Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/b3OVVMtpKDJInQYqC6wfpj-rA1Y.roa
File: b3OVVMtpKDJInQYqC6wfpj-rA1Y.roa (raw, json)
Hash identifier: Lyvza6TQ6bNKHI9xGfyJDbLi+A2Jo++Ry4SK3k6nPZw=
Subject key identifier: 6F:73:95:54:CB:69:28:32:48:9D:06:2A:0B:AC:1F:A6:3F:AB:03:56
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 0194266BFFE93685587042548B54AB689220
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/b3OVVMtpKDJInQYqC6wfpj-rA1Y.roa
Signing time: Thu 02 Jan 2025 09:49:59 +0000
ROA not before: Thu 02 Jan 2025 09:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15401
IP address blocks: 2.56.156.0/23 maxlen: 23
2.56.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ff:e9:36:85:58:70:42:54:8b:54:ab:68:92:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: Jan 2 09:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f739554cb692832489d062a0bac1fa63fab0356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:70:d4:a8:12:83:a5:a4:d2:7b:b8:c0:9d:
9b:41:a4:31:2c:fc:80:13:7d:0a:f9:7b:e4:d4:96:
00:41:ec:86:75:6a:57:19:97:50:9a:9a:fa:28:0a:
b9:e2:84:c0:ba:a5:e7:14:36:92:87:70:23:36:91:
6f:da:d0:19:37:0a:e7:2d:60:c3:73:e9:b8:68:65:
14:b4:ce:a5:c1:b1:d3:9d:15:9b:c9:22:fa:09:8f:
8a:77:4a:50:fe:6b:21:78:79:2f:93:af:80:43:11:
06:23:af:cf:77:e2:b5:af:e3:06:68:9c:f8:6d:ec:
83:a3:d1:4a:03:11:af:d8:b4:6f:b9:92:45:49:e5:
45:f0:e6:25:ea:44:e4:00:94:30:4a:8b:29:78:76:
05:be:ed:97:89:f8:db:eb:74:0a:af:fb:fb:cc:e2:
7d:b6:86:a9:71:30:e7:25:a6:07:d5:8f:c6:c9:19:
70:99:3e:e0:8e:75:99:03:ed:49:ae:16:d6:2d:e0:
a1:1a:5c:2f:cc:90:35:c1:b4:9e:fc:45:0b:0b:e4:
2b:ac:8d:be:07:64:72:b0:42:44:3d:83:64:c3:5f:
92:42:8c:60:f3:f6:25:65:5d:37:a3:b2:9f:2d:e3:
12:15:78:d1:7c:5b:63:3c:34:41:0c:8f:2a:5b:f3:
24:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:73:95:54:CB:69:28:32:48:9D:06:2A:0B:AC:1F:A6:3F:AB:03:56
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/b3OVVMtpKDJInQYqC6wfpj-rA1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.156.0-2.56.158.255
Signature Algorithm: sha256WithRSAEncryption
73:85:e7:c1:4c:5f:12:79:84:bb:a6:3c:4e:25:76:77:28:6d:
4a:be:80:ea:b8:db:88:a6:26:6e:2f:ae:36:d1:77:65:1b:30:
ff:20:da:a5:6c:ef:23:84:a9:0f:9d:01:b2:e8:5f:f9:04:88:
fc:bd:ae:2b:02:1f:a8:da:3c:b5:e7:57:5a:99:c6:49:08:f6:
41:b1:b9:df:8a:c2:2d:d3:0e:cf:f6:e4:2a:c8:92:fc:7b:ef:
ce:11:83:2f:0b:f9:5f:aa:cf:63:b2:e8:37:47:53:ac:f9:27:
9a:6e:12:03:5c:84:2d:f3:27:9c:6c:c1:15:81:ab:97:02:b4:
2c:78:ef:70:ef:ea:d6:24:4f:2d:bb:ae:6b:56:f3:63:6e:87:
31:7e:f4:42:aa:c6:d0:ac:16:76:44:48:18:6e:75:a2:ea:28:
cf:38:56:a3:82:49:e2:36:8b:86:23:cf:fd:a9:16:8e:05:f3:
e8:76:77:93:88:f6:66:aa:3f:91:89:a5:2f:28:45:ec:b0:58:
3e:d6:83:4c:0e:72:df:45:c0:0c:d4:1f:35:7d:b9:6e:d0:4b:
20:b4:9d:4b:ad:f2:9f:19:5a:95:32:e8:69:70:d8:12:6c:d1:
dd:53:cf:fe:43:b9:fa:4b:7d:a4:62:18:a3:84:a1:c0:ff:98:
09:74:6f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:18:53 2025 by rpki-client