:D9:E0:22:73:1D:D1:A3:19:FA:81
X509v3 Authority Key Identifier:
keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/OMC8JBvCYl7bQ9ngInMd0aMZ-oE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.38.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:0e:96:f9:5d:51:21:59:6c:8d:21:b7:f7:e8:9c:c4:14:28:
9a:ed:8f:60:8e:36:da:45:90:e8:c4:a3:13:b5:fc:70:31:7a:
ff:77:cc:66:db:13:52:8c:c4:87:24:d2:64:9b:88:ab:eb:ed:
10:e6:95:bb:e6:8c:b3:ff:a5:bf:1e:7c:eb:04:11:6b:a2:38:
8a:3f:44:d3:c7:b3:28:e3:fe:d0:1e:4d:90:06:b4:08:ed:c9:
9b:3f:92:e8:e9:8c:8f:5f:74:61:d5:fd:25:7b:81:12:14:40:
90:45:41:32:ed:79:69:b9:32:e5:3d:ee:d6:9c:27:fc:9a:59:
b6:d3:97:ba:92:e1:63:35:80:18:a6:bb:ac:e9:86:ab:08:79:
41:22:da:a0:5f:3b:d7:41:0f:f4:00:48:b7:ce:13:23:15:67:
d8:d1:8f:a9:96:a8:95:8f:6c:8a:39:80:f0:87:5b:fd:cd:16:
b9:05:82:18:58:fa:84:c1:8f:3f:bc:da:8c:b7:77:b3:d3:70:
a9:e5:8e:5e:65:53:b3:36:17:c6:bf:25:4d:cd:b4:3f:23:1c:
29:ea:59:49:78:5b:82:23:e8:95:af:85:1f:b2:22:d7:ae:4c:
12:7f:7d:48:07:8d:a4:8e:bd:f0:78:25:a2:3e:04:03:29:82:
cb:5a:22:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:58:38 2025 by rpki-client