Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/1oIbpaCQezY3ojO_1FyOqqTdOZ4.roa
File: 1oIbpaCQezY3ojO_1FyOqqTdOZ4.roa (raw, json)
Hash identifier: xL0jfaS9hmMexPJnUw6Ey9amgXZGEopiPKVKDaJnXCM=
Subject key identifier: D6:82:1B:A5:A0:90:7B:36:37:A2:33:BF:D4:5C:8E:AA:A4:DD:39:9E
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 070E813E
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/1oIbpaCQezY3ojO_1FyOqqTdOZ4.roa
Signing time: Sat 01 Jan 2022 04:03:15 +0000
ROA not before: Sat 01 Jan 2022 04:03:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 194.61.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118391102 (0x70e813e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: Jan 1 04:03:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6821ba5a0907b3637a233bfd45c8eaaa4dd399e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c5:65:9d:c9:0a:a5:9e:4a:cd:05:0a:8b:70:
41:ca:9a:dc:ab:5a:f3:01:7e:ee:d6:3d:2e:08:e8:
5c:aa:db:81:5e:f6:4f:64:69:19:3a:56:ae:a7:e7:
1e:99:cb:13:6c:76:54:ee:08:19:a6:ba:88:ec:f5:
ae:b1:24:96:71:39:7a:c3:9b:a0:4c:5d:bc:e4:90:
96:5c:de:59:42:2e:ae:25:26:77:80:73:93:22:29:
21:45:4d:5f:5a:17:1b:41:64:8f:b9:96:c1:e2:8d:
7e:42:fe:41:dd:77:c4:d4:8d:b7:9c:81:0f:b8:66:
73:44:54:6a:e1:b6:ea:ee:da:6c:e6:da:64:f0:01:
61:dc:02:1e:97:ef:c2:c2:32:2c:a7:dd:8b:55:78:
b0:00:c7:55:70:cf:d4:54:e0:be:f5:73:89:8c:59:
32:a2:94:e9:17:fd:70:7c:f0:b2:43:4e:dd:bc:57:
bc:a0:3f:92:44:2f:3d:c8:3c:32:b7:ba:28:a9:aa:
39:4a:8d:93:17:0b:56:e4:34:3a:fe:58:48:4b:5a:
8a:4d:59:ce:80:25:44:3d:21:72:3c:33:38:e4:d2:
45:00:c0:28:42:90:07:a1:d3:d6:18:bd:bb:bd:60:
ad:6b:0c:9a:7d:dd:ea:3e:29:34:2b:e1:88:19:cf:
8d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:82:1B:A5:A0:90:7B:36:37:A2:33:BF:D4:5C:8E:AA:A4:DD:39:9E
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/1oIbpaCQezY3ojO_1FyOqqTdOZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.224.0/22
Signature Algorithm: sha256WithRSAEncryption
08:58:f4:02:05:da:8a:2e:6a:e0:5c:c7:c6:4a:8b:6c:af:95:
68:cc:15:9a:ad:d7:fa:b2:5e:f1:3d:7a:c7:52:ee:ff:72:23:
2c:e5:45:94:21:f0:78:7b:60:a0:24:ca:bf:9a:ef:6e:a4:e6:
7c:ae:7f:6d:cf:1e:81:8a:05:15:88:1f:88:7c:16:13:fa:28:
bf:f9:c8:40:75:1e:26:f6:86:f9:f9:75:7e:6d:fd:9a:28:26:
36:ab:41:6a:3f:6d:c1:09:77:d7:7a:1f:16:13:3f:3a:d6:fa:
4e:87:9e:ed:55:46:94:7f:79:9e:4f:0c:11:6c:70:e2:e6:6b:
0a:7b:37:18:2c:ae:cf:45:42:4a:ff:c3:b9:b2:5b:e0:3b:1b:
fe:5c:f2:27:5a:6b:7d:b6:16:13:af:e9:bf:eb:5b:0a:17:ee:
07:ab:aa:69:9d:26:7c:b8:a8:d1:99:8a:3a:d2:8c:36:f1:c7:
e2:26:0c:f9:f9:f6:88:7e:04:49:58:ee:7e:ab:29:c7:47:cb:
22:e3:9f:ec:ce:2f:bc:05:42:42:6d:c5:2d:06:d5:da:b0:83:
1c:fa:86:ca:46:73:c6:92:32:1b:35:81:04:bf:19:95:05:e6:
36:a7:a4:35:1c:6a:a2:af:ea:b2:2d:c3:7c:b8:f0:e6:92:6b:
87:d6:6a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:59:18 2025 by rpki-client