Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/rOCaw2eTmV3OLX-yHVMD37GDLY4.roa
File: rOCaw2eTmV3OLX-yHVMD37GDLY4.roa (raw, json)
Hash identifier: aDjbhAYU+6RcmFuuQ80iONy4ublVqaoPY6FTbV63e9k=
Subject key identifier: AC:E0:9A:C3:67:93:99:5D:CE:2D:7F:B2:1D:53:03:DF:B1:83:2D:8E
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2E347F279C29F82D3D21CC9F2C7E2
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/rOCaw2eTmV3OLX-yHVMD37GDLY4.roa
Signing time: Thu 02 Jan 2025 01:48:10 +0000
ROA not before: Thu 02 Jan 2025 01:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 85.254.64.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:e3:47:f2:79:c2:9f:82:d3:d2:1c:c9:f2:c7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ace09ac36793995dce2d7fb21d5303dfb1832d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:aa:c5:5f:8d:ac:e9:ed:d8:ba:ab:a8:28:
b2:a1:b9:2e:e6:35:40:e4:b3:4a:8f:58:61:29:e0:
5c:93:bf:94:f0:5d:1c:92:08:da:8f:fc:fc:0d:0b:
e0:ee:6a:b3:d2:e5:3b:ba:f7:2f:2b:2e:98:9b:78:
6d:6e:5a:88:f4:59:0e:d6:e8:97:ab:a0:a5:df:cc:
1b:3b:a2:99:c7:38:35:7a:a7:7d:83:2e:ba:0f:1a:
22:d7:92:ab:da:c0:4e:54:8a:06:6f:13:7b:0b:04:
19:37:0e:27:e4:9e:65:d0:7d:57:b4:21:ad:35:04:
70:df:26:27:cf:ad:c9:fd:9c:20:3c:81:8d:e5:60:
3b:aa:40:15:c8:76:c1:43:b0:4c:b8:05:1c:48:24:
9b:09:4c:8e:dd:d2:f2:de:47:c1:7e:98:53:13:b1:
67:82:b8:0a:72:33:c0:ea:46:34:28:dc:22:7a:9d:
56:2e:97:f8:1e:09:dd:81:50:b6:f8:1d:c0:c2:87:
ef:4f:01:2d:5a:df:00:8c:c4:2e:d9:f6:09:c4:37:
30:5b:51:a6:92:6c:bf:ff:af:ce:af:95:b9:f6:77:
9a:39:1b:f8:12:87:14:e7:94:b2:af:32:0a:7f:48:
6a:ba:60:51:c9:f6:65:d7:87:58:d9:1f:15:86:67:
4a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E0:9A:C3:67:93:99:5D:CE:2D:7F:B2:1D:53:03:DF:B1:83:2D:8E
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/rOCaw2eTmV3OLX-yHVMD37GDLY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.64.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:9a:76:07:01:e2:02:fb:c2:4b:7f:b7:f9:d2:57:ca:5f:b9:
70:a6:d7:73:00:21:73:87:11:25:96:11:10:32:7e:87:57:f4:
00:73:4d:86:d8:62:f8:ab:6b:0b:61:60:c9:04:62:e6:4f:bf:
90:4e:21:59:a9:12:08:3d:94:88:9a:7a:3e:42:b9:73:4c:ea:
f4:51:4e:d0:28:3c:50:9f:b0:38:54:f9:89:ea:70:b9:21:c3:
4b:af:6c:13:7b:31:9b:8e:34:1c:68:1c:67:4f:ef:ac:ca:4b:
c3:d8:61:27:e6:31:fc:b1:45:e5:75:f2:8b:87:bd:6a:0f:f5:
9c:07:88:2c:1a:1a:dc:33:cd:6a:5e:86:ef:29:eb:cf:28:36:
b9:32:50:64:49:b7:5f:82:f8:7c:37:e2:80:f1:07:da:32:40:
1f:24:3b:24:71:04:9a:e5:a7:8c:00:23:fe:5e:e5:c9:ab:8c:
80:30:41:c4:2b:5e:3e:64:04:f3:ac:0e:45:96:02:de:e6:f7:
75:18:c4:10:6f:0a:ad:40:a6:3f:7a:1d:34:53:18:e7:d5:d6:
17:8c:80:63:9f:4a:38:ba:56:9e:74:96:f2:d2:d7:84:ff:38:
54:74:3c:8e:a8:57:5f:e2:48:10:ba:80:b5:25:7e:53:3d:04:
0b:c9:dc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:52 2025 by rpki-client