Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/O9ekulmqX9M29EhHAhFffowyP1Y.roa
File: O9ekulmqX9M29EhHAhFffowyP1Y.roa (raw, json)
Hash identifier: mpBf32lEZTJ1ItA575e5LMHDobb34NNvKRi93ycHedA=
Subject key identifier: 3B:D7:A4:BA:59:AA:5F:D3:36:F4:48:47:02:11:5F:7E:8C:32:3F:56
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424453B16B281EDA9611046EEAAFC1E15
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/O9ekulmqX9M29EhHAhFffowyP1Y.roa
Signing time: Wed 01 Jan 2025 23:48:24 +0000
ROA not before: Wed 01 Jan 2025 23:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 194.26.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:3b:16:b2:81:ed:a9:61:10:46:ee:aa:fc:1e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bd7a4ba59aa5fd336f4484702115f7e8c323f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ad:50:9a:9c:d3:19:a4:6b:47:63:f5:b7:91:
91:3c:72:b8:c7:b3:f8:f3:71:63:73:ed:90:db:52:
17:e5:98:4d:6b:13:08:ef:5e:d7:45:ca:7d:f9:76:
58:10:99:43:a2:79:0f:73:97:13:86:8b:be:42:e5:
e0:7a:54:96:bf:02:88:cd:8e:6c:26:05:f4:3f:8d:
25:22:3d:0c:ee:3f:2a:35:a3:54:32:55:f4:85:56:
ab:a8:3d:22:83:51:91:e1:bc:b7:15:1e:7c:6e:0a:
fe:cb:98:b7:73:07:d4:70:38:a4:60:1e:17:c4:75:
45:79:49:3f:9f:8a:e1:d7:57:23:36:ca:51:32:64:
45:f3:cd:84:8d:4f:4f:09:7b:c6:a6:61:d4:50:23:
e6:3a:55:d3:82:e8:72:e1:97:9f:2e:bd:45:d9:73:
37:9f:35:57:b7:88:fe:dc:f5:5b:a0:c7:80:c9:25:
a3:29:7f:59:53:93:7c:d2:9c:a7:bd:b3:8b:14:4e:
a1:9a:9f:a8:c3:6d:fa:84:23:71:ba:b1:48:95:26:
3c:58:8d:6b:66:81:bc:a3:df:a4:00:76:7b:8a:0c:
d7:94:01:97:3d:87:af:47:5f:16:c6:a9:22:83:a7:
ac:ad:0f:cc:ab:ad:c8:f0:dd:f6:5d:82:0f:98:85:
02:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D7:A4:BA:59:AA:5F:D3:36:F4:48:47:02:11:5F:7E:8C:32:3F:56
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/O9ekulmqX9M29EhHAhFffowyP1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.227.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:81:4d:9d:9c:b9:97:0a:60:58:4e:1c:f8:14:f0:c2:7f:b8:
b6:7a:1a:cb:61:67:be:fc:9d:18:85:06:de:3a:ce:4b:82:ea:
e2:ad:07:a7:c7:0b:94:4c:80:94:b5:fd:db:e9:b0:c8:e6:47:
11:7a:05:46:e6:6b:aa:94:08:e5:60:31:ce:8f:46:30:ce:86:
a6:4d:1c:3d:5c:91:e4:bf:9c:23:f8:22:96:c5:01:05:b8:31:
fc:94:90:39:5a:c3:cf:0c:8b:bc:f7:0d:d2:58:31:d8:bc:17:
b9:08:7e:82:52:13:42:86:ff:42:42:b2:7b:dc:f0:ac:49:d6:
fe:a2:df:96:7d:9b:a8:a2:e7:64:33:7b:41:29:32:f4:89:88:
c8:f6:45:5b:a9:17:aa:b7:86:90:19:b8:9e:cd:98:6e:fe:00:
5f:cb:72:89:17:9a:84:83:36:de:93:0a:5c:d8:eb:e6:ac:ea:
21:be:ee:ba:ad:04:0f:1b:59:a2:6f:11:d1:d1:b2:7c:cd:27:
39:a3:51:33:3f:1f:ec:43:d5:4b:fe:4d:39:11:f8:4b:7b:36:
ec:37:44:3a:08:b3:5c:71:27:6f:4b:e2:51:0a:71:10:1a:9a:
42:3f:17:00:53:03:b0:e9:90:1d:c6:ee:ee:c0:a9:09:ad:99:
1b:d7:a5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:32:50 2025 by rpki-client