Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/oM5327UG2mWTAGTtGcOz-JmJhgg.roa
File: oM5327UG2mWTAGTtGcOz-JmJhgg.roa (raw, json)
Hash identifier: h1ZmVFDbPqTV4L0/Cf60sFkuro5CPdVUS191+lmyuUs=
Subject key identifier: A0:CE:77:DB:B5:06:DA:65:93:00:64:ED:19:C3:B3:F8:99:89:86:08
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01958459E9C833C3259CBAB1B3F05937687B
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/oM5327UG2mWTAGTtGcOz-JmJhgg.roa
Signing time: Tue 11 Mar 2025 08:37:19 +0000
ROA not before: Tue 11 Mar 2025 08:37:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33394
IP address blocks: 83.125.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:59:e9:c8:33:c3:25:9c:ba:b1:b3:f0:59:37:68:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Mar 11 08:37:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0ce77dbb506da65930064ed19c3b3f899898608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:bc:2e:6e:ff:fd:39:f7:40:b7:6b:e3:b1:
a3:1d:ea:4c:5c:e4:08:f6:b8:e4:f2:7f:2e:88:68:
48:52:25:5d:e5:fe:c9:2e:45:46:2e:f7:87:2d:24:
14:21:c5:3a:6c:28:68:f9:06:d3:d5:23:0c:0d:14:
98:a8:e8:13:ec:b4:c7:60:b3:6d:24:57:45:e1:7b:
46:3c:09:0e:04:63:77:ac:56:5f:17:54:f6:dd:78:
06:5a:26:2c:56:e4:7e:9e:41:d7:2f:a9:3c:59:6b:
bf:db:8c:8e:b2:83:6a:17:eb:61:df:3f:b3:35:f3:
e7:14:aa:f5:30:eb:74:f8:f3:60:88:08:f8:48:0e:
69:8e:2f:29:35:18:5f:2b:d4:c2:1f:1e:3c:1e:2d:
c7:0d:ab:ec:d1:a9:a6:95:6e:a3:2c:c8:a1:99:80:
28:85:74:55:f9:b2:0e:85:b9:e3:5c:5b:d9:74:1c:
72:b6:55:1b:2e:62:d6:84:45:36:96:55:97:b6:d9:
53:7c:e9:c3:f3:0a:89:c9:6a:97:a0:ef:7a:91:5c:
6a:ec:36:52:00:f9:b3:81:c9:e1:1e:98:83:62:80:
f7:68:53:1b:e9:34:ee:67:4b:c5:9e:e0:3c:55:0e:
19:87:f1:03:5f:5f:65:45:dd:00:dc:a9:09:c5:f0:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CE:77:DB:B5:06:DA:65:93:00:64:ED:19:C3:B3:F8:99:89:86:08
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/oM5327UG2mWTAGTtGcOz-JmJhgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.125.25.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:25:73:00:45:92:50:c6:b3:32:2f:73:8d:a3:bb:78:40:5b:
31:a4:e7:08:17:36:41:fc:57:d2:9d:e1:f1:79:3c:01:2e:a9:
91:74:7a:b1:e8:cd:93:ee:69:7c:44:d7:19:fe:16:d1:14:d3:
3b:3b:08:2c:0d:1d:31:27:90:45:70:b2:69:16:dd:b1:45:64:
86:28:40:fa:34:3f:67:3e:60:ae:8d:94:3f:13:c3:7f:b7:4c:
7e:ed:ab:b5:a2:8b:b1:5f:ca:87:f7:18:b9:4c:be:30:70:78:
28:be:1f:14:9a:a4:91:71:a1:b2:80:d6:e1:c6:5e:b4:57:85:
3e:75:21:37:85:86:72:7e:39:05:6e:e8:3f:a4:97:bb:43:bf:
5b:5c:ed:fc:fc:e5:86:f7:0a:a7:e7:cb:68:36:fa:bb:92:82:
70:91:37:1d:84:a4:0e:ca:4f:e9:1a:a0:27:e0:70:22:41:74:
b0:ab:ef:d0:cd:2c:11:4c:75:81:8e:2c:34:c2:79:a2:e4:99:
02:be:39:c2:ed:c1:e4:23:06:15:43:9f:2a:63:5b:74:e2:b8:
47:ac:6b:bb:75:1e:c7:da:44:48:d1:f6:b5:d6:94:8e:8d:23:
68:2c:b1:ec:99:00:28:25:9d:34:38:6d:2b:15:d3:2c:d7:fd:
ee:e7:c5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:33:42 2025 by rpki-client