Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/oJa-j1OGhSOD3pS3o49GxZcwUrM.roa
File: oJa-j1OGhSOD3pS3o49GxZcwUrM.roa (raw, json)
Hash identifier: hxpy5frrKbRmNqWh9mO01VdJHddZySBakUt37N7fNuc=
Subject key identifier: A0:96:BE:8F:53:86:85:23:83:DE:94:B7:A3:8F:46:C5:97:30:52:B3
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C58BB6BE2727D2E304B411F495ABA
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/oJa-j1OGhSOD3pS3o49GxZcwUrM.roa
Signing time: Sun 01 Jan 2023 22:55:46 +0000
ROA not before: Sun 01 Jan 2023 22:55:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400039
IP address blocks: 5.181.179.0/24 maxlen: 24
45.158.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:58:bb:6b:e2:72:7d:2e:30:4b:41:1f:49:5a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a096be8f5386852383de94b7a38f46c5973052b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5d:fa:e6:ed:c2:ce:69:1c:a5:41:e5:24:f5:
09:7a:66:c1:b7:1c:c1:ca:91:22:c6:eb:2d:a2:00:
ec:82:77:de:46:39:d4:a7:14:cd:7e:ce:64:0a:52:
93:85:49:34:69:dd:7c:a7:25:9e:1c:c8:15:df:d5:
14:6d:dc:56:3a:a5:f1:5c:4d:70:84:a0:39:db:59:
cc:8a:b9:99:7d:2b:40:46:d6:71:5c:f9:d0:16:22:
58:54:3c:cb:01:49:01:1c:16:de:82:35:04:cf:68:
ea:3c:81:13:7d:4f:dc:b0:61:86:ad:14:c6:4f:5d:
66:30:92:e8:36:ff:c8:63:f7:8f:fc:04:89:86:6a:
e7:d1:b3:a3:d4:1f:b8:25:54:e4:26:b4:0d:99:f6:
99:cd:2d:f7:8e:4f:43:6e:49:70:25:30:a5:3f:16:
af:f5:23:a5:ef:79:b8:8b:de:b5:28:97:30:24:c9:
52:d4:c4:5e:a8:16:3b:4f:6e:60:57:d8:98:e4:0e:
8f:e7:84:47:56:d0:2e:f3:5f:39:4b:b0:92:9a:fc:
f2:1b:2f:5f:a0:1d:5c:4a:4f:05:ed:07:ec:13:3a:
e4:ad:42:c9:70:2d:d0:10:50:10:94:63:87:02:82:
ba:53:0a:b0:2a:34:84:6c:0a:a2:5c:cd:09:21:0e:
61:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:96:BE:8F:53:86:85:23:83:DE:94:B7:A3:8F:46:C5:97:30:52:B3
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/oJa-j1OGhSOD3pS3o49GxZcwUrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.179.0/24
45.158.58.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e5:54:79:bc:69:41:f6:b6:5a:49:f9:2a:62:28:0e:0f:ab:
34:6e:99:f1:f4:2f:b5:50:f0:59:16:20:6d:58:7f:a9:dc:94:
e9:8d:68:b3:26:85:e5:b3:b8:0e:35:26:9a:f0:51:5a:4b:cc:
a5:ed:e5:4c:69:44:5a:84:9d:62:c7:2f:f9:8a:8e:b1:bb:2e:
28:aa:08:bc:68:81:07:7e:4f:99:4b:f1:ba:40:1a:92:c8:54:
7e:fa:1e:89:52:6a:59:2c:05:81:a3:4b:46:f3:2d:be:8c:ad:
0b:b9:7a:e1:df:c7:44:76:d3:b0:10:3d:53:9d:39:9a:3d:04:
28:b9:57:d9:8c:87:18:1d:8a:fb:54:50:4b:40:6f:d5:db:e5:
2a:eb:95:63:fc:0a:53:90:08:2f:b0:72:00:91:86:81:99:ab:
8d:2e:86:02:b5:65:b5:95:97:33:15:73:63:21:f6:f0:ce:38:
9d:92:06:14:be:a2:fe:ef:f9:b0:fe:88:e5:39:65:5c:b9:d6:
5c:75:5a:67:41:94:33:ff:b8:c2:56:3a:93:b6:6b:01:70:32:
f5:71:f3:14:22:2b:53:e2:42:66:86:2a:9e:4b:d6:e3:aa:28:
f2:76:68:12:02:17:04:30:67:f8:dc:23:15:0f:ed:9e:d5:3f:
6a:91:d3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:20 2025 by rpki-client