Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/279038-f7d2-4a67-bd7f-d78d8d5af47d/1/oynqRGG642auAVhqxFRhSsLf1vg.roa
File: oynqRGG642auAVhqxFRhSsLf1vg.roa (raw, json)
Hash identifier: o1E1WXoLYEUGfoePzkPiNSPBBd/Fte4teGqKq+3SoEw=
Subject key identifier: A3:29:EA:44:61:BA:E3:66:AE:01:58:6A:C4:54:61:4A:C2:DF:D6:F8
Certificate issuer: /CN=c7d7a88bc6fae951549590f77a14e6288523091d
Certificate serial: 0185DB6B00B751236F865CE10665F104B4A8
Authority key identifier: C7:D7:A8:8B:C6:FA:E9:51:54:95:90:F7:7A:14:E6:28:85:23:09:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9eoi8b66VFUlZD3ehTmKIUjCR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/279038-f7d2-4a67-bd7f-d78d8d5af47d/1/oynqRGG642auAVhqxFRhSsLf1vg.roa
Signing time: Sun 22 Jan 2023 21:38:20 +0000
ROA not before: Sun 22 Jan 2023 21:38:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60081
IP address blocks: 176.100.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:db:6b:00:b7:51:23:6f:86:5c:e1:06:65:f1:04:b4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d7a88bc6fae951549590f77a14e6288523091d
Validity
Not Before: Jan 22 21:38:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a329ea4461bae366ae01586ac454614ac2dfd6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9e:ad:e3:b0:d1:2f:e3:7a:b8:91:f8:19:54:
54:1c:ea:95:4a:6b:b6:72:c5:2c:4c:99:77:56:14:
44:c6:b2:63:06:b7:db:b1:de:ae:09:99:9b:d2:e7:
f2:a5:4c:c4:ed:47:9f:74:9d:e3:ae:83:29:12:ce:
28:38:ab:75:7e:4e:ed:f7:e0:9c:11:5c:1b:98:62:
9d:48:c4:e9:8b:13:3d:f9:d9:75:64:21:0a:94:db:
1f:97:c0:7a:3d:8b:99:1e:c2:ad:c1:a5:35:0e:00:
7c:da:44:7a:c8:a2:8c:a8:a4:73:04:ef:ae:66:1a:
a4:ad:dd:2c:01:17:c5:9a:cf:fe:a6:10:20:42:6a:
20:8b:3e:30:b3:73:19:4e:ee:c2:79:32:bc:6f:00:
74:7c:58:0d:de:01:33:4a:a3:09:f8:b8:e5:cf:2d:
02:db:b6:5d:61:52:8a:30:af:7f:99:a0:9a:0e:b7:
36:44:03:06:f5:36:47:88:ed:40:b2:f2:7b:08:8d:
25:27:d6:5b:45:a0:a9:32:1d:e6:77:61:ea:f5:f6:
38:91:42:5f:b9:63:ac:75:b8:53:e9:21:b6:36:b3:
9c:a2:66:96:5b:68:63:e7:c9:54:05:66:68:a7:81:
10:4f:97:32:19:c5:f4:e6:33:13:0a:4d:73:95:17:
f8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:29:EA:44:61:BA:E3:66:AE:01:58:6A:C4:54:61:4A:C2:DF:D6:F8
X509v3 Authority Key Identifier:
keyid:C7:D7:A8:8B:C6:FA:E9:51:54:95:90:F7:7A:14:E6:28:85:23:09:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9eoi8b66VFUlZD3ehTmKIUjCR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/279038-f7d2-4a67-bd7f-d78d8d5af47d/1/oynqRGG642auAVhqxFRhSsLf1vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/279038-f7d2-4a67-bd7f-d78d8d5af47d/1/x9eoi8b66VFUlZD3ehTmKIUjCR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.40.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:58:b2:b4:29:fa:18:4e:57:f2:de:99:2e:39:0b:f8:03:81:
dc:78:4e:43:a0:38:f9:37:f9:b2:10:41:59:c8:6d:03:ab:29:
05:17:e9:bb:d7:11:d3:49:1a:ed:44:3d:02:bf:33:9e:fb:bb:
21:06:b2:e9:54:69:80:6f:0f:cf:20:bd:f6:f7:3c:5b:75:5b:
ff:c0:91:49:52:c2:ae:9b:c4:e7:7a:b7:d4:cf:45:93:21:9e:
c1:11:dd:77:37:3c:84:ea:a6:90:8b:a5:14:c1:4d:a7:71:df:
34:a6:a2:32:7a:26:8a:54:b0:2d:44:3f:79:3c:0f:e5:02:e7:
4c:c5:7e:43:5f:9d:88:d0:af:25:24:73:8f:85:a6:fb:1e:1a:
44:e6:f6:77:d9:a2:47:d3:46:b9:78:8f:94:3f:c7:07:3c:8b:
7e:98:46:32:01:e8:a7:b0:1b:d7:e6:43:a7:36:19:fb:a6:57:
9a:b6:4c:a9:84:40:2f:4c:8e:54:cf:86:be:69:87:e5:f6:31:
af:be:f2:a9:13:73:60:f7:29:19:a4:ba:eb:4b:d7:61:26:49:
d0:97:79:2d:78:a1:03:6d:56:b2:a4:c9:40:60:c8:95:87:85:
48:b7:36:57:3f:0e:48:1f:90:d1:98:95:a0:1c:4d:63:9a:86:
a9:ba:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:25:26 2025 by rpki-client