Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/O_wHUsAPrNDflBZDUMtdY6xsx-Y.roa
File: O_wHUsAPrNDflBZDUMtdY6xsx-Y.roa (raw, json)
Hash identifier: ARirtfJZlvrV6Gh7ZW/gDyQsG60JpK7a/eIqEIlcaSo=
Subject key identifier: 3B:FC:07:52:C0:0F:AC:D0:DF:94:16:43:50:CB:5D:63:AC:6C:C7:E6
Certificate issuer: /CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Certificate serial: 01951379C68B55986A164CCEC264A5CC99C8
Authority key identifier: CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/O_wHUsAPrNDflBZDUMtdY6xsx-Y.roa
Signing time: Mon 17 Feb 2025 10:35:02 +0000
ROA not before: Mon 17 Feb 2025 10:35:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 91.198.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:79:c6:8b:55:98:6a:16:4c:ce:c2:64:a5:cc:99:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Validity
Not Before: Feb 17 10:35:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bfc0752c00facd0df94164350cb5d63ac6cc7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:69:2b:57:6e:81:fb:ca:a7:c4:00:67:8b:
20:b5:6d:5c:5d:c4:cc:e2:4d:b4:8a:2b:d8:cb:6d:
bb:ed:2f:fa:3b:56:49:a3:75:0f:ce:9a:48:b2:8f:
15:41:d3:39:61:70:d4:90:ef:1f:20:e4:1d:c2:6d:
d8:ac:9c:10:4d:28:fe:ed:b0:2e:3a:ed:12:95:ea:
64:f3:c9:76:8e:2d:3c:46:18:ee:56:96:44:c5:6d:
b7:1c:96:2e:8b:98:95:6d:f6:c4:48:d0:92:67:17:
74:b3:95:ea:b7:66:1c:41:16:f5:39:e3:3a:9e:a1:
7a:1d:e0:92:d2:3a:e2:da:03:29:25:6e:13:09:98:
ca:18:cd:00:e7:9d:00:bb:46:2b:f7:a1:e9:db:e3:
ba:60:8a:0c:34:27:3a:83:de:25:cc:5c:58:9d:9f:
a1:a9:77:4f:25:ec:e6:92:cc:07:05:eb:51:de:3b:
65:db:c0:cc:09:6e:85:48:e6:a8:9a:4a:5a:9c:69:
77:54:0d:94:b9:5d:b2:30:25:29:25:d5:5e:76:6f:
0a:41:f5:3a:a1:2a:17:e2:77:36:34:0c:3c:46:b0:
ce:72:9b:c8:ed:b4:12:71:80:94:aa:73:6f:82:2d:
2b:f5:2a:6e:f3:be:07:36:7f:44:be:56:b4:72:98:
3b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FC:07:52:C0:0F:AC:D0:DF:94:16:43:50:CB:5D:63:AC:6C:C7:E6
X509v3 Authority Key Identifier:
keyid:CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/O_wHUsAPrNDflBZDUMtdY6xsx-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.12.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e0:df:18:a1:94:3e:24:13:fe:71:2c:5d:cb:1b:83:69:44:
35:8d:a4:d2:ae:18:28:c9:15:a8:f5:30:bf:74:a9:dd:fd:ad:
32:b4:0b:45:13:1d:42:90:e3:47:d0:e0:bf:46:4e:fd:ba:e4:
b5:c0:93:b8:ec:a4:cc:fd:c4:f4:e7:75:0f:cf:9c:b8:cc:60:
6e:db:9e:72:30:e8:84:cf:b8:52:f8:6d:28:fa:fd:34:8f:a3:
74:d7:60:85:9c:a2:1b:a2:d4:80:58:28:7b:2d:35:0c:06:ec:
82:1b:b1:d1:81:ef:33:2f:79:af:4d:47:d2:f9:4a:3a:a7:df:
f6:ca:98:95:86:09:7b:de:d2:cd:93:3b:b3:57:81:bf:f0:46:
b9:77:79:3e:2d:fb:d9:c9:9f:e7:a2:90:ce:39:2b:aa:fa:0a:
53:1d:35:a7:c5:2d:1b:73:ff:83:1a:4d:e6:f7:11:5a:f1:11:
6f:96:1c:67:93:69:ae:8c:aa:52:53:4e:65:c1:bd:f6:c0:2d:
c9:68:3b:2a:fc:6b:be:40:22:90:f1:d5:89:2c:72:36:33:d9:
a8:d1:48:48:00:87:6d:e5:17:59:bc:65:6a:2a:89:1a:83:9f:
cc:6b:cf:82:0a:69:e7:65:79:30:7d:fc:5e:cf:45:2c:6f:e5:
1a:d6:8a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:54 2025 by rpki-client