Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/OjQvRP3Qk-EfOjLrBZFcCGXmqW8.roa
File: OjQvRP3Qk-EfOjLrBZFcCGXmqW8.roa (raw, json)
Hash identifier: tuPCcx5ju8FKUrcPlz2PFkmuFSo/tuFb+mEuY/BILEc=
Subject key identifier: 3A:34:2F:44:FD:D0:93:E1:1F:3A:32:EB:05:91:5C:08:65:E6:A9:6F
Certificate issuer: /CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Certificate serial: 019421B1A7165AD7D23BAC6CFDABBFA05158
Authority key identifier: A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/OjQvRP3Qk-EfOjLrBZFcCGXmqW8.roa
Signing time: Wed 01 Jan 2025 11:47:58 +0000
ROA not before: Wed 01 Jan 2025 11:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 149.133.4.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a7:16:5a:d7:d2:3b:ac:6c:fd:ab:bf:a0:51:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Validity
Not Before: Jan 1 11:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a342f44fdd093e11f3a32eb05915c0865e6a96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:d8:02:6e:16:62:f9:fd:53:74:7c:ac:d6:
91:05:1f:d2:71:58:19:5d:51:37:d7:47:ed:6a:14:
1f:28:cb:6c:e2:ba:bf:04:61:82:9c:fe:f2:bb:1c:
93:10:af:cd:3a:f5:24:02:a2:bc:51:a1:6a:17:c5:
53:f2:38:8d:07:67:37:4a:2c:c1:4b:df:24:86:41:
bc:ff:7a:22:f5:f1:28:0a:b7:46:9d:dd:67:eb:e0:
d2:c7:9a:16:84:2f:2d:d3:74:41:56:25:96:7c:9c:
8b:66:40:b7:a5:dc:4b:74:19:74:c5:6b:4c:69:ca:
4c:c4:86:05:d4:39:7b:9a:9a:04:76:3a:53:92:9f:
2b:d5:22:bc:cb:8c:c2:cb:99:85:df:78:63:32:fa:
23:60:22:65:56:0b:ce:4b:47:3d:0e:1c:5e:e5:87:
10:df:40:3a:86:33:e9:2a:53:b6:c8:4f:38:bc:ff:
79:ce:00:82:d5:42:84:10:8e:26:f8:30:d2:1f:cd:
63:55:7a:36:dd:78:b8:74:7b:a2:13:b2:fa:e0:8e:
c5:0e:f1:96:b2:ed:62:16:94:65:fd:7b:5f:2f:f9:
d0:43:3d:d5:5e:90:7b:4a:10:4c:31:26:c4:42:1e:
24:67:21:15:b6:61:27:cc:2b:02:77:0c:b9:67:3f:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:34:2F:44:FD:D0:93:E1:1F:3A:32:EB:05:91:5C:08:65:E6:A9:6F
X509v3 Authority Key Identifier:
keyid:A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/OjQvRP3Qk-EfOjLrBZFcCGXmqW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.133.4.0/23
Signature Algorithm: sha256WithRSAEncryption
54:a0:8d:1c:bb:04:9c:5c:ff:4e:1d:5d:d7:f4:16:55:ed:a2:
d6:47:21:97:cc:0a:db:ca:70:95:05:45:59:41:5f:ec:37:a6:
ac:4e:98:a2:e7:41:aa:dd:36:9c:b7:b6:d1:94:33:da:4c:a3:
84:e3:0b:af:2e:d0:02:b9:3b:06:20:c0:a5:99:e9:7c:02:7d:
b7:84:d9:22:04:f9:08:b4:cd:b9:eb:6d:aa:9d:10:66:e7:e2:
7c:e2:e4:14:91:f8:c5:f2:9b:22:4a:c8:f3:1c:41:4d:a2:8f:
de:bc:ae:56:12:a2:f8:1c:73:35:5c:aa:9a:b0:e6:9f:d9:52:
e2:e7:77:7b:a1:20:02:ab:b3:7c:2d:4d:61:9b:f4:89:27:35:
9f:0e:8e:55:c2:78:29:e0:97:e4:3c:9f:af:1b:93:c0:84:c4:
35:de:1c:ad:c5:4c:40:80:76:46:c2:a8:87:b0:84:bc:e1:b1:
27:70:3a:b7:0e:eb:08:89:75:13:45:03:e8:6a:54:7d:9d:af:
3e:19:8f:48:90:db:ac:0d:54:85:77:b2:c7:41:8d:d9:03:1c:
46:97:99:e0:f8:b5:6e:0e:1c:0a:ed:bf:16:2d:b7:fe:23:3a:
d8:b5:e1:56:19:92:15:e6:97:5a:4b:de:5a:2d:8c:67:0e:9d:
7d:58:d3:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsacWWtfSO6xs/au/oFFYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTY5OWE1YmM2NDg3YmQyZjE3NDlkMTMzZmNhMmUzN2Zk
NGRhODgwHhcNMjUwMTAxMTE0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTM0MmY0NGZkZDA5M2UxMWYzYTMyZWIwNTkxNWMwODY1ZTZhOTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWzYAm4WYvn9U3R8rNaRBR/ScVgZ
XVE310ftahQfKMts4rq/BGGCnP7yuxyTEK/NOvUkAqK8UaFqF8VT8jiNB2c3SizB
S98khkG8/3oi9fEoCrdGnd1n6+DSx5oWhC8t03RBViWWfJyLZkC3pdxLdBl0xWtM
acpMxIYF1Dl7mpoEdjpTkp8r1SK8y4zCy5mF33hjMvojYCJlVgvOS0c9Dhxe5YcQ
30A6hjPpKlO2yE84vP95zgCC1UKEEI4m+DDSH81jVXo23Xi4dHuiE7L64I7FDvGW
su1iFpRl/XtfL/nQQz3VXpB7ShBMMSbEQh4kZyEVtmEnzCsCdwy5Zz+q3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDo0L0T90JPhHzoy6wWRXAhl5qlvMB8GA1UdIwQY
MBaAFKgWmaW8ZIe9LxdJ0TP8ouN/1NqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJhWnBieGtoNzB2RjBuUk1feWk0M19VMm9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mZDc0OTMtNzU5OS00M2I2LTg1NTkt
Nzg3YzA2MzJjZmVhLzEvT2pRdlJQM1FrLUVmT2pMckJaRmNDR1htcVc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mZDc0OTMtNzU5OS00M2I2LTg1NTktNzg3YzA2MzJjZmVh
LzEvcUJhWnBieGtoNzB2RjBuUk1feWk0M19VMm9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlYUEMA0G
CSqGSIb3DQEBCwUAA4IBAQBUoI0cuwScXP9OHV3X9BZV7aLWRyGXzArbynCVBUVZ
QV/sN6asTpii50Gq3Tact7bRlDPaTKOE4wuvLtACuTsGIMClmel8An23hNkiBPkI
tM25622qnRBm5+J84uQUkfjF8psiSsjzHEFNoo/evK5WEqL4HHM1XKqasOaf2VLi
53d7oSACq7N8LU1hm/SJJzWfDo5Vwngp4JfkPJ+vG5PAhMQ13hytxUxAgHZGwqiH
sIS84bEncDq3DusIiXUTRQPoalR9na8+GY9IkNusDVSFd7LHQY3ZAxxGl5ng+LVu
DhwK7b8WLbf+IzrYteFWGZIV5pdaS95aLYxnDp19WNO8
-----END CERTIFICATE-----
Generated at Thu Apr 10 13:28:11 2025 by rpki-client