Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/oqcfERTcdTQtXzUloTY7K7XdhpY.roa
File: oqcfERTcdTQtXzUloTY7K7XdhpY.roa (raw, json)
Hash identifier: W6IPJdd1q7Jvl3+7RvKfeiKpZeuED1+NqQYPGw8k0XE=
Subject key identifier: A2:A7:1F:11:14:DC:75:34:2D:5F:35:25:A1:36:3B:2B:B5:DD:86:96
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BE7EFB461C4076F4964806EF321C1
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/oqcfERTcdTQtXzUloTY7K7XdhpY.roa
Signing time: Thu 02 Jan 2025 09:49:52 +0000
ROA not before: Thu 02 Jan 2025 09:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149020
IP address blocks: 194.5.96.0/24 maxlen: 24
194.5.97.0/24 maxlen: 24
194.5.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e7:ef:b4:61:c4:07:6f:49:64:80:6e:f3:21:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2a71f1114dc75342d5f3525a1363b2bb5dd8696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:25:ef:c7:61:69:74:ab:5a:46:fe:c6:a1:
6c:74:42:21:08:85:5a:01:b8:f4:40:e6:3f:3b:6d:
83:18:75:41:d3:0c:a1:da:79:96:56:96:2c:83:54:
7d:e2:37:07:ae:d2:ac:e6:8b:9a:48:17:59:c5:65:
6d:86:02:67:57:b6:46:c8:94:a0:2d:88:fa:e2:7b:
8b:31:f4:a4:9a:53:ce:b6:b7:96:83:62:ef:15:ba:
f4:a1:00:09:f6:98:b0:08:cd:b9:82:ab:f5:31:12:
f7:99:c4:40:4f:c4:29:d4:9f:f5:78:a1:9f:b0:7b:
45:9c:9b:f9:bc:87:4c:7b:5b:20:f1:5d:bd:f4:08:
ae:18:0b:27:23:b6:6a:a3:88:f0:bd:47:d8:4f:b2:
8b:c5:58:9b:24:cb:52:b3:fd:e1:3f:5c:14:96:a7:
db:89:d2:01:26:3e:44:0f:53:78:2a:51:15:6a:42:
fc:70:2a:57:76:83:5d:05:f4:f0:56:20:a8:d9:a7:
45:82:e4:99:bb:f3:91:27:0c:ff:b7:96:05:8b:3f:
59:f2:28:81:77:f2:0d:99:9d:3f:04:15:83:f8:4a:
e8:e0:c7:45:1a:17:92:2d:97:95:b1:d4:9b:8c:02:
32:41:80:44:80:be:f7:29:92:9c:bc:de:47:7c:07:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A7:1F:11:14:DC:75:34:2D:5F:35:25:A1:36:3B:2B:B5:DD:86:96
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/oqcfERTcdTQtXzUloTY7K7XdhpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.96.0-194.5.98.255
Signature Algorithm: sha256WithRSAEncryption
9b:02:ae:85:d2:73:38:96:64:be:d9:ae:d8:93:98:10:49:11:
f0:15:b5:dd:2a:f3:62:73:73:1d:e0:da:14:a8:cb:fb:39:69:
f0:6a:f2:4c:f5:ed:0c:ea:ac:d7:19:99:58:30:5a:63:75:3e:
a1:3a:3e:c0:5d:39:cb:e6:dc:99:47:5d:81:48:5d:da:65:a5:
f3:f8:36:33:d6:b9:1e:e0:f3:27:b2:4e:78:72:12:88:74:77:
44:1a:ca:42:f6:d5:21:8b:9f:f6:ac:d7:9d:2f:4d:0a:f6:2b:
db:5c:20:d4:0c:20:65:09:05:b4:63:4d:57:dc:93:69:e6:db:
88:62:9c:e6:2c:1a:44:62:9b:4a:db:05:61:5e:08:f6:3b:74:
36:10:36:ff:8a:56:3a:a2:19:b3:cd:27:f8:96:74:9c:ac:dd:
dc:49:e5:a6:0f:f3:37:7d:f9:5c:10:38:77:b3:56:6c:0c:e0:
f6:24:24:8c:17:d9:27:d3:a2:a9:75:7a:f9:da:a6:62:39:3a:
27:c2:45:9f:76:69:ca:43:38:70:48:63:cc:10:a6:6f:82:77:
7e:17:d4:71:1e:ac:14:64:e1:04:2f:92:c7:ff:95:9f:40:0d:
9c:e7:18:4e:21:0d:ba:60:33:f7:22:75:35:31:5c:c7:25:9d:
57:32:43:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:22 2025 by rpki-client