Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/ob3ntGRRPE_J13nq26K0bpwJXuQ.roa
File: ob3ntGRRPE_J13nq26K0bpwJXuQ.roa (raw, json)
Hash identifier: WP/Q6sdMsGcVFHZvjZ7EHXBCoPE5LGCX+HSrCs+dXV0=
Subject key identifier: A1:BD:E7:B4:64:51:3C:4F:C9:D7:79:EA:DB:A2:B4:6E:9C:09:5E:E4
Certificate issuer: /CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Certificate serial: 01941F8C6B8C8E6E5F570D4F17D017200448
Authority key identifier: E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/ob3ntGRRPE_J13nq26K0bpwJXuQ.roa
Signing time: Wed 01 Jan 2025 01:48:03 +0000
ROA not before: Wed 01 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 194.147.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6b:8c:8e:6e:5f:57:0d:4f:17:d0:17:20:04:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Validity
Not Before: Jan 1 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1bde7b464513c4fc9d779eadba2b46e9c095ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:48:a2:5d:45:02:22:5e:3b:6d:c7:71:db:
2c:f0:55:28:f5:8e:3c:23:2d:d7:77:e0:5f:cd:c5:
88:6d:60:f2:b2:5c:71:5b:39:ab:48:aa:fd:04:ef:
7b:5c:22:29:9b:6f:b5:ef:6b:e8:ab:c8:d5:9a:8f:
af:93:e9:01:4d:57:ed:4b:31:46:be:aa:4f:c6:c6:
8b:a8:3c:fd:4e:61:46:a5:98:7f:2e:24:cb:15:4c:
93:08:12:60:b5:f1:fb:14:08:07:a3:36:0b:b0:cc:
40:b2:4f:4b:16:30:c5:be:97:20:5d:59:ea:ed:60:
c3:0e:31:39:7a:99:0c:5f:0d:46:6d:94:f8:69:88:
bd:cd:0b:1a:02:78:d4:a5:38:10:56:14:1b:d0:52:
d3:89:5d:db:e3:d6:78:8c:40:a4:a5:53:18:a7:55:
9d:d9:c3:7d:70:4f:8f:ed:79:51:5c:f7:5e:ca:6a:
44:d5:fc:aa:92:f6:40:83:37:3c:a0:06:06:0b:f3:
5d:f7:23:18:a8:ad:7e:8b:ac:5a:2e:15:e5:fd:90:
6e:96:1e:00:0c:64:4a:9d:6f:12:56:d9:cb:b3:4b:
ff:7b:ff:cc:77:1d:3d:36:0e:d7:b0:cd:4b:f8:0d:
66:36:d7:0b:f0:08:9e:b8:69:56:d0:56:67:8a:f0:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BD:E7:B4:64:51:3C:4F:C9:D7:79:EA:DB:A2:B4:6E:9C:09:5E:E4
X509v3 Authority Key Identifier:
keyid:E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/ob3ntGRRPE_J13nq26K0bpwJXuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.112.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:c6:ad:48:4d:fe:77:b5:85:8c:08:78:78:5d:21:b7:18:0c:
62:a2:1b:a0:7a:be:9a:a2:ec:45:40:54:33:86:bb:19:35:e2:
8a:42:9d:b8:c2:3a:66:38:b9:b5:3a:e8:83:c6:17:2c:22:c8:
d2:f5:06:15:dd:4e:69:67:7a:d6:6b:70:a7:d3:8c:60:f0:50:
92:4d:53:7f:4d:94:67:32:a1:f9:70:0a:a8:cc:bf:cf:50:3e:
81:00:c9:bd:b2:40:07:fa:03:48:04:a2:97:d4:4d:39:f1:2e:
89:01:6b:9a:24:a3:e7:55:db:bd:22:15:f3:75:4f:c3:45:ab:
19:50:a6:e5:52:8a:ca:48:94:ae:3e:c8:69:1e:36:36:3d:1c:
b9:e7:86:1b:4d:14:36:2f:e4:c6:c4:a1:a2:da:98:ce:d1:e1:
22:9c:6c:5f:60:e0:c6:d7:56:ea:f8:2f:47:2f:a5:9d:52:b1:
63:3c:01:db:00:ad:43:74:30:26:f4:8c:aa:01:c9:60:0d:67:
17:13:c9:03:5d:cd:bc:96:44:ae:28:00:a5:46:a3:4d:dc:60:
43:a4:37:78:ca:22:ce:a9:2d:e3:01:7d:3f:59:2d:22:d6:b0:
23:b8:fb:fc:e8:95:59:b7:47:ad:e9:94:21:12:b8:97:5a:d5:
03:17:d0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:01:51 2025 by rpki-client