Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Ojr6XmvfUtbDXyce2lEgMGpaePg.roa
File: Ojr6XmvfUtbDXyce2lEgMGpaePg.roa (raw, json)
Hash identifier: cCnKCrcSgaQDaDF+UIWtXGk+QUMkzp35vING/lyKyzI=
Subject key identifier: 3A:3A:FA:5E:6B:DF:52:D6:C3:5F:27:1E:DA:51:20:30:6A:5A:78:F8
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BF4C54E2F48B4E593925F51E2F61A
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Ojr6XmvfUtbDXyce2lEgMGpaePg.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206118
IP address blocks: 188.114.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f4:c5:4e:2f:48:b4:e5:93:92:5f:51:e2:f6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a3afa5e6bdf52d6c35f271eda5120306a5a78f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:da:bb:5d:0f:a4:98:cd:e8:b3:7a:ec:9e:
26:7f:72:09:3d:8e:e7:82:ea:d4:de:3c:95:35:58:
2b:05:3c:46:64:59:1e:90:d8:d9:48:d7:ef:f1:5c:
16:95:f4:f7:9b:0b:38:cc:56:02:64:82:39:a6:08:
6b:3c:90:ee:b2:32:99:e7:4e:d2:9a:fd:73:7a:0f:
a5:1b:31:b8:6a:79:15:1e:6b:9b:52:5b:10:54:5b:
b7:79:ff:a1:ba:26:34:58:09:a2:4e:17:63:3d:d1:
61:31:36:2b:ef:f1:e6:5b:fa:5c:ce:e6:82:65:7a:
8a:de:48:e6:9a:b6:3c:26:f9:ab:f1:f5:81:96:3d:
b7:a3:c2:85:84:f3:69:b1:d4:df:9f:58:7d:cc:0d:
56:e3:cc:44:61:c0:40:29:7f:a9:e3:66:41:90:06:
33:42:9a:40:af:a7:52:ef:35:ac:1e:50:9c:df:af:
5e:08:3d:1b:54:5a:e6:52:8f:0f:7f:7c:d5:60:58:
aa:0d:4a:a4:ee:50:d7:50:13:e9:91:f8:88:bd:a4:
38:52:b3:78:62:f5:e8:82:cf:33:96:5e:25:a4:9f:
a6:49:c6:e0:ae:d5:39:de:15:b4:6f:b9:8e:29:c4:
0e:2b:4e:5e:6d:bd:29:f8:5b:15:77:31:c4:86:ab:
e2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3A:FA:5E:6B:DF:52:D6:C3:5F:27:1E:DA:51:20:30:6A:5A:78:F8
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Ojr6XmvfUtbDXyce2lEgMGpaePg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.69.0/24
Signature Algorithm: sha256WithRSAEncryption
01:53:5f:30:4b:1b:4b:6f:ba:6b:01:59:93:00:02:3a:c8:1c:
37:ba:92:cc:10:cb:b7:18:16:1e:b0:0a:eb:37:1b:a6:07:33:
9e:bf:2e:aa:8c:07:d0:a0:f0:a5:3c:4b:d6:cc:b1:01:d2:e9:
79:4b:ce:3e:6a:d3:18:f5:2d:c6:a5:42:34:e8:50:86:c0:d0:
ca:d1:68:7b:eb:6e:ad:84:09:87:39:d8:d7:89:52:e7:8b:47:
82:8e:30:2e:71:10:05:76:1d:40:f5:e0:fb:e6:fb:b6:9d:ea:
04:ba:d1:6c:99:67:9b:a1:33:9f:f8:a6:89:cd:f3:b1:7d:24:
df:75:9c:29:49:8f:fd:4c:7b:d6:ab:d7:9e:21:bf:b6:c9:6a:
13:cc:0b:05:e3:53:08:26:e6:07:75:40:86:16:e3:8a:e8:b0:
cd:97:92:8f:84:a1:d1:70:2c:fc:08:a9:0b:78:aa:fc:e8:94:
e6:cf:4b:ef:b6:0a:d8:ad:5c:4a:7a:cf:ee:35:56:f3:2f:90:
d0:17:4d:5d:4e:1b:f6:35:68:c3:86:65:dc:94:c7:cf:8b:43:
e9:10:46:48:a3:d4:ab:c8:86:68:e4:45:01:a8:34:7e:1c:e4:
9a:13:1d:a8:1a:bc:8e:fc:6a:e9:b3:5a:4c:fd:b0:46:ff:fc:
19:63:fa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:15:14 2025 by rpki-client