Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ob1HO1zcQrG_L0eq-nhBwLCg0_s.roa
File: ob1HO1zcQrG_L0eq-nhBwLCg0_s.roa (raw, json)
Hash identifier: w6/mUbwlU4E8I8a1hfglboA4ymsu+XqwZ8qhfxIZ1n8=
Subject key identifier: A1:BD:47:3B:5C:DC:42:B1:BF:2F:47:AA:FA:78:41:C0:B0:A0:D3:FB
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB9C7FA198436C1616F951F6851884
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ob1HO1zcQrG_L0eq-nhBwLCg0_s.roa
Signing time: Wed 01 Jan 2025 17:48:22 +0000
ROA not before: Wed 01 Jan 2025 17:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198427
IP address blocks: 5.182.112.0/24 maxlen: 24
77.242.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9c:7f:a1:98:43:6c:16:16:f9:51:f6:85:18:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1bd473b5cdc42b1bf2f47aafa7841c0b0a0d3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5b:b6:d6:26:30:6f:f2:ea:37:91:a0:83:77:
6a:2f:7e:87:7e:33:c6:ee:21:c9:b0:0d:41:3c:69:
ce:9e:96:4a:f6:cf:3e:01:9c:1a:89:84:63:6f:f2:
fd:a6:d4:ba:b6:a3:b9:36:3f:c3:a4:de:28:e5:7e:
53:cd:fb:ad:2f:3a:31:78:fa:a0:3d:8b:e3:08:af:
4c:f4:19:55:d7:cc:68:93:05:ac:b4:25:f0:c1:3a:
f2:d9:47:bc:0e:00:f0:f9:db:f5:63:08:c3:09:e8:
af:91:3e:e2:7b:cc:8b:28:ac:fc:de:7e:50:d8:b4:
3f:90:af:c0:1b:a3:68:f9:c6:63:01:b9:6a:a2:06:
0d:09:e2:4e:a9:71:e0:66:67:bc:ec:eb:6e:7b:ad:
61:6f:92:c9:f2:2f:89:09:07:e1:80:6d:25:79:ae:
9d:33:2a:b6:38:41:38:e6:21:f7:30:b6:d5:bf:38:
74:71:06:ec:c1:ef:a8:76:cd:fb:d2:69:80:96:18:
28:3b:f9:5a:2e:96:74:0b:4a:f4:0a:7a:26:48:72:
b4:99:4e:b0:91:d2:9e:08:49:4a:5b:42:7d:21:36:
16:be:5c:e3:c4:00:19:4d:0f:30:7f:16:05:20:75:
f8:f6:e5:d5:3f:27:dd:db:d6:57:e2:5a:6b:56:9b:
8d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BD:47:3B:5C:DC:42:B1:BF:2F:47:AA:FA:78:41:C0:B0:A0:D3:FB
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ob1HO1zcQrG_L0eq-nhBwLCg0_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
77.242.154.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f6:22:41:a2:2b:a3:66:62:9d:2b:fd:a8:a5:c8:52:b5:0a:
e0:10:a2:15:1e:30:77:d5:09:3e:5f:c5:c9:d5:a1:8c:01:fe:
46:8c:71:b2:a2:52:6f:a2:2a:37:d1:5e:f0:61:32:a1:34:e4:
19:ae:dd:93:87:f4:6d:5e:6e:ee:5b:59:32:5a:86:8e:3a:f5:
b2:d5:32:32:86:3d:02:15:e2:d9:56:da:31:fd:ea:57:16:1b:
86:c0:c8:44:c2:8c:ea:8f:45:5a:6c:0f:5c:ca:4e:11:ad:b3:
23:a9:9c:21:75:58:36:5b:f4:d0:70:26:cc:93:96:43:a5:7b:
e8:3e:71:46:83:3a:cc:ad:3d:8f:eb:c2:bc:26:b2:62:b9:45:
54:b3:1a:d5:f1:7c:98:31:5e:1b:c7:9e:16:06:46:6c:23:ea:
57:80:fe:34:aa:13:ef:e9:08:aa:eb:b1:09:e8:57:e7:0b:1a:
d5:51:74:ed:3e:5f:4d:dd:39:18:02:d0:46:03:93:84:63:da:
7f:e2:6f:2f:6d:23:91:07:d6:80:f7:6e:9c:c5:0a:10:5b:75:
c2:e0:f9:ab:16:84:24:a7:c7:b7:5b:66:49:13:3b:97:83:eb:
1e:65:c4:56:74:51:8c:41:45:48:27:e7:2b:3c:df:01:98:70:
3a:fc:c4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:29 2025 by rpki-client