Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/OW4gp2pM3Cn0hQw10Qy5ZXKaWok.roa
File: OW4gp2pM3Cn0hQw10Qy5ZXKaWok.roa (raw, json)
Hash identifier: iuq6/QV3l3hvs9FmkGJh3GnqU/CQ9A049Iob+yz2Lzw=
Subject key identifier: 39:6E:20:A7:6A:4C:DC:29:F4:85:0C:35:D1:0C:B9:65:72:9A:5A:89
Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial: 019473BDCE69857C08F4233ADF14C6B83BE1
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/OW4gp2pM3Cn0hQw10Qy5ZXKaWok.roa
Signing time: Fri 17 Jan 2025 10:10:06 +0000
ROA not before: Fri 17 Jan 2025 10:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 131.211.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:bd:ce:69:85:7c:08:f4:23:3a:df:14:c6:b8:3b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
Validity
Not Before: Jan 17 10:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=396e20a76a4cdc29f4850c35d10cb965729a5a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:d9:33:58:19:ee:be:55:ee:2e:e1:40:ee:
9a:3c:5a:d3:d0:b9:35:94:eb:54:75:05:ed:2b:85:
79:52:75:a4:05:de:00:e4:14:73:b5:71:72:ba:a0:
50:30:cd:3d:23:9e:2e:52:50:09:65:00:14:1c:9e:
ea:19:2e:8f:43:57:6f:02:52:c7:89:a3:6a:0b:32:
87:6b:c1:05:cb:c6:d1:92:cd:f0:17:b4:cf:de:27:
e9:a7:3c:30:59:6d:63:60:e6:43:91:b3:7a:e9:7d:
d9:78:c6:09:61:77:12:70:61:53:37:7d:3a:8f:d9:
0c:36:5b:02:13:0d:bf:4e:98:16:8b:41:f0:9c:7f:
9b:af:52:0d:2c:e0:f9:a2:8c:c4:25:a1:e5:c3:9e:
0a:83:66:5e:c3:09:16:20:9d:6a:9b:d9:b2:68:7b:
a7:12:86:51:e4:9b:9b:50:4f:20:af:e7:f3:e9:1a:
dd:50:5b:e7:42:0e:4a:31:e9:60:88:94:4e:6e:63:
96:af:30:d2:a8:e5:c8:ab:8b:da:aa:9b:4b:ff:b5:
d0:cb:fd:93:3f:e2:e2:fa:1a:3b:af:48:1a:91:1f:
f4:e4:df:9f:11:21:9c:47:a3:7b:e9:62:bc:ec:b7:
81:6d:73:c9:2f:6f:8f:d7:e8:b1:fd:44:3d:3f:79:
75:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6E:20:A7:6A:4C:DC:29:F4:85:0C:35:D1:0C:B9:65:72:9A:5A:89
X509v3 Authority Key Identifier:
keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/OW4gp2pM3Cn0hQw10Qy5ZXKaWok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.211.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:19:84:d9:47:73:9d:c9:ea:d8:05:9b:87:4e:73:7e:71:0e:
08:21:b2:6c:7b:c2:80:b9:2c:50:1d:ef:2e:55:73:00:77:c8:
55:80:fa:29:e1:5e:32:de:07:43:97:10:71:a2:e2:97:92:6e:
bc:6e:59:a8:e7:c4:e8:b4:a2:75:f3:c4:44:b4:92:2f:18:0b:
fb:31:a0:30:b8:e4:75:ec:f9:78:40:a0:c0:56:6b:ce:e6:fb:
82:71:46:41:fd:a3:33:ca:64:40:d9:bb:3d:e4:3f:7d:a4:c2:
f4:f7:4d:4e:33:12:69:f5:1d:fd:48:68:66:32:cc:56:47:29:
d6:59:f9:03:be:6d:52:22:35:d5:8e:a6:00:6e:7d:5b:2a:6c:
db:a8:eb:72:d8:73:4a:24:7b:60:db:82:14:88:44:76:6f:9a:
10:a4:50:92:2a:da:e7:d1:7e:78:01:e7:c9:bf:9f:cd:ff:d0:
d1:e0:9f:9a:3a:71:ee:c6:3e:e0:2e:29:04:29:25:4e:f0:a8:
be:44:a8:d8:60:97:59:7c:6b:fa:e4:a8:18:7b:3c:9f:ff:94:
ac:0f:a2:ab:f7:12:2a:4c:93:7b:65:01:15:85:61:40:16:41:
68:19:87:b0:dc:58:c2:38:d2:3d:42:f9:6d:f7:67:d5:89:5e:
cc:09:1d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:19 2025 by rpki-client