Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/oeejnnEaMW40kAD0os79-L9Olv8.roa
File: oeejnnEaMW40kAD0os79-L9Olv8.roa (raw, json)
Hash identifier: Gvc/AI8UECrR+ZR7n6+DgnfVkthLJTkqDD0SmDPbhaE=
Subject key identifier: A1:E7:A3:9E:71:1A:31:6E:34:90:00:F4:A2:CE:FD:F8:BF:4E:96:FF
Certificate issuer: /CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
Certificate serial: 019421B22592F8DFDAE1607E9530F4EF480E
Authority key identifier: 9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/oeejnnEaMW40kAD0os79-L9Olv8.roa
Signing time: Wed 01 Jan 2025 11:48:30 +0000
ROA not before: Wed 01 Jan 2025 11:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20668
IP address blocks: 194.32.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:25:92:f8:df:da:e1:60:7e:95:30:f4:ef:48:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
Validity
Not Before: Jan 1 11:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1e7a39e711a316e349000f4a2cefdf8bf4e96ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:2c:d8:d6:64:b3:f1:6d:bf:d7:77:97:9d:
0a:ce:b6:58:57:ad:1b:ab:f6:32:d4:60:7b:60:48:
7b:df:ce:de:bf:27:f0:36:c3:10:bb:51:02:cc:31:
f7:45:0b:12:0c:a4:f3:96:15:3c:d1:44:f0:7d:be:
7c:3f:8d:58:d5:1a:80:ec:6d:da:ce:50:25:1c:a3:
3b:69:00:1a:cf:a3:12:94:77:94:b9:e2:6a:af:dc:
cf:b4:52:85:b4:38:fc:c2:9b:71:d2:b1:d7:68:0e:
bc:4e:63:d9:d7:d5:d3:de:8c:f0:cd:c1:40:f9:47:
e3:0c:f7:cd:7b:6f:a3:8b:cc:d0:e4:67:56:ba:53:
0f:30:2d:6c:97:38:4e:7e:80:f5:be:9a:cf:54:4b:
3c:c6:86:8d:78:80:3b:27:83:d0:1b:ea:91:7a:4f:
cd:64:5a:1c:a4:d5:8f:80:cc:4b:f1:fd:87:a3:c9:
d8:59:41:a2:4a:f6:b9:bd:b4:4c:46:ab:62:f1:68:
63:49:c8:1b:99:04:1d:04:8d:3f:44:65:99:3f:19:
b2:e1:8a:67:e2:c4:cb:ce:f7:08:b1:61:02:39:0b:
69:0b:8c:a7:c0:56:0e:94:99:26:93:c2:ee:4d:2d:
68:36:df:f1:d3:e1:8a:c3:cf:9c:60:e4:28:42:fe:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E7:A3:9E:71:1A:31:6E:34:90:00:F4:A2:CE:FD:F8:BF:4E:96:FF
X509v3 Authority Key Identifier:
keyid:9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/oeejnnEaMW40kAD0os79-L9Olv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.162.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:5f:2d:c7:12:96:d1:94:cb:55:39:d1:78:dd:b8:ab:33:92:
1b:ae:ef:c2:3a:7b:46:6b:8b:23:3c:ab:2e:93:51:00:7d:54:
4a:87:44:4f:9e:4b:58:b4:93:70:b6:7c:03:25:39:6a:0c:1d:
3e:55:1a:ca:da:f0:55:44:d2:13:5e:e6:84:f2:42:ba:4c:88:
c2:38:6a:1e:2f:93:d9:bd:89:e8:37:84:a1:30:b9:e0:10:ae:
68:06:30:99:70:3d:87:2b:92:d7:40:a2:fa:0e:ee:98:70:63:
58:be:64:02:99:59:84:7b:74:ff:1b:6a:2a:eb:87:f6:34:55:
2c:3e:64:77:98:0a:33:28:d1:08:89:ab:01:76:ce:87:76:2f:
84:86:af:b9:43:39:37:0a:bd:5f:06:cc:3c:22:00:17:92:1a:
29:7e:cc:48:a8:a1:7c:28:5c:8d:bb:97:b5:e1:8f:7f:94:2a:
39:91:db:10:09:a6:d4:d2:8c:97:46:75:8b:5d:08:d0:da:33:
37:5b:d1:4e:57:19:6d:f1:4c:39:f2:65:62:e8:ee:c1:62:0f:
68:df:de:01:a9:5b:99:82:22:48:52:a0:c3:68:ac:ec:5d:34:
1e:cb:17:a0:7c:e7:ab:08:86:fe:70:4a:d3:02:3e:fd:56:8a:
7e:c0:c8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:26:47 2025 by rpki-client