Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/Oy5I7fyCA0a-oxi2Uugu7IKoN8c.roa
File: Oy5I7fyCA0a-oxi2Uugu7IKoN8c.roa (raw, json)
Hash identifier: mTc6vf8+mY9BXL4hf2C2ySuS4hCHErAnEdFGI6xS8ik=
Subject key identifier: 3B:2E:48:ED:FC:82:03:46:BE:A3:18:B6:52:E8:2E:EC:82:A8:37:C7
Certificate issuer: /CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Certificate serial: 018CC3489E0536E0A17BC6DD8E416860566B
Authority key identifier: 02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/Oy5I7fyCA0a-oxi2Uugu7IKoN8c.roa
Signing time: Mon 01 Jan 2024 04:29:25 +0000
ROA not before: Mon 01 Jan 2024 04:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42366
IP address blocks: 193.9.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9e:05:36:e0:a1:7b:c6:dd:8e:41:68:60:56:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Validity
Not Before: Jan 1 04:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b2e48edfc820346bea318b652e82eec82a837c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:87:ee:98:9e:80:2c:c3:f4:9b:62:2c:ed:47:
7d:ed:b1:a5:25:a5:8b:44:5b:a0:80:99:54:8d:5a:
2a:a4:08:05:1f:fa:41:a8:a0:68:b3:ff:d1:1e:0b:
74:b7:a1:a8:63:3f:e3:cc:ba:b3:3f:6d:0e:07:40:
28:fc:47:1f:a1:c5:8c:7a:8d:ac:a8:95:bd:95:aa:
12:01:eb:fe:8e:df:e8:8f:8f:7b:2f:7b:e1:94:4d:
08:5a:57:67:85:64:1c:a4:c0:86:47:23:4f:30:5f:
73:eb:00:e1:79:f7:d0:38:68:82:49:1f:f9:44:c9:
48:5c:d1:25:e5:04:b7:58:5a:a0:b1:f9:3c:c5:83:
19:f7:2b:24:00:33:07:ce:38:d1:fc:82:fd:11:6c:
6c:58:0c:81:d3:fe:d3:3d:97:12:ee:c3:c5:65:5c:
e2:1e:8a:5c:77:f2:53:b6:b5:bf:27:71:ee:9f:df:
ea:33:f3:8f:a0:f8:ea:0c:d2:cf:b3:9a:09:97:bd:
c8:a2:0a:82:ba:9a:01:55:1e:de:52:e5:a3:a3:a4:
6f:6b:d5:3e:6e:63:6d:d5:9c:2f:74:e4:31:7f:05:
5d:90:5c:5a:ff:d5:79:4a:f7:f3:26:5d:5e:80:c8:
c9:e7:d4:fc:4c:a2:39:ca:5c:9b:59:a1:1d:43:17:
3c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2E:48:ED:FC:82:03:46:BE:A3:18:B6:52:E8:2E:EC:82:A8:37:C7
X509v3 Authority Key Identifier:
keyid:02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/Oy5I7fyCA0a-oxi2Uugu7IKoN8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/AhKgfOeTpfBBYCe_SquL0c6vD84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.47.0/24
Signature Algorithm: sha256WithRSAEncryption
00:53:5c:2a:3a:04:2f:9c:4b:bd:e2:bc:09:11:cd:80:5b:7a:
60:aa:c8:41:fe:ac:63:d5:b8:4d:47:48:17:6b:ec:ed:a0:d3:
ef:54:47:64:9f:07:62:47:95:71:ae:28:3b:ab:2b:9a:d7:89:
a9:3a:90:60:1d:f2:27:02:d2:c5:b6:90:29:80:40:27:5a:4b:
71:45:a6:85:fa:c2:73:58:ff:1f:ad:9b:31:f6:0a:13:e1:c6:
37:2c:93:e8:3f:29:8a:ad:dd:82:dc:b0:07:ab:b7:a3:e9:f3:
5f:cf:f3:7a:08:49:a8:c6:a8:9d:d3:4d:87:f6:66:b2:c9:63:
85:19:3c:bd:fa:88:5b:54:5f:d4:c7:28:af:92:26:34:9b:c2:
c3:83:8c:ad:37:98:ff:3e:f5:90:84:13:00:38:35:e4:63:24:
aa:ff:1f:30:98:93:27:31:b2:46:da:52:f9:8f:09:73:28:f0:
c3:03:37:1e:32:5e:15:18:5e:f6:1c:f4:c9:50:cd:1a:57:c5:
8d:13:21:6a:32:dd:d0:04:06:ab:6d:83:ea:cd:46:22:9b:0b:
4b:89:32:48:e0:53:1c:a6:04:47:dd:dd:28:51:47:33:cb:ba:
6e:87:2a:55:f0:a2:01:ec:42:e3:20:f4:2c:b7:20:e4:94:ed:
6b:3e:20:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 15:21:18 2025 by rpki-client