Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oJmgUY32Grw9qbU62felp8DiHBY.roa
File: oJmgUY32Grw9qbU62felp8DiHBY.roa (raw, json)
Hash identifier: TVKhhMHG6ReHd8r6WZs1OrIGIcToEISxqByK8bbvCpc=
Subject key identifier: A0:99:A0:51:8D:F6:1A:BC:3D:A9:B5:3A:D9:F7:A5:A7:C0:E2:1C:16
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019422200B4F3FCFBFC6F14D85E8FB66B026
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oJmgUY32Grw9qbU62felp8DiHBY.roa
Signing time: Wed 01 Jan 2025 13:48:32 +0000
ROA not before: Wed 01 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200461
IP address blocks: 178.18.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0b:4f:3f:cf:bf:c6:f1:4d:85:e8:fb:66:b0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a099a0518df61abc3da9b53ad9f7a5a7c0e21c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:24:2f:75:fe:d8:42:46:43:09:74:2a:81:
8a:8f:76:71:be:46:12:f7:97:8f:a9:2f:4b:dc:07:
36:22:70:72:5b:46:68:fe:ec:ae:6f:2e:83:be:9b:
a4:d7:73:ae:df:b4:4d:52:24:69:1a:dc:2f:a3:86:
cd:89:26:54:43:18:c2:25:b4:d6:41:5d:dd:5f:ad:
cd:03:e2:18:66:5f:81:72:b2:76:c1:40:7e:f3:93:
9f:30:df:04:5d:fd:1e:cc:26:e8:fe:9b:bd:fc:75:
4d:c2:47:a6:2e:d2:90:bf:6b:47:68:06:18:20:d7:
da:73:e2:db:39:8e:d3:6f:de:33:dd:7e:28:d5:75:
4c:de:b7:d7:c5:47:ed:b6:1f:6b:c5:cc:e7:a0:8b:
0e:e1:d1:05:a1:d0:c1:16:5d:27:ff:68:96:07:b7:
0a:2d:f6:45:fb:e6:9a:18:ab:a0:cf:28:0c:02:16:
21:90:42:aa:7e:a7:d3:3f:91:34:d2:17:bb:cd:f8:
a1:13:5d:8a:2c:cf:17:76:5c:d5:6a:6b:f6:d6:4f:
47:6d:0c:97:9b:9a:1b:ad:e9:0c:82:ad:c3:f2:de:
65:03:47:e2:dc:a8:11:d7:47:99:8b:4a:31:97:d3:
43:20:3b:da:e6:4f:d1:3e:10:72:3f:b1:1f:ac:81:
75:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:99:A0:51:8D:F6:1A:BC:3D:A9:B5:3A:D9:F7:A5:A7:C0:E2:1C:16
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oJmgUY32Grw9qbU62felp8DiHBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.148.0/24
Signature Algorithm: sha256WithRSAEncryption
73:9d:88:bc:1f:4e:1d:cf:f2:34:2e:3e:97:15:71:85:22:7e:
42:0f:ee:92:79:3c:32:39:ec:79:08:a3:87:d6:0e:cd:2e:70:
50:d7:44:ee:02:18:f9:03:41:1e:f5:bd:bf:dd:5f:75:41:20:
e3:0c:b0:74:a3:3a:77:61:10:46:5d:e1:67:48:91:1e:64:97:
3e:59:ec:9a:5d:a4:73:8e:01:34:da:c3:3f:10:a2:42:b5:13:
68:6e:7c:9c:0a:55:36:29:37:13:ae:65:9a:ae:3e:4d:93:1f:
6f:e5:c0:b6:97:66:66:29:94:5c:25:4c:5a:5e:da:63:6e:83:
25:1a:37:b1:8d:18:d1:52:9c:88:a7:63:22:5f:ea:0a:97:94:
9f:62:6c:84:05:98:68:53:a6:c3:08:bb:a0:fa:ca:f0:46:90:
74:9c:98:38:d1:a6:0e:ce:54:4e:95:a8:10:15:aa:5c:15:2f:
3b:39:5d:0b:42:b3:cd:6a:70:ad:a4:9e:87:d6:86:f6:f6:69:
a9:da:11:2d:09:f5:cd:bc:95:e6:5f:2f:a5:db:d3:95:c1:1e:
af:10:c2:7d:2d:c9:aa:04:e6:79:e2:5c:45:c6:d4:8a:ef:38:
fa:ea:b0:9a:97:91:54:a7:98:c1:05:13:71:9d:15:17:aa:35:
07:df:98:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:16:07 2025 by rpki-client