Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/oM8IOquHIgB1YBWLpM1pmBbc7O8.roa
File: oM8IOquHIgB1YBWLpM1pmBbc7O8.roa (raw, json)
Hash identifier: IV7XgqctfzxaP5G+ON8fYqKcchsupNcGfIWY1I+WU3U=
Subject key identifier: A0:CF:08:3A:AB:87:22:00:75:60:15:8B:A4:CD:69:98:16:DC:EC:EF
Certificate issuer: /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Certificate serial: 01942444F3C81FFC2C15795C97758090D09C
Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/oM8IOquHIgB1YBWLpM1pmBbc7O8.roa
Signing time: Wed 01 Jan 2025 23:48:06 +0000
ROA not before: Wed 01 Jan 2025 23:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2486
IP address blocks: 194.0.9.0/24 maxlen: 24
2001:678:c::/48 maxlen: 48
2001:67c:2160::/48 maxlen: 48
2001:67c:217c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f3:c8:1f:fc:2c:15:79:5c:97:75:80:90:d0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Validity
Not Before: Jan 1 23:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0cf083aab8722007560158ba4cd699816dcecef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:b9:ff:89:9d:d1:1e:d7:f9:79:2f:fa:72:
6a:fc:f0:be:80:ec:3d:a8:40:3b:c6:42:80:b9:e7:
9c:22:02:4b:a1:05:33:05:6b:d8:1c:e2:fc:85:44:
51:c2:a5:08:ab:42:c7:c9:ce:6a:30:ed:b9:0a:3d:
a0:73:31:f9:7f:3c:4e:7a:b3:ea:dd:4f:0f:ef:28:
eb:14:bd:c1:b3:18:f3:e0:7c:81:77:14:63:3d:bf:
1e:7a:f0:a1:46:3d:09:5b:60:a7:47:69:23:1f:83:
41:16:6f:81:61:37:21:1a:b6:fb:6e:ac:f0:4e:c7:
c7:bc:73:c9:9b:f3:ae:b7:8b:8e:da:b9:12:ae:96:
89:6b:75:36:10:5f:76:68:29:2f:20:62:d4:6d:a2:
62:6e:95:e2:de:e6:2f:cc:d5:03:06:5a:69:57:f6:
e7:df:df:de:99:c1:a1:db:7f:10:ac:27:0e:63:2a:
b4:6e:1c:9e:0a:c0:66:4d:7e:64:64:77:2d:13:19:
99:71:c7:f2:f6:73:39:1f:f1:1a:8c:39:85:32:9d:
07:f6:4d:de:03:f5:c7:78:ef:ba:26:7f:a9:a8:8a:
ae:63:fe:4f:79:5c:fd:ee:4f:26:73:8d:cd:7a:77:
26:49:16:41:ab:2c:b1:c7:cf:7b:1f:0b:88:77:d3:
9f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CF:08:3A:AB:87:22:00:75:60:15:8B:A4:CD:69:98:16:DC:EC:EF
X509v3 Authority Key Identifier:
keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/oM8IOquHIgB1YBWLpM1pmBbc7O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.9.0/24
IPv6:
2001:678:c::/48
2001:67c:2160::/48
2001:67c:217c::/48
Signature Algorithm: sha256WithRSAEncryption
8f:b0:28:a6:7a:bc:d6:85:2c:ff:73:49:20:df:ac:4d:5b:e9:
de:e3:2e:17:00:71:fe:10:65:12:90:60:47:58:9b:40:9c:a4:
6e:f0:dc:8d:c3:d7:24:23:cd:06:f6:bf:47:6f:db:35:61:c7:
4f:63:94:c6:bf:27:2a:b2:6e:f2:e5:33:c4:04:c2:0d:43:ed:
62:e2:5f:ef:75:ba:de:17:7c:93:ca:10:b7:2f:0b:9a:74:db:
fe:46:f2:1b:74:9e:34:64:c7:6b:6f:28:72:01:4a:b5:d2:10:
c2:5a:97:e1:bd:81:e4:30:49:21:79:c8:8c:81:da:86:c7:55:
5e:4f:63:5d:81:19:49:c9:7d:91:ee:5b:30:cb:49:71:eb:32:
d2:3c:46:a0:87:90:40:6d:8b:cf:7b:ba:8a:8a:e7:f6:48:7b:
48:ad:f6:2d:8d:ce:42:91:da:de:01:cd:ba:08:e5:25:25:74:
fb:bd:79:de:91:49:ae:b2:f1:6f:5b:16:85:40:d2:f1:b4:71:
01:92:34:32:52:02:ea:89:80:3d:ec:73:c1:c5:eb:58:7f:27:
95:42:b5:f6:a8:21:18:e9:17:e5:d1:9f:98:dd:0f:43:63:f0:
a6:f6:38:8d:ae:79:8d:d2:58:22:86:4b:27:88:fa:6b:21:9c:
09:e8:b6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:07:31 2025 by rpki-client