Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/okDig36WatgfOljJ7YAQ7f4qAwI.roa
File: okDig36WatgfOljJ7YAQ7f4qAwI.roa (raw, json)
Hash identifier: 9F0Jk3aBVBsMc/BBPP2ZGmKOPXIvDvI2DUUSrfyHD70=
Subject key identifier: A2:40:E2:83:7E:96:6A:D8:1F:3A:58:C9:ED:80:10:ED:FE:2A:03:02
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 019421B209DDC10302C6221886F679FBA2A7
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/okDig36WatgfOljJ7YAQ7f4qAwI.roa
Signing time: Wed 01 Jan 2025 11:48:23 +0000
ROA not before: Wed 01 Jan 2025 11:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64419
IP address blocks: 95.181.148.0/24 maxlen: 24
95.181.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:09:dd:c1:03:02:c6:22:18:86:f6:79:fb:a2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Jan 1 11:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a240e2837e966ad81f3a58c9ed8010edfe2a0302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:67:6f:07:30:d8:02:c1:ac:68:6c:c5:e6:
36:4f:d3:7f:b9:49:00:63:42:a7:c5:0c:32:7d:1a:
66:d2:31:d2:4c:ed:1a:1f:fd:65:47:7b:05:01:bf:
a0:53:1f:9c:fc:83:5d:65:a9:76:42:53:61:e7:0a:
b2:e9:40:e3:a5:a2:a2:8a:ee:ca:21:58:d5:93:8c:
19:79:3e:ab:58:a0:e1:46:70:31:8c:40:68:00:25:
2b:a3:4c:0a:22:cd:a8:e7:af:73:98:4c:7b:ac:4b:
97:5c:1a:f8:85:1e:02:a2:11:b8:e9:e2:23:a6:f3:
68:4a:b4:36:eb:eb:89:ac:56:c1:56:88:fe:4f:4f:
94:8d:e2:ab:26:8f:9a:7f:7b:d1:8c:e1:00:e8:ec:
58:32:c1:c2:ea:34:4f:b5:59:49:a3:4b:ec:b7:7d:
ef:79:af:d1:4f:6e:69:3d:a7:ce:d0:2f:c7:29:4e:
da:99:43:25:f2:68:30:d2:97:a7:7c:ea:f8:2d:e0:
53:a7:1f:f3:41:4e:b0:08:e6:23:fa:bf:69:9d:6d:
11:75:59:0e:05:10:67:d1:62:53:67:dd:a6:5e:99:
ce:75:30:42:6e:6d:f5:7f:53:e7:a9:07:d6:b0:f8:
b9:12:dd:37:f7:0b:b8:95:bc:14:cc:e4:64:52:b0:
cc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:40:E2:83:7E:96:6A:D8:1F:3A:58:C9:ED:80:10:ED:FE:2A:03:02
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/okDig36WatgfOljJ7YAQ7f4qAwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.148.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:d0:51:38:05:e8:da:4b:59:5c:2f:0b:d2:5f:44:ed:23:52:
6c:8c:9f:8d:02:a4:97:85:dc:35:85:87:90:c9:fa:7a:2b:2e:
f1:d8:a2:2c:ca:c7:57:1f:52:37:c0:ee:f5:d7:27:0e:bc:8f:
29:d9:d8:ed:e3:49:2c:c9:10:11:e2:83:99:17:a6:a9:f5:c6:
0b:0e:81:28:9f:09:fc:d7:23:22:c5:91:96:b3:3f:44:41:ad:
6d:32:d3:77:09:de:0d:fa:a1:d0:65:1d:27:a4:56:1f:ce:ac:
1e:c1:d9:82:2e:7f:8d:0d:25:b8:24:a8:22:f6:23:ba:79:5e:
37:e4:ee:f2:31:e1:87:9e:ff:c2:9a:24:b7:0b:fe:04:52:24:
f3:c4:f7:61:47:af:c6:48:8c:74:ef:41:83:b3:26:f6:02:74:
20:36:92:ef:86:7d:35:f5:d4:40:ce:68:17:93:dd:3e:b2:e6:
f4:8a:ab:6d:6f:52:0c:87:5e:7b:3a:3a:a8:f4:32:7b:a5:a4:
b3:2b:71:4c:84:6c:aa:27:cb:e0:1a:64:73:35:1e:5e:85:3c:
71:fe:9b:12:32:5b:b8:3d:69:8d:b6:62:aa:f0:db:62:3a:24:
b5:34:73:00:ab:ae:39:18:27:31:c6:8a:ca:89:52:ae:35:c0:
44:59:96:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:28 2025 by rpki-client