Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/ovHMIugdzTg_bwipZYtU7WSoXAk.roa
File: ovHMIugdzTg_bwipZYtU7WSoXAk.roa (raw, json)
Hash identifier: gF8CQNR3IscVXMALoF8UJJgAvjQPh7b9Wa8roCX6mtI=
Subject key identifier: A2:F1:CC:22:E8:1D:CD:38:3F:6F:08:A9:65:8B:54:ED:64:A8:5C:09
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 0194ACAFBF0B6342FF3999717BA6491CB520
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/ovHMIugdzTg_bwipZYtU7WSoXAk.roa
Signing time: Tue 28 Jan 2025 11:33:06 +0000
ROA not before: Tue 28 Jan 2025 11:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 213.190.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:af:bf:0b:63:42:ff:39:99:71:7b:a6:49:1c:b5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Jan 28 11:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2f1cc22e81dcd383f6f08a9658b54ed64a85c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:f7:ac:b1:ad:00:43:06:df:28:5f:a7:68:
02:2e:7b:d7:b1:17:0f:b6:06:b6:1c:84:4c:db:db:
4f:59:6c:67:16:bd:31:ae:f0:0f:79:c1:30:30:9a:
9c:5b:b0:da:9f:26:77:44:72:9e:85:69:00:ec:30:
db:72:51:3b:7e:20:a1:5c:a6:0f:6b:44:0e:1c:1b:
3a:f3:6f:e3:c5:53:d9:9e:ee:d4:3f:d4:54:4d:3f:
68:51:86:9f:5f:dd:b8:24:c9:35:48:a5:69:56:38:
17:b0:52:ac:ef:d2:8e:70:18:63:37:74:1a:3a:d2:
f0:31:c8:5b:a0:4b:40:bc:91:65:27:17:d9:17:71:
98:5a:f0:6d:9a:3e:f1:09:89:d1:f7:04:6c:12:10:
f6:5d:62:48:32:af:99:ab:b0:ad:77:8d:f5:50:9a:
37:30:04:6e:ed:c1:e5:f2:c3:f5:02:7f:92:5f:8f:
4a:b8:34:89:40:e5:b0:52:10:ee:a6:ed:51:ab:51:
94:0a:43:61:8a:fd:48:38:d6:aa:c1:ec:b2:26:4c:
ac:14:c9:45:34:ae:be:d3:c3:4e:73:42:99:74:20:
f1:10:99:e4:f2:48:59:64:4e:d6:8c:ed:30:55:d5:
d9:fb:44:a3:e0:e0:cd:3f:fe:68:03:ba:3b:34:41:
a4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F1:CC:22:E8:1D:CD:38:3F:6F:08:A9:65:8B:54:ED:64:A8:5C:09
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/ovHMIugdzTg_bwipZYtU7WSoXAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b7:10:27:c7:af:3b:50:07:28:4a:41:a5:c1:1f:1b:3c:11:
47:7c:8d:12:2b:ac:e7:6b:bd:23:6a:e6:e8:fa:7b:a7:bc:95:
17:72:9f:8a:75:04:5c:06:cb:9b:39:66:7a:ca:26:c9:8e:46:
cd:be:3e:33:95:36:d8:e3:e7:fb:e9:43:b7:b0:9e:27:13:bf:
8a:fc:55:00:45:70:b3:ac:2e:56:03:3b:fc:6f:6c:c3:26:9f:
96:fd:b6:7f:65:7a:a6:aa:15:34:ef:a0:b3:e3:52:30:58:72:
46:8e:95:3f:27:0a:0a:d2:30:06:dc:03:d1:7f:b3:e5:b2:d7:
ce:b3:cb:87:32:2e:4e:c1:ef:9c:18:dc:b8:7e:41:b7:a1:eb:
09:14:f1:0c:2a:9e:b4:c3:d8:77:6f:e9:23:45:9b:ba:e5:65:
65:7e:ee:ec:5c:de:4f:7a:05:8c:82:39:3d:51:57:29:cb:ed:
fa:ea:7c:84:d9:1b:99:dd:5f:3c:14:30:8c:56:af:77:a1:4e:
3a:f1:6c:d9:53:72:a7:cc:53:41:be:6d:93:49:8e:5f:80:2d:
6a:87:6f:99:ac:54:5e:11:b0:93:82:0d:48:fb:34:dd:16:79:
f7:b3:9c:55:10:d5:20:41:97:e6:a9:7f:4e:86:69:13:83:9c:
89:bb:2c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:22:09 2025 by rpki-client