Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/Om1wv9kKbABhZ26Wcsp4q_OWfLk.roa
File: Om1wv9kKbABhZ26Wcsp4q_OWfLk.roa (raw, json)
Hash identifier: oXVUH9ZBbgANEdJAJeCILVApckD4agNE3Eg9le5/r/E=
Subject key identifier: 3A:6D:70:BF:D9:0A:6C:00:61:67:6E:96:72:CA:78:AB:F3:96:7C:B9
Certificate issuer: /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial: 0194236A0504739818B58AC425E09BE19EA3
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/Om1wv9kKbABhZ26Wcsp4q_OWfLk.roa
Signing time: Wed 01 Jan 2025 19:48:58 +0000
ROA not before: Wed 01 Jan 2025 19:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5414
IP address blocks: 84.20.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:05:04:73:98:18:b5:8a:c4:25:e0:9b:e1:9e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Validity
Not Before: Jan 1 19:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a6d70bfd90a6c0061676e9672ca78abf3967cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:da:d6:9a:8f:3d:3d:8f:4d:43:76:c8:f3:
30:60:21:24:14:9a:72:a9:96:6d:57:b5:fa:d1:7f:
d8:e0:71:c3:e7:a4:11:97:88:d4:f4:7e:69:8c:37:
27:a7:96:d2:4f:67:19:aa:ea:f3:9e:e2:cb:32:ce:
7f:5e:d6:e1:4c:7a:e2:6d:0d:e0:e1:92:c9:8c:1f:
b5:6c:c6:4c:c4:0d:a6:ca:36:73:c4:d1:ef:6b:a1:
30:65:85:98:69:1a:d6:c7:5f:76:30:8e:dd:04:ed:
82:0f:6f:4d:2d:7c:1f:a4:59:89:24:b8:9d:32:ca:
de:44:f7:52:76:e8:27:47:1d:d5:f3:6b:f2:37:d8:
99:72:9a:3c:d3:61:49:c2:c4:ee:63:08:70:8a:66:
5a:d5:42:c7:42:03:f1:79:d1:81:fa:72:b1:4a:9b:
71:bd:50:8e:59:a9:1e:aa:fe:7a:bc:df:fc:00:48:
63:b5:87:89:be:65:c1:0b:88:96:e6:3b:da:7c:15:
5c:04:cb:be:5f:f4:39:5f:1f:67:af:40:32:ce:90:
57:3b:36:e4:fa:4c:a8:49:d1:33:55:95:d6:0e:d2:
fa:cd:27:13:26:dd:f5:c2:77:e9:e3:b4:53:75:5f:
d4:87:05:26:6a:c2:f1:56:77:b8:26:15:5a:60:62:
b9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6D:70:BF:D9:0A:6C:00:61:67:6E:96:72:CA:78:AB:F3:96:7C:B9
X509v3 Authority Key Identifier:
keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/Om1wv9kKbABhZ26Wcsp4q_OWfLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.20.93.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ac:02:45:28:f2:82:a1:44:e8:d3:8d:0a:20:dc:31:24:bc:
69:a1:58:a0:18:bb:76:70:b3:29:57:07:79:f2:3c:6b:9b:e0:
ff:78:16:ed:2b:0b:1b:42:d4:cb:cd:8c:b8:fd:a1:e9:0c:37:
a0:82:6a:65:a0:21:a4:24:de:71:81:fe:19:4b:47:80:2c:ae:
2d:01:72:9e:b8:d3:70:30:56:69:4c:95:89:20:98:5d:3d:4b:
42:11:b7:4f:c3:dd:fb:20:f4:7d:50:94:85:1e:77:a2:89:1f:
ca:d4:e4:47:87:51:d1:d5:b1:19:49:2c:9a:28:d7:ca:ed:28:
c6:55:9e:dc:04:67:99:10:55:16:7e:7c:eb:36:10:99:01:71:
dc:b2:36:4e:fc:1c:54:66:bb:17:8f:c7:73:13:39:53:5a:b2:
8a:a3:7d:26:02:4a:44:df:89:d3:9a:b1:f2:13:c8:1d:d7:36:
e2:20:d3:46:11:32:c9:a2:c3:2b:12:77:46:2b:80:1d:09:5a:
71:22:26:f5:10:17:5a:0d:73:1b:d3:44:ec:3a:bd:7b:d9:ec:
14:e6:65:20:7b:21:d7:e2:35:6e:b3:e0:94:21:16:d5:2b:b0:
5d:cc:be:4f:e0:81:fd:66:3a:52:aa:9d:e6:34:6b:8c:ed:73:
dd:34:23:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:31:22 2025 by rpki-client