Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OL81fJJCq9b--f11mG6wuHSiX3k.roa
File: OL81fJJCq9b--f11mG6wuHSiX3k.roa (raw, json)
Hash identifier: oieR0nNvrLx6CpIw2FnVtpJ3xiLDjDlGmASFnGg+RS8=
Subject key identifier: 38:BF:35:7C:92:42:AB:D6:FE:F9:FD:75:98:6E:B0:B8:74:A2:5F:79
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067C1E2EF582F0295C7E86B91F2B717
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OL81fJJCq9b--f11mG6wuHSiX3k.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16114
IP address blocks: 194.209.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c1:e2:ef:58:2f:02:95:c7:e8:6b:91:f2:b7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38bf357c9242abd6fef9fd75986eb0b874a25f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:00:b3:7d:98:0b:1a:99:77:4c:a7:f4:9a:e9:
2f:ad:c3:e3:87:d6:ae:21:e2:41:dc:69:fb:c4:2c:
d3:94:7d:4b:e5:e0:cd:b6:a9:0c:22:1f:4f:4a:be:
f9:6a:38:f8:95:8f:1c:6c:fe:57:a4:a5:d4:27:a5:
80:6b:71:01:f6:75:c4:7c:05:0e:81:2d:7e:18:6a:
d7:47:e2:f0:4e:b6:7e:58:f5:bf:08:9d:ee:75:43:
3c:68:fa:9b:5e:61:04:05:4e:7b:4b:7e:79:d8:e4:
29:f1:a2:ec:00:fa:5d:e1:30:80:40:09:98:ea:f7:
a9:71:75:ff:ce:db:66:3c:33:60:41:18:03:43:10:
98:8b:d3:ea:21:0f:f1:f2:41:34:c3:c8:04:73:95:
e2:33:2a:01:02:eb:24:98:60:69:79:fe:91:8f:e4:
ba:8d:e1:76:89:ad:c2:b8:40:d1:d6:e6:cc:80:ac:
06:ca:0c:0a:a8:2c:be:a7:5b:bc:1d:13:68:d8:c8:
04:1a:67:ac:cb:82:38:41:6e:d2:4f:09:a6:4a:13:
3b:b0:48:2a:07:ec:5b:13:c0:5c:3f:d4:36:6f:b1:
d7:34:0c:84:1c:66:05:7b:d0:65:72:53:ec:cb:08:
a6:81:13:04:34:62:93:e2:37:e0:30:61:99:7a:2c:
6e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BF:35:7C:92:42:AB:D6:FE:F9:FD:75:98:6E:B0:B8:74:A2:5F:79
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OL81fJJCq9b--f11mG6wuHSiX3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.241.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:3c:d3:5e:0d:5f:99:ea:f2:8d:f9:79:92:84:f9:4a:0b:92:
9a:49:48:55:fc:5a:ea:e9:f1:c5:2b:e5:d3:53:03:ed:15:2e:
b7:ca:c7:28:4b:3d:17:f6:cd:6f:ac:b7:e3:67:18:13:a9:60:
5e:ab:e2:a2:ac:c2:f7:1e:6b:30:f5:ba:71:14:a1:b2:e3:99:
44:32:80:68:99:50:22:2d:30:d7:cd:ac:0e:7a:d2:df:e0:3c:
16:60:93:90:f8:ce:56:7f:08:64:25:ca:ca:ea:5e:9e:bd:41:
2d:35:17:a9:13:73:63:f5:51:9f:c7:2c:de:79:1c:63:ec:58:
b2:9a:b1:94:cc:02:c4:8d:fc:2c:89:a8:51:3d:0f:99:1b:9c:
89:f8:94:57:5e:bb:4c:b2:ce:60:3a:90:38:4d:25:2c:51:1e:
7a:61:f8:f4:d1:07:ea:d2:62:b8:ca:19:66:f0:c6:15:46:7e:
ff:6d:26:73:0f:1a:1f:27:60:73:b3:20:d2:0c:c6:30:88:3e:
08:c3:ea:2f:53:af:60:d9:86:cb:09:6b:b0:db:1f:72:06:f2:
08:64:d0:e6:13:b8:10:5c:47:09:4d:4f:21:28:60:6d:17:17:
f0:51:22:56:8b:a2:a3:2e:49:02:fc:90:f4:c2:80:1e:94:08:
2c:5b:87:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:36:40 2025 by rpki-client