Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/OjmUL4PXPE4u_tFLkR-mJ7_Xk10.roa
File: OjmUL4PXPE4u_tFLkR-mJ7_Xk10.roa (raw, json)
Hash identifier: ApL4REK4hvDckXMTbDtqJigIASndEdVI9SPkVd5oDgQ=
Subject key identifier: 3A:39:94:2F:83:D7:3C:4E:2E:FE:D1:4B:91:1F:A6:27:BF:D7:93:5D
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD26F71D452469CD5F87DD28BE5FB1
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/OjmUL4PXPE4u_tFLkR-mJ7_Xk10.roa
Signing time: Thu 02 Jan 2025 07:48:55 +0000
ROA not before: Thu 02 Jan 2025 07:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205659
IP address blocks: 45.43.167.0/24 maxlen: 24
104.233.12.0/22 maxlen: 22
104.233.24.0/23 maxlen: 23
104.233.26.0/24 maxlen: 24
104.238.10.0/24 maxlen: 24
104.239.10.0/23 maxlen: 23
104.239.75.0/24 maxlen: 24
104.239.76.0/23 maxlen: 23
104.239.78.0/24 maxlen: 24
104.239.80.0/23 maxlen: 23
104.239.104.0/24 maxlen: 24
104.239.105.0/24 maxlen: 24
104.239.106.0/24 maxlen: 24
104.239.107.0/24 maxlen: 24
104.239.111.0/24 maxlen: 24
104.239.124.0/23 maxlen: 23
104.239.126.0/24 maxlen: 24
216.173.76.0/24 maxlen: 24
216.173.82.0/24 maxlen: 24
216.173.96.0/22 maxlen: 22
216.173.102.0/24 maxlen: 24
216.173.106.0/24 maxlen: 24
216.173.107.0/24 maxlen: 24
216.173.110.0/24 maxlen: 24
216.173.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:26:f7:1d:45:24:69:cd:5f:87:dd:28:be:5f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a39942f83d73c4e2efed14b911fa627bfd7935d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:ee:33:d1:32:4a:e4:cd:5d:68:66:1f:ef:
4d:20:04:27:20:cf:54:59:b0:04:33:6e:f5:e9:a1:
34:92:e0:81:52:dd:db:42:04:61:90:5b:45:d2:40:
3d:b6:7a:ab:22:18:d8:22:19:18:b1:f9:32:27:75:
f5:c1:c3:c6:16:c4:1c:07:64:95:70:ce:94:13:53:
27:72:16:a4:03:f0:b1:92:b4:6a:56:f5:17:42:e4:
1c:93:31:ac:62:8b:8a:2a:96:4e:82:6d:80:8d:57:
e8:ec:0c:2b:99:58:04:08:56:ee:f0:10:02:7e:15:
f5:1f:41:a5:da:5b:73:d6:64:c6:5a:d3:9b:a8:d9:
a8:f2:b7:33:6e:e7:d8:b6:3f:e2:31:1a:f2:cf:69:
23:ee:ef:58:b3:70:33:dc:07:fb:a5:9f:ab:0d:b5:
14:9d:cb:1f:7a:30:f2:2d:d2:24:89:41:89:54:77:
33:07:22:90:23:c2:19:85:e0:df:ba:27:5d:5b:26:
57:3e:fc:07:f8:93:c4:7e:70:e9:d4:0e:74:f1:e2:
63:f4:89:3d:45:f9:aa:d9:d9:d1:69:fa:64:b6:7d:
e5:5a:2a:81:de:8c:ae:d0:cb:50:11:ca:62:d9:28:
30:b9:62:e8:41:0d:fb:a1:4b:52:11:ff:7c:8a:7d:
8d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:39:94:2F:83:D7:3C:4E:2E:FE:D1:4B:91:1F:A6:27:BF:D7:93:5D
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/OjmUL4PXPE4u_tFLkR-mJ7_Xk10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.167.0/24
104.233.12.0/22
104.233.24.0-104.233.26.255
104.238.10.0/24
104.239.10.0/23
104.239.75.0-104.239.78.255
104.239.80.0/23
104.239.104.0/22
104.239.111.0/24
104.239.124.0-104.239.126.255
216.173.76.0/24
216.173.82.0/24
216.173.96.0/22
216.173.102.0/24
216.173.106.0/23
216.173.110.0/24
216.173.120.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c0:12:b9:47:42:71:83:d3:2a:47:81:26:62:aa:08:88:c7:
30:c6:98:a9:e4:ed:88:90:52:c9:1d:dc:71:54:0a:6d:39:c7:
b8:48:64:d5:a3:5f:88:de:7a:17:ab:45:d7:44:47:94:89:4a:
5a:c9:4d:eb:1b:97:7a:fb:cf:8b:2c:b5:9d:75:21:e6:3a:94:
2d:47:37:40:c2:3d:07:4d:13:ed:b4:66:88:29:31:31:dd:40:
e7:93:e1:60:0b:82:0e:1f:ca:31:43:26:62:49:04:38:de:75:
73:2b:67:49:56:be:33:c1:3b:89:7c:5e:71:70:52:89:21:5b:
5f:0a:35:8a:76:30:2b:7e:97:4d:14:1f:f9:0c:7e:0e:db:8c:
a5:d1:42:95:e8:aa:fa:cb:63:18:a1:10:01:ab:47:f3:e6:c5:
e2:45:0c:01:fa:f2:c4:b0:c7:b5:20:24:47:0c:6b:81:3d:a4:
71:83:29:fe:d5:86:81:b2:3a:ba:60:b4:30:ca:1c:fe:a1:60:
04:ae:5f:0e:62:e1:04:34:a9:b5:7b:44:c9:63:2c:83:9f:3e:
b7:90:17:e6:bd:3a:07:f0:69:bd:b0:9c:fa:d4:27:f5:84:a9:
47:3e:ab:cc:4d:bc:d2:5a:a2:b3:29:ac:f0:1d:87:86:c3:a7:
ba:bd:70:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:37 2025 by rpki-client