Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/ojpo3C_o4XkLEMUun-AN5dsCn0c.roa
File: ojpo3C_o4XkLEMUun-AN5dsCn0c.roa (raw, json)
Hash identifier: KD+YKxAdab+/MSSFUGcDgdX/M8ezVTZqmPoRZBNH630=
Subject key identifier: A2:3A:68:DC:2F:E8:E1:79:0B:10:C5:2E:9F:E0:0D:E5:DB:02:9F:47
Certificate issuer: /CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
Certificate serial: 01942369B2A4575F2622D4243EFFADA5D972
Authority key identifier: E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/ojpo3C_o4XkLEMUun-AN5dsCn0c.roa
Signing time: Wed 01 Jan 2025 19:48:37 +0000
ROA not before: Wed 01 Jan 2025 19:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48314
IP address blocks: 91.214.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:b2:a4:57:5f:26:22:d4:24:3e:ff:ad:a5:d9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
Validity
Not Before: Jan 1 19:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a23a68dc2fe8e1790b10c52e9fe00de5db029f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:51:37:d4:46:ed:22:cf:8b:ae:0a:dc:e1:
04:b4:bc:fb:6d:1d:6e:0a:cf:4a:5c:f0:d8:2b:9b:
d7:f6:68:df:5e:ea:e9:88:da:19:bd:67:2a:49:67:
ea:80:64:69:24:e4:2a:05:c3:78:ad:6f:aa:71:1a:
c6:d6:72:0e:d6:90:f8:f7:76:41:83:0b:f8:f1:a3:
fb:1d:fa:15:e1:87:f9:d8:d5:41:30:b1:14:d1:3e:
17:87:73:39:ee:ad:61:c4:1a:5c:4c:6c:06:a6:83:
21:2c:76:4c:dd:9e:de:b5:6a:9a:d1:fa:63:d2:10:
bc:8d:bb:c3:78:61:ad:e9:0f:d6:2f:45:f3:79:67:
db:d3:10:c7:b7:f4:26:b7:de:e5:4f:58:ef:5c:e1:
99:2f:31:9c:63:59:c0:87:82:4b:26:b7:40:ce:fb:
44:15:bf:9c:ed:1d:17:21:54:49:f3:86:fb:40:cb:
94:e8:9d:56:d4:00:c8:b5:71:b3:20:72:ac:69:ae:
62:2b:6e:a5:bc:26:a1:4d:9f:5e:a0:ad:61:fe:f1:
6c:5e:38:20:e7:a2:9f:08:6d:d8:2c:35:f8:37:9f:
48:f5:31:fe:3c:03:4a:5d:f6:74:06:93:a7:38:83:
87:fc:c3:07:4d:40:e2:18:d8:0e:93:02:1b:1e:77:
ae:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3A:68:DC:2F:E8:E1:79:0B:10:C5:2E:9F:E0:0D:E5:DB:02:9F:47
X509v3 Authority Key Identifier:
keyid:E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/ojpo3C_o4XkLEMUun-AN5dsCn0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.8.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:a7:48:92:9e:bc:93:57:e1:52:86:dd:3e:cf:00:18:53:c8:
f0:d7:91:70:5d:8d:19:b2:fb:55:45:d1:20:99:29:43:9c:7a:
bf:ca:28:d2:88:74:ac:e6:1d:85:bd:6d:8d:bc:a2:18:ce:e3:
8a:29:54:97:54:68:e8:e0:5d:eb:19:9b:de:12:b3:a8:68:62:
45:b8:0a:0c:d7:2f:23:53:4e:22:94:82:f2:b2:44:82:a8:ea:
22:1c:8c:d2:9e:73:b6:66:e8:65:e9:c2:f9:3e:bf:f2:3d:6a:
07:54:6d:17:42:61:70:2c:57:b5:5e:5b:a9:bd:aa:32:6c:a1:
0d:d4:1f:7d:6d:15:25:db:b4:8e:1e:9c:5c:77:ad:df:f1:27:
e7:cd:27:2e:47:ae:cf:46:cf:d8:d9:c7:a4:c5:ae:e6:8d:a3:
a6:e3:87:4a:97:0f:12:56:e2:65:e9:a7:43:42:c4:3d:ea:4e:
f6:e2:08:5b:fe:26:78:13:3a:7f:85:6a:f5:d9:c5:eb:a1:ba:
15:0c:af:fd:b8:63:a4:d2:66:a6:a1:12:90:ab:a1:34:fd:bb:
60:49:18:47:1a:65:6e:5b:5c:0a:07:9a:0a:dc:da:71:67:89:
80:11:5f:bb:5d:33:60:34:35:e5:8a:41:5a:b4:5f:9e:69:3e:
63:de:2c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:53:16 2025 by rpki-client