Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/ool_fZAe5nuLKuWcDWRofKyND00.roa
File: ool_fZAe5nuLKuWcDWRofKyND00.roa (raw, json)
Hash identifier: LruOtlzhlt8rQ6hVtDGvKNUa6PklcNjkaggl8dEQEhY=
Subject key identifier: A2:89:7F:7D:90:1E:E6:7B:8B:2A:E5:9C:0D:64:68:7C:AC:8D:0F:4D
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 0189CF1EEF5D03CC209A086BC1F54AC230AC
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/ool_fZAe5nuLKuWcDWRofKyND00.roa
Signing time: Mon 07 Aug 2023 08:30:58 +0000
ROA not before: Mon 07 Aug 2023 08:30:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 37.1.228.0/24 maxlen: 24
77.75.196.0/24 maxlen: 24
77.75.197.0/24 maxlen: 24
37.1.224.0/24 maxlen: 24
37.1.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:1e:ef:5d:03:cc:20:9a:08:6b:c1:f5:4a:c2:30:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Aug 7 08:30:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2897f7d901ee67b8b2ae59c0d64687cac8d0f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1f:d9:7a:2c:45:a4:c3:b3:50:54:29:5d:f8:
af:55:de:19:88:f3:86:d2:c3:9e:b5:e2:b9:81:36:
69:60:1f:c1:38:49:76:b7:f3:16:2e:1c:21:77:30:
6c:53:0a:6b:f3:3d:e9:6f:ff:1d:4f:14:36:02:b9:
4f:9b:92:b1:84:56:e9:c6:9d:b2:41:d8:a8:22:72:
2e:85:57:b0:2c:03:0d:fa:0e:41:0b:27:9f:8d:aa:
9e:7f:c7:cf:b9:0f:08:e7:0c:cb:0c:0c:4c:92:cd:
49:8b:f2:97:da:a3:70:40:4b:01:ab:73:65:48:d8:
9e:32:81:f9:3d:54:23:f7:63:6d:4f:6c:7d:b6:3f:
2b:a2:4d:10:1f:69:58:f2:c6:cb:c6:58:ad:f0:c9:
dc:aa:b8:d6:f8:6a:27:a9:49:26:ec:c0:3e:83:9c:
29:8c:2a:84:58:f2:22:c4:3c:e6:6d:33:fa:2a:e9:
21:25:4b:a0:4b:dd:c2:e6:94:b7:38:eb:3e:d3:eb:
00:f5:f1:6b:31:87:bc:ce:56:bb:a3:8d:69:d7:45:
b7:27:cf:90:b4:b3:b7:30:1d:0d:06:08:87:d9:33:
1b:09:a2:23:0a:62:39:af:b1:96:95:c0:8a:9a:b7:
f4:ce:b3:d5:d1:84:ac:de:61:1f:61:d6:52:87:f6:
13:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:89:7F:7D:90:1E:E6:7B:8B:2A:E5:9C:0D:64:68:7C:AC:8D:0F:4D
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/ool_fZAe5nuLKuWcDWRofKyND00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.224.0/23
37.1.228.0/24
77.75.196.0/23
Signature Algorithm: sha256WithRSAEncryption
11:e5:31:3f:1d:6e:45:c5:a5:21:f8:27:2b:3d:18:97:02:c8:
03:61:4a:b7:78:cb:c5:3a:57:56:be:2d:b5:4b:85:44:09:a6:
4a:df:88:71:a1:8b:f9:d3:d2:9e:44:6f:df:d3:93:7f:6b:5d:
a3:14:4c:6d:ca:e0:33:19:9e:16:c8:11:44:93:29:e7:96:cd:
c1:90:4b:07:9b:92:31:ad:80:89:8b:bb:2f:8a:3a:05:56:92:
b7:6b:6a:80:c3:eb:70:dc:75:aa:dd:26:25:54:88:1d:43:51:
ed:65:3c:ce:23:1c:d1:ad:76:50:db:3f:18:ff:13:9f:6a:a8:
8e:a5:ff:4a:40:ce:93:25:85:cf:29:74:ff:d3:55:87:61:63:
10:a7:6a:6b:cb:53:70:77:2c:19:dd:3f:80:86:a6:4b:56:9c:
b9:ac:18:ea:20:a1:dc:da:23:a5:0e:10:b9:17:41:dd:1e:29:
23:29:be:c1:9f:86:31:d6:6e:90:1d:32:3e:9f:7f:03:a1:8b:
aa:c3:35:08:52:40:b7:93:14:22:af:c4:10:98:70:0d:8a:3e:
b4:73:91:6c:42:03:e0:0a:0d:8d:04:05:50:26:02:2f:a0:75:
2d:55:c4:09:4e:4f:1e:17:52:1c:0b:9a:dc:3a:1f:81:3b:7c:
f6:4f:e2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:37 2025 by rpki-client