Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/oOj_GBZB2xLxA5Y_E2mtwV7V9-0.roa
File: oOj_GBZB2xLxA5Y_E2mtwV7V9-0.roa (raw, json)
Hash identifier: Bwym/gIrVcU0O/Ncby+0s/9O4c5bJ460ZOKgsQXLq6g=
Subject key identifier: A0:E8:FF:18:16:41:DB:12:F1:03:96:3F:13:69:AD:C1:5E:D5:F7:ED
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B57377416D973282C08CF6F400B7BD
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/oOj_GBZB2xLxA5Y_E2mtwV7V9-0.roa
Signing time: Thu 02 Jan 2025 15:49:50 +0000
ROA not before: Thu 02 Jan 2025 15:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26114
IP address blocks: 94.31.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:73:77:41:6d:97:32:82:c0:8c:f6:f4:00:b7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0e8ff181641db12f103963f1369adc15ed5f7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:dc:b0:79:f3:72:b5:fd:de:81:e9:b9:8a:
9b:dc:d4:26:83:9f:1c:44:c0:2e:22:19:9d:06:48:
ce:65:56:ed:41:83:e9:6a:5d:cc:b5:f4:75:6d:c1:
e6:4b:59:63:4f:ed:1a:f1:e1:a0:7b:c1:0d:3b:c3:
57:83:00:ec:9f:16:89:19:9c:7d:28:82:e0:c4:ed:
f4:7b:a6:0b:3b:31:f3:9d:43:93:f7:11:4a:b0:49:
ed:45:20:34:2e:87:4e:93:ed:11:df:65:18:64:0c:
4f:c7:3c:71:20:45:f4:1b:85:90:a3:41:40:5d:32:
3f:3c:79:77:f0:ff:15:17:04:39:1e:44:cf:e9:51:
c9:4b:5f:61:57:cf:02:ef:eb:08:82:dd:17:db:14:
72:e2:73:36:c3:d7:fa:3f:67:88:bd:4e:22:4b:85:
f5:c1:cd:c8:92:0d:70:78:a4:18:ec:1a:35:71:4f:
d6:91:e1:c6:33:16:db:d4:66:53:50:d3:f2:28:c3:
05:64:a0:64:8b:1d:73:26:5c:3e:32:bb:4b:5d:94:
64:1f:df:49:69:6d:78:75:a8:2e:a9:06:a1:c6:32:
45:7b:00:f6:94:66:55:b2:b7:b6:8e:ae:03:f4:7b:
24:ea:65:44:bf:e9:85:ca:00:3a:d0:43:d9:a3:70:
c0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E8:FF:18:16:41:DB:12:F1:03:96:3F:13:69:AD:C1:5E:D5:F7:ED
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/oOj_GBZB2xLxA5Y_E2mtwV7V9-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.31.44.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:9f:37:ae:db:56:3e:68:83:56:9f:06:cb:5d:df:c3:a2:77:
0a:93:b7:ec:29:4c:9b:60:71:12:ed:c8:8a:0d:0e:5d:53:b6:
66:b4:48:90:3e:ac:ef:04:e2:b5:12:85:01:5a:f4:b7:69:47:
85:52:d7:ba:ce:28:23:8d:17:56:97:ef:9b:34:18:f9:ad:5c:
0b:78:13:32:73:ae:f9:07:89:b2:71:84:8f:00:2c:22:53:92:
8a:cb:f9:65:4e:4f:9b:d4:89:5f:53:49:4c:76:af:d9:69:70:
50:38:57:f6:92:72:10:ab:ac:f1:72:38:cf:94:4d:b3:b9:4c:
e3:fd:ef:38:59:4e:17:15:62:ad:01:69:51:14:1f:ab:8a:d3:
15:f4:fc:34:ba:86:6e:da:43:f7:6f:b3:b1:a6:bd:2d:2e:83:
75:31:f7:23:08:f1:2c:7f:53:86:27:a3:01:2e:9c:97:2e:f5:
87:e3:b1:e9:a4:63:0e:eb:57:22:16:5b:02:46:09:bc:17:27:
2b:2c:cc:bd:1d:19:9b:3b:ef:c2:10:40:b6:37:bc:9d:ba:ea:
79:ee:51:73:f7:d4:fe:98:eb:25:8d:e8:6b:9d:d1:85:b1:40:
55:5e:f7:c1:dd:13:d4:26:cf:68:76:4b:46:a2:d7:f4:d3:f3:
84:a4:a5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:45 2025 by rpki-client