Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oDO_3-pAEex-eMIyegMTJwzWVRY.roa
File: oDO_3-pAEex-eMIyegMTJwzWVRY.roa (raw, json)
Hash identifier: AfkTR3wDtKzhU7nhCb3F57v9TwNWHCLIiGdZBeJ7xjk=
Subject key identifier: A0:33:BF:DF:EA:40:11:EC:7E:78:C2:32:7A:03:13:27:0C:D6:55:16
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0190A691D88A12546775939AB3D38D46798E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oDO_3-pAEex-eMIyegMTJwzWVRY.roa
Signing time: Fri 12 Jul 2024 10:51:34 +0000
ROA not before: Fri 12 Jul 2024 10:51:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 286
IP address blocks: 134.222.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a6:91:d8:8a:12:54:67:75:93:9a:b3:d3:8d:46:79:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 12 10:51:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a033bfdfea4011ec7e78c2327a0313270cd65516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:21:c1:13:7a:ab:55:97:7a:71:cd:8a:85:61:
21:dd:78:07:4c:f2:e9:0a:25:29:35:65:4b:8e:27:
6c:78:82:82:f9:f9:f8:29:88:ec:e9:28:00:5b:97:
9b:50:90:d9:09:1f:d0:28:9d:6d:86:61:2d:a9:35:
97:d9:90:a1:c3:c7:ef:81:7e:86:e1:65:76:82:5b:
83:dd:3d:ce:b6:9b:98:ec:93:20:bc:71:17:bd:a8:
06:97:85:c4:9e:ad:19:09:00:66:32:af:d0:cb:f0:
56:4b:31:85:7b:67:e7:96:4d:89:d9:a0:68:5e:f4:
13:7a:a2:0f:a4:7a:f8:53:94:8d:f6:c8:7b:6e:03:
c5:78:5c:3a:2e:b4:3e:18:9c:cb:dd:b2:2b:ae:bd:
1c:65:82:00:93:c5:e6:0e:8b:ec:9f:c7:dc:f0:b8:
51:fb:05:a4:7c:09:35:5d:48:0d:b7:7e:7d:ec:c9:
62:f6:5c:3b:3c:0b:dd:a9:cf:03:93:a3:03:70:4b:
2b:b4:9f:3b:c0:06:1c:09:ad:92:a0:ac:e9:d6:88:
38:c6:cc:fb:7b:4e:6f:e5:68:ea:ec:40:8b:60:47:
4f:c7:1b:d7:a6:75:c5:44:b1:9f:f9:72:16:d7:6a:
69:7d:d3:a6:c8:ad:ff:2d:b2:ab:ca:4b:23:a7:e9:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:33:BF:DF:EA:40:11:EC:7E:78:C2:32:7A:03:13:27:0C:D6:55:16
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oDO_3-pAEex-eMIyegMTJwzWVRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.222.87.0/24
Signature Algorithm: sha256WithRSAEncryption
78:77:1c:41:77:73:51:51:12:db:b3:4d:c7:dd:91:90:89:f1:
fc:96:27:2e:34:65:57:d3:ca:8b:f2:cd:f6:6a:1b:a4:f7:a8:
7a:56:b4:16:a0:de:78:2c:29:7b:58:66:f0:ad:c7:c7:fa:bd:
0b:d8:7a:c1:95:a5:14:9b:1e:c8:a5:ca:43:12:b9:ed:70:5d:
18:49:1e:3a:d2:b2:3b:36:c1:d2:05:9e:f6:12:d6:31:4e:1d:
dc:95:f8:b5:15:17:49:db:19:09:85:11:e2:1a:83:dc:ba:30:
df:9b:81:c6:3a:35:e6:11:c2:94:a9:e7:48:e8:88:f5:87:82:
5d:e9:0d:9f:81:22:dc:d7:fa:bc:3d:69:5c:24:34:40:ce:a1:
80:9c:0a:02:c7:1b:fc:5c:37:72:b6:ba:24:c2:88:06:d1:71:
9f:56:31:7d:da:02:fe:1f:4e:7e:d4:5e:1c:80:6b:e4:2d:7c:
78:85:9a:40:cb:7f:6a:5f:74:84:72:74:97:46:01:79:df:98:
52:3f:8d:d4:1d:57:a5:17:dc:ab:bb:39:90:fc:b7:81:fb:41:
61:f8:6d:0e:16:02:24:ef:23:73:c3:1d:69:a9:fb:56:59:d1:
83:d3:a6:e3:ed:b8:3d:46:b1:34:b7:89:8c:42:1f:41:26:41:
d7:60:f8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:09 2025 by rpki-client