Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/OalAb_NOtnnw1Uf7t2E7JPJ6VoY.roa
File: OalAb_NOtnnw1Uf7t2E7JPJ6VoY.roa (raw, json)
Hash identifier: /2DSINFIyLLAuWT+NSN2AERglHoq5WMezjiuaEAGBLc=
Subject key identifier: 39:A9:40:6F:F3:4E:B6:79:F0:D5:47:FB:B7:61:3B:24:F2:7A:56:86
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 019422202F455CF4CDF95DF3A189990025A4
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/OalAb_NOtnnw1Uf7t2E7JPJ6VoY.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207992
IP address blocks: 45.158.76.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2f:45:5c:f4:cd:f9:5d:f3:a1:89:99:00:25:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39a9406ff34eb679f0d547fbb7613b24f27a5686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:f7:ba:29:10:28:31:fe:86:a9:f1:c2:17:
b5:54:92:d0:e1:de:ce:26:83:18:3e:2c:7d:e5:1f:
35:65:84:70:a0:99:03:bc:22:c8:da:c4:04:7d:f2:
f6:f9:02:a9:4e:c1:da:b0:08:8d:56:e3:de:b0:53:
b1:63:f9:7b:ed:bf:c8:34:8a:43:5d:41:f0:98:92:
fa:82:d1:fa:c9:36:61:30:14:07:79:07:c1:3c:29:
68:d8:93:e9:2e:72:3f:ef:c8:e4:28:21:16:30:3c:
c5:6b:f8:2f:6c:51:fd:de:1b:89:c8:0f:7c:b9:e1:
ec:33:94:7a:df:6b:a3:33:34:af:b0:8d:fe:0e:3b:
b3:d3:9a:0d:bb:86:b6:78:29:83:cb:ae:93:6f:53:
3a:1c:29:44:e2:cd:01:39:ea:9d:af:d1:99:bb:f9:
ba:f2:5b:7d:fe:56:4a:fc:5c:f9:29:3e:02:2f:c2:
2d:00:a2:61:42:cc:05:09:4f:0c:f4:4e:cb:c5:42:
4d:a1:23:80:7d:cd:3e:75:c6:6a:39:bc:bb:09:7b:
b7:29:09:69:26:72:d3:f8:0e:3e:58:a3:6a:a4:8e:
ca:89:7e:a6:18:fa:ed:7b:0b:e4:16:ba:0e:ae:24:
bb:75:85:17:72:51:2d:a1:8a:a2:0d:35:d8:74:4f:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A9:40:6F:F3:4E:B6:79:F0:D5:47:FB:B7:61:3B:24:F2:7A:56:86
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/OalAb_NOtnnw1Uf7t2E7JPJ6VoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.76.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:92:f6:4b:4c:c9:00:fb:e9:96:4c:e2:a8:e0:c8:5a:31:cc:
22:9a:c8:a2:d7:75:ce:4b:79:35:42:23:d4:22:b7:e1:dd:23:
10:90:86:ff:96:ad:59:dc:4a:19:0d:85:84:16:f5:ce:7e:78:
66:20:7c:6b:45:5c:93:95:95:f4:9e:af:72:3e:aa:6e:a6:14:
d8:5f:73:b8:d3:06:67:ae:c6:a4:87:0e:75:20:45:13:08:c7:
f1:6c:93:56:5c:d0:88:6a:5c:0e:6e:c3:e6:ef:4b:ad:9d:27:
8c:33:2b:19:97:e3:62:bc:f8:e2:7b:dc:b5:b3:f0:ee:ea:6f:
b1:0e:00:9d:3b:f0:ec:5d:fb:6b:1c:22:9e:e5:77:86:b7:3d:
c0:24:50:11:1b:03:09:9b:7b:30:57:78:af:24:83:b4:11:3c:
9a:87:b2:4d:4b:24:4d:ec:4c:26:3b:ae:45:e2:eb:59:d6:84:
0c:2d:7f:9b:b6:3c:d8:0c:1d:ae:11:a4:b3:1f:4c:61:f9:ee:
3a:e1:e9:80:81:26:c7:c1:48:71:73:88:70:25:26:8c:1d:36:
45:90:a4:9d:4f:19:b5:64:d1:96:79:d3:1a:64:c0:29:01:d2:
8d:18:f9:4c:a4:ce:a3:7c:93:41:a0:cb:14:01:9a:be:5e:32:
8e:4d:fd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:57:43 2025 by rpki-client