Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/OmgVAw8ZHFFpHCyw7LOehrOM8KA.roa
File: OmgVAw8ZHFFpHCyw7LOehrOM8KA.roa (raw, json)
Hash identifier: 6CbGQ8M2p8DqUv4lPi9kJg+A49OPSohIvq46VoGyAHM=
Subject key identifier: 3A:68:15:03:0F:19:1C:51:69:1C:2C:B0:EC:B3:9E:86:B3:8C:F0:A0
Certificate issuer: /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial: 0194258F43CE53E4967B55929459443E0285
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/OmgVAw8ZHFFpHCyw7LOehrOM8KA.roa
Signing time: Thu 02 Jan 2025 05:48:53 +0000
ROA not before: Thu 02 Jan 2025 05:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202298
IP address blocks: 195.242.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:43:ce:53:e4:96:7b:55:92:94:59:44:3e:02:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Validity
Not Before: Jan 2 05:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a6815030f191c51691c2cb0ecb39e86b38cf0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:5c:e1:92:94:81:c6:8c:ba:7c:dd:83:fb:
10:ac:09:a0:ec:ea:27:7b:7e:15:44:ae:a3:ff:44:
9e:b8:31:d1:99:27:2d:e9:ab:8c:4c:28:30:69:3b:
21:a3:b0:88:34:84:77:b1:c3:70:60:f4:9d:d0:d7:
70:a5:f6:1d:5a:92:fb:b6:69:23:d9:4a:32:cd:1c:
00:1a:4a:49:a8:0f:da:52:b0:f9:e9:dc:84:e9:bb:
98:69:80:6b:e6:13:3d:64:46:10:67:43:6d:0b:c3:
49:28:01:04:5c:b9:e4:2a:86:12:43:ed:8a:a1:e8:
a6:11:92:b1:c7:a8:e9:97:2c:79:0e:2c:e5:f2:92:
6c:7f:b9:c3:7b:a4:73:a8:67:bc:b8:8f:ea:58:4a:
e3:1b:99:da:a2:35:8b:e8:15:0f:36:86:9a:b5:10:
15:af:99:19:9b:84:84:6d:84:1f:7b:09:49:c4:3b:
6f:c8:ea:e9:90:5f:f8:9f:22:8e:58:e4:70:85:5b:
7d:a6:2f:4d:5e:34:37:a2:99:b6:d7:d3:92:df:84:
c1:2a:d4:7e:44:80:1e:43:db:ef:42:d1:b7:a0:7b:
cf:65:8d:c9:2c:58:27:ac:f6:1d:2a:d4:b0:ce:7f:
16:1e:b2:9b:39:8b:85:31:05:6e:77:81:d4:92:d3:
c2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:68:15:03:0F:19:1C:51:69:1C:2C:B0:EC:B3:9E:86:B3:8C:F0:A0
X509v3 Authority Key Identifier:
keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/OmgVAw8ZHFFpHCyw7LOehrOM8KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.100.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:c8:66:68:bf:df:dd:03:e8:44:50:ea:2c:c3:0d:03:e7:d6:
3c:26:90:f4:dd:a9:a0:95:e7:62:e9:3a:53:85:47:c3:e8:72:
d0:73:3e:98:fd:7e:1f:4d:fe:d3:4b:bf:40:80:52:9f:75:01:
9f:9e:71:6f:90:3e:31:ee:2c:a0:3a:08:ac:a9:98:47:01:a1:
52:8b:11:a8:ac:6d:72:53:aa:38:f5:33:04:5d:16:19:b0:c2:
29:08:05:f5:bb:92:f1:12:67:17:14:0f:bb:c4:23:b9:cd:e4:
26:ab:57:3e:55:74:67:7d:d4:05:bc:1c:44:94:af:d5:57:28:
aa:50:79:2d:5b:7e:4c:42:5b:5c:88:48:7b:ef:ce:5c:16:e7:
20:c0:75:9b:ae:82:96:0b:90:d4:65:bb:4c:b6:53:d3:cb:41:
48:4c:25:e4:49:7c:d6:6f:7a:7f:c5:74:ec:e7:6c:b1:0f:c6:
18:c9:ae:e8:88:01:5f:4c:df:89:6f:bf:26:11:17:b3:a8:af:
a4:38:42:8a:04:8d:aa:7c:97:92:89:c1:a1:62:e6:98:b1:3b:
3c:7f:ef:85:91:ea:40:20:57:94:e9:27:f5:80:a0:2a:d7:8d:
3c:7f:e5:59:f4:4f:e9:60:7e:5f:db:44:43:f1:56:9b:c9:f7:
d8:09:04:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:15 2025 by rpki-client