Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/b69695-a990-4a6e-8f0a-22dc1a41f84f/1/OfTodQ24mmQXBXtk0Aw2yRon04c.roa
File: OfTodQ24mmQXBXtk0Aw2yRon04c.roa (raw, json)
Hash identifier: XdBOIFFRJzM1I0GaZYBryAV25iNWbEeMdJEnxWFPiFI=
Subject key identifier: 39:F4:E8:75:0D:B8:9A:64:17:05:7B:64:D0:0C:36:C9:1A:27:D3:87
Certificate issuer: /CN=650354e1002248dc70ba40f18d6958fcef569df3
Certificate serial: 02009C95
Authority key identifier: 65:03:54:E1:00:22:48:DC:70:BA:40:F1:8D:69:58:FC:EF:56:9D:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQNU4QAiSNxwukDxjWlY_O9WnfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/b69695-a990-4a6e-8f0a-22dc1a41f84f/1/OfTodQ24mmQXBXtk0Aw2yRon04c.roa
Signing time: Tue 17 May 2022 06:33:29 +0000
ROA not before: Tue 17 May 2022 06:33:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29684
IP address blocks: 194.104.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33594517 (0x2009c95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=650354e1002248dc70ba40f18d6958fcef569df3
Validity
Not Before: May 17 06:33:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39f4e8750db89a6417057b64d00c36c91a27d387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:77:99:e8:81:c1:3c:50:05:57:b4:96:05:
16:a6:54:45:bb:a3:41:de:01:44:b9:a4:f7:ad:c4:
dd:43:5a:6b:70:0d:d4:df:ae:a9:47:4b:a9:f4:bc:
c5:43:ec:e9:d0:c4:a6:ef:4d:92:59:18:34:cf:10:
56:a4:83:3d:8d:05:85:66:2b:0f:f9:a3:4f:38:68:
a6:64:67:05:47:3c:a4:a9:e8:65:2c:78:9d:c7:6f:
65:03:7e:22:f0:e6:59:3f:85:48:2d:1b:2e:da:b9:
4f:02:e7:b3:b6:d2:dc:97:e9:57:f0:80:da:92:a3:
c6:8a:e5:14:65:b2:c4:cb:aa:24:02:96:bc:9d:14:
4f:58:2b:e4:4d:f4:a3:78:d3:da:9f:c9:4b:9e:09:
a2:49:2b:ba:e9:32:92:41:7f:62:56:da:92:cf:45:
c5:41:db:5d:65:6d:f4:c0:6f:8a:fa:f0:2e:ad:3a:
8c:05:2d:82:dc:ce:99:d9:24:82:ec:8d:73:5a:d8:
bb:e2:14:60:e5:15:72:50:a1:3c:64:b3:ab:87:a8:
1c:09:c8:75:1f:04:0b:26:4d:16:15:1d:76:de:31:
cc:8c:5f:ea:c9:cd:56:ce:e2:1a:39:02:d3:91:7a:
df:7e:e3:b4:72:99:9c:7c:0a:00:ec:bf:77:5d:cf:
a7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F4:E8:75:0D:B8:9A:64:17:05:7B:64:D0:0C:36:C9:1A:27:D3:87
X509v3 Authority Key Identifier:
keyid:65:03:54:E1:00:22:48:DC:70:BA:40:F1:8D:69:58:FC:EF:56:9D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQNU4QAiSNxwukDxjWlY_O9WnfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b69695-a990-4a6e-8f0a-22dc1a41f84f/1/OfTodQ24mmQXBXtk0Aw2yRon04c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b69695-a990-4a6e-8f0a-22dc1a41f84f/1/ZQNU4QAiSNxwukDxjWlY_O9WnfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.226.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ed:cc:19:58:71:ca:c0:05:d8:a1:cc:44:25:6d:c3:09:78:
ee:c5:65:f9:00:1d:50:d2:4d:bc:bc:e2:4d:57:ed:9f:01:ef:
ac:ce:7f:9d:31:c6:da:4f:d6:ca:51:74:64:88:40:14:e8:5a:
51:e9:e7:6e:40:41:7a:c5:70:4d:83:3e:9e:bc:70:04:f8:dc:
fc:22:35:c2:b4:d5:69:ff:39:62:a6:a4:e9:e4:6f:82:c0:13:
51:0e:b5:92:0b:4f:20:74:0a:f2:ff:1d:f7:ec:02:82:79:6c:
a2:cf:4b:70:01:8b:0c:1a:0f:66:10:7a:88:dd:41:40:57:1b:
09:c7:1c:a4:7d:f6:eb:68:55:a4:c8:b4:7a:01:64:4b:1b:39:
f6:cf:50:a5:be:6f:4c:0b:4e:a7:81:a7:cc:10:fd:0a:ff:4d:
1d:ea:7b:5d:fa:60:0a:b5:dc:bb:ca:b0:3e:c3:8d:a1:59:86:
56:96:00:33:db:c3:c8:c4:20:4d:1b:ba:1a:d5:c3:57:f0:c1:
ce:49:fc:98:03:e9:ca:10:aa:ee:65:79:d1:6b:89:d0:c1:5a:
84:9c:9d:1d:e4:bb:35:55:b7:7e:19:13:fc:a0:61:d8:bf:9b:
80:c9:d9:21:22:77:d9:12:2b:14:8c:88:9c:57:15:21:9d:79:
06:f9:f9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:31 2025 by rpki-client