Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/OJmLUcdGyKqyreRJA04sZVowZg0.roa
File: OJmLUcdGyKqyreRJA04sZVowZg0.roa (raw, json)
Hash identifier: ZPcGNQNPGXt7sqvYIqkF3ZoSuhuiF050QsXqHbGtgGo=
Subject key identifier: 38:99:8B:51:C7:46:C8:AA:B2:AD:E4:49:03:4E:2C:65:5A:30:66:0D
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 0194266BE9A25B86CE50F58456A1DCDD572C
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/OJmLUcdGyKqyreRJA04sZVowZg0.roa
Signing time: Thu 02 Jan 2025 09:49:53 +0000
ROA not before: Thu 02 Jan 2025 09:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48053
IP address blocks: 194.0.4.0/24 maxlen: 24
2001:678:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e9:a2:5b:86:ce:50:f5:84:56:a1:dc:dd:57:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: Jan 2 09:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38998b51c746c8aab2ade449034e2c655a30660d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:00:c4:0c:ad:29:23:63:da:e9:cc:3e:83:
30:50:54:66:4a:ae:f0:44:0f:06:4c:3f:4a:3d:2a:
c0:d7:df:a0:cd:42:0b:99:04:79:84:ae:78:0a:cb:
33:91:a5:b6:ea:c9:4f:40:52:49:05:85:55:f2:be:
e4:6a:66:db:ad:b1:d4:7e:61:f3:85:78:fb:86:9e:
20:73:46:c5:0f:8c:81:06:50:77:82:49:f2:54:a4:
a4:de:d5:1a:fe:4a:95:b8:c0:26:f5:47:75:a1:4e:
e7:58:93:da:62:7a:1b:97:7d:06:6c:76:93:4d:84:
9c:51:08:e8:44:ef:08:77:e4:25:90:d2:8e:f9:a9:
06:19:12:0d:38:b5:2c:d9:b4:17:a1:f4:c3:eb:ce:
c4:17:64:93:9f:63:8c:40:4c:8d:b0:d6:f5:cf:59:
72:db:d8:0d:7d:04:2c:7f:2e:56:a9:4e:51:61:a0:
71:06:d9:8e:8b:ca:91:b0:2d:00:af:be:08:69:b4:
04:3f:22:db:88:51:4e:9d:82:37:74:80:06:1c:66:
cf:79:8e:5d:93:f5:d8:ae:d8:21:be:03:98:6a:d6:
1c:cc:ed:f2:bb:6e:9b:bd:85:78:c0:26:55:39:97:
4e:1f:27:96:b5:66:d6:73:2d:19:db:65:98:75:b0:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:99:8B:51:C7:46:C8:AA:B2:AD:E4:49:03:4E:2C:65:5A:30:66:0D
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/OJmLUcdGyKqyreRJA04sZVowZg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.4.0/24
IPv6:
2001:678:7::/48
Signature Algorithm: sha256WithRSAEncryption
66:c7:c3:f7:34:8a:e8:6a:fd:d0:02:7e:6e:d8:66:cf:df:8d:
66:06:71:13:83:1b:d1:21:d2:a4:3c:ec:c1:a7:0c:95:05:55:
33:b9:7d:19:01:4e:e5:b3:56:01:20:a2:78:e2:07:1e:a1:64:
b7:7d:64:1b:bc:b5:12:52:6c:2b:c0:a8:01:26:be:6d:98:5c:
63:27:22:73:d4:89:51:68:a0:82:5e:6e:0a:5e:a1:ab:b4:d7:
29:4c:f8:3a:51:26:c5:e9:4c:db:83:a7:bc:cc:b3:db:9b:18:
54:5a:54:2e:65:93:70:46:f1:6b:9a:35:71:35:03:e5:ea:2c:
9a:e2:02:3c:dc:b3:12:c9:a8:50:39:92:e1:8d:eb:26:8c:01:
e1:39:ba:3b:27:05:65:e2:ec:30:f0:92:3a:0f:99:aa:71:ea:
56:ba:9d:8a:f9:78:bd:29:ee:7e:66:3d:a6:67:54:e4:a1:26:
20:00:d1:77:00:ac:45:56:cb:19:5a:2d:ee:12:b0:8c:07:83:
f7:fe:bc:52:23:e2:4e:c8:e7:86:0d:90:01:17:73:7a:15:53:
d1:06:a4:ae:e5:b0:b0:d1:9b:75:93:b0:93:c1:60:e3:84:dd:
27:c2:a5:c8:bc:aa:ec:0a:8a:b8:55:3c:cc:33:bc:7e:fc:d4:
f5:14:71:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:27 2025 by rpki-client