Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/AOLXuvzQH0F3MDzBXr5hgJth6jA.roa
File: AOLXuvzQH0F3MDzBXr5hgJth6jA.roa (raw, json)
Hash identifier: ANOWCNK1N2HN8iwkM8P3PMXp5btgZ6sFl3wjdGu9Tfo=
Subject key identifier: 00:E2:D7:BA:FC:D0:1F:41:77:30:3C:C1:5E:BE:61:80:9B:61:EA:30
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 019427B54AE4DA3F3A8785E20E525386A0A6
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/AOLXuvzQH0F3MDzBXr5hgJth6jA.roa
Signing time: Thu 02 Jan 2025 15:49:39 +0000
ROA not before: Thu 02 Jan 2025 15:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8298
IP address blocks: 92.119.38.0/24 maxlen: 24
2a0b:dd80::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:4a:e4:da:3f:3a:87:85:e2:0e:52:53:86:a0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: Jan 2 15:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00e2d7bafcd01f4177303cc15ebe61809b61ea30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:79:ec:25:08:aa:61:66:42:fa:76:bd:60:
2d:ba:84:aa:a9:dd:75:79:e8:9d:a9:3a:97:d7:1c:
3f:43:76:3e:b6:77:7a:6d:31:2b:45:ea:53:f4:e4:
f2:3b:73:22:c2:77:73:9d:88:37:56:88:ac:44:70:
db:db:bc:ba:43:96:45:cf:d3:bc:f4:9b:8b:e0:ef:
87:90:8a:7d:d7:d0:7f:2e:aa:cb:11:8e:be:c0:f9:
27:27:de:20:bf:86:30:2d:d0:2a:cd:cf:c5:63:1f:
a4:5e:72:f8:19:aa:d0:2d:dd:d0:ac:f7:d3:ce:39:
86:3a:17:9d:7e:17:ab:b7:20:6b:25:de:48:24:2b:
be:4d:0b:50:13:1f:86:98:9f:a1:03:55:94:07:33:
91:de:b9:6c:9f:42:20:7c:62:06:c3:89:10:87:ce:
fa:f8:d3:66:5a:51:12:2d:3d:ee:59:1d:a6:4f:da:
fe:d1:04:f1:16:a1:50:66:18:5d:13:3c:43:b4:e6:
40:1c:d1:08:30:81:ba:2d:23:47:b6:3a:54:60:d6:
75:cb:7c:99:07:2d:ff:f5:f5:26:9c:dc:e3:34:0a:
5b:e2:72:cf:76:8e:de:0f:c5:2f:cb:26:c7:0a:ce:
e2:db:65:1e:d9:b5:3b:87:ec:25:92:9e:6c:11:90:
1f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E2:D7:BA:FC:D0:1F:41:77:30:3C:C1:5E:BE:61:80:9B:61:EA:30
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/AOLXuvzQH0F3MDzBXr5hgJth6jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.38.0/24
IPv6:
2a0b:dd80::/29
Signature Algorithm: sha256WithRSAEncryption
35:25:07:b6:4a:b0:4f:1d:7e:47:2d:9a:72:ec:98:dc:e6:5c:
3f:9c:c4:7d:d0:f4:0a:6a:da:f8:15:14:6d:79:54:fb:66:ca:
ee:00:d3:af:5b:ef:48:d0:d6:29:24:34:42:bd:e3:ae:9e:65:
72:45:67:ab:37:18:c7:2f:d9:33:ca:2f:eb:ac:66:88:18:b5:
e6:a3:3c:20:2d:b0:60:b3:80:4b:eb:fa:f8:09:a2:8a:43:fd:
a6:85:35:93:17:cb:10:ab:3e:81:fa:bf:ed:da:2b:f4:b4:66:
5c:4b:0f:bd:c0:b9:55:3e:4a:20:01:b5:cb:b6:78:06:6a:87:
ee:e0:b3:e3:45:19:3b:cf:3b:9d:1b:2f:1a:1a:cf:74:6c:b1:
31:b3:3f:9a:1f:de:a9:76:9c:a2:f9:ae:35:96:00:e7:e7:e3:
39:fa:b9:f5:c6:ca:5d:28:1d:87:2e:f1:fd:11:7f:83:ae:03:
b2:e9:db:6d:ee:3c:0f:7c:e3:6a:f4:7b:6b:2f:ec:ef:c3:e8:
32:28:de:13:ce:09:7f:a6:42:41:ae:43:c0:e8:eb:d6:43:db:
2a:43:a6:be:f5:9b:48:c9:f1:d6:61:e6:ae:ca:df:d3:fb:87:
45:59:6f:2d:dd:32:4b:8f:f2:47:7b:74:93:c0:9a:6c:22:8a:
7e:f8:14:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:34:13 2025 by rpki-client