Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/Oioxvop9FV5K4rtOSvh02jeAj-g.roa
File: Oioxvop9FV5K4rtOSvh02jeAj-g.roa (raw, json)
Hash identifier: 1Oax9rdfDuKch357rIzJmOSBUOYvQbkuoDRF8in9c8A=
Subject key identifier: 3A:2A:31:BE:8A:7D:15:5E:4A:E2:BB:4E:4A:F8:74:DA:37:80:8F:E8
Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e
Certificate serial: 0194274790439D86A1467BC1C0D43E381C0F
Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/Oioxvop9FV5K4rtOSvh02jeAj-g.roa
Signing time: Thu 02 Jan 2025 13:49:48 +0000
ROA not before: Thu 02 Jan 2025 13:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 145.43.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:90:43:9d:86:a1:46:7b:c1:c0:d4:3e:38:1c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e
Validity
Not Before: Jan 2 13:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a2a31be8a7d155e4ae2bb4e4af874da37808fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:66:f1:a3:c3:f7:3c:28:e0:25:79:6f:55:7e:
6e:3f:35:06:37:50:e2:6b:b7:04:4b:46:30:14:c1:
ee:fd:78:14:9a:2e:12:91:c3:bc:92:9c:76:97:61:
89:4a:e3:75:35:71:65:87:00:f9:66:f4:5f:ef:f8:
de:b4:36:3c:b6:07:a2:d4:42:7a:53:e5:6f:39:91:
25:3a:dd:d3:f4:e1:48:94:34:50:c2:f3:f3:dc:c7:
cd:6e:d7:b9:44:ae:85:e9:f6:2f:09:95:80:25:6b:
1a:1d:f1:85:62:05:fe:81:1b:2a:8e:13:c6:9c:99:
88:c4:74:77:c4:82:8c:8b:77:33:c8:1c:fd:6f:8b:
ab:4f:c8:cf:4e:01:35:3d:55:8e:bf:74:97:0b:99:
ab:01:c6:f3:68:e3:b0:55:37:14:90:d2:86:09:80:
80:3d:e7:0a:c7:24:33:4b:c0:ff:0f:07:30:80:3e:
e2:af:11:69:70:1a:ee:63:ae:9e:af:82:c0:3e:b3:
6c:02:ce:83:e2:33:14:6a:f0:af:d7:15:94:8e:b4:
71:35:47:22:a4:45:7b:10:52:61:95:51:b1:af:07:
a4:3b:f2:78:b6:7d:01:4c:30:c0:11:f7:83:89:33:
06:0e:2f:fd:c0:b4:ce:7c:f8:36:a6:2c:9d:4f:1e:
7f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2A:31:BE:8A:7D:15:5E:4A:E2:BB:4E:4A:F8:74:DA:37:80:8F:E8
X509v3 Authority Key Identifier:
keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/Oioxvop9FV5K4rtOSvh02jeAj-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.43.244.0/22
Signature Algorithm: sha256WithRSAEncryption
62:ef:b0:ca:3e:a4:38:83:f3:df:91:c4:06:89:46:90:05:6e:
cd:bb:a4:f7:b9:23:d0:26:8b:4d:c0:69:28:d9:19:46:92:91:
1c:b4:5f:bc:46:64:88:4f:8c:3b:f1:42:d1:d7:df:c0:b4:05:
7a:c6:07:bc:67:33:24:9c:d7:31:77:df:49:74:a3:c5:32:c6:
21:42:3a:f7:8e:ed:6b:c8:de:e7:85:c0:53:08:f9:2d:e0:57:
bf:8e:03:b1:64:f7:04:b3:f0:c4:d9:f9:62:c4:2e:34:86:81:
16:00:34:43:dd:48:df:22:ce:5f:44:1c:f9:ec:54:86:ac:e6:
45:ca:7e:80:7d:d8:6e:df:46:aa:f9:99:47:b6:8c:57:72:de:
46:9a:e0:6d:1c:00:42:24:d2:fc:32:eb:27:bf:91:e1:06:81:
b4:1a:15:8f:b1:45:b8:23:ce:6f:30:2c:4e:64:a0:73:c9:c7:
64:29:02:bf:3f:8a:52:49:8e:36:eb:32:90:e9:1d:64:ff:aa:
ee:78:a0:44:8e:39:01:0a:1a:cb:e8:4e:d3:c4:00:09:89:41:
db:b6:ac:f7:ea:1d:de:62:e0:a1:ed:aa:9c:c3:95:70:32:d5:
4a:e7:74:fd:32:2c:82:02:9c:4e:01:3f:c8:76:04:f4:e3:bf:
92:a3:6c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:00:40 2025 by rpki-client