Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/oFSBRj33665d5YAokVRWa7tObUA.roa
File: oFSBRj33665d5YAokVRWa7tObUA.roa (raw, json)
Hash identifier: q6t2tZyNypzSEW4SaiqrvLTavpWbpUR9zN70CNvQfRA=
Subject key identifier: A0:54:81:46:3D:F7:EB:AE:5D:E5:80:28:91:54:56:6B:BB:4E:6D:40
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0194228D9D6990B15FAE78391972663A0A75
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/oFSBRj33665d5YAokVRWa7tObUA.roa
Signing time: Wed 01 Jan 2025 15:48:13 +0000
ROA not before: Wed 01 Jan 2025 15:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35509
IP address blocks: 195.155.104.0/24 maxlen: 24
195.155.105.0/24 maxlen: 24
212.253.107.0/24 maxlen: 24
213.74.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:9d:69:90:b1:5f:ae:78:39:19:72:66:3a:0a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 15:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a05481463df7ebae5de580289154566bbb4e6d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:90:49:a8:2f:8b:d3:79:11:c4:1c:b9:9c:
ce:8f:4a:42:03:e3:6c:65:95:85:99:0e:17:0c:23:
f6:98:3f:8d:d0:b5:fe:5b:77:4c:ae:44:a8:a3:49:
9c:d1:98:eb:c3:01:14:8a:ee:e9:27:55:1b:40:c3:
ed:a5:c8:0d:f6:6c:e6:66:02:4b:99:5c:8d:6d:0d:
13:1e:fe:64:bf:3f:54:fb:46:3c:00:51:4e:e0:1b:
21:af:d7:10:89:c8:2c:57:66:85:15:83:9b:25:39:
d8:e5:7b:29:90:f1:7c:9f:1f:22:91:8f:f7:59:ab:
c2:ed:5b:d4:8e:ee:32:19:0b:bd:75:83:37:bd:dd:
e9:77:38:8a:45:59:fd:83:a0:19:df:71:52:f4:91:
b7:30:98:e9:ec:0c:80:a9:28:44:2c:93:25:23:47:
f2:76:89:56:4c:bc:61:87:c6:29:43:2b:2d:48:38:
eb:1f:25:49:f0:e4:02:bb:3d:41:c8:d4:3c:0c:2a:
8e:e7:c6:ba:fb:c0:b4:c8:55:f6:c4:d0:68:14:25:
83:a9:22:15:3d:d8:76:97:b9:ba:79:28:8f:5a:07:
1f:96:f3:05:d0:05:1c:9c:b7:2a:2c:0c:07:5a:c1:
40:7c:99:4b:4e:89:3e:8d:57:2c:e5:f6:7d:68:a6:
2a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:54:81:46:3D:F7:EB:AE:5D:E5:80:28:91:54:56:6B:BB:4E:6D:40
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/oFSBRj33665d5YAokVRWa7tObUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.155.104.0/23
212.253.107.0/24
213.74.80.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d4:93:cf:79:2e:ec:8f:00:2b:11:ec:87:61:75:25:d5:65:
29:12:64:9e:67:d7:98:af:df:47:29:ad:43:36:6c:32:86:09:
93:b5:94:5a:bd:c4:d2:f4:a4:b9:96:c6:8f:13:c6:e9:a4:3f:
97:f4:29:70:78:18:cb:68:7e:16:57:c0:f0:17:d5:43:c4:e9:
7c:cc:8c:f4:1d:17:89:d1:98:42:71:27:c1:17:16:6f:1a:29:
e6:08:cb:53:e8:33:20:1a:41:15:e9:40:97:17:5d:50:0e:2d:
eb:b4:7b:f3:98:9e:46:78:97:a3:c7:ba:c4:66:37:aa:22:1b:
56:af:10:30:4c:a7:d2:21:af:d8:07:60:cf:18:1e:78:61:16:
05:a2:8e:7c:cf:56:db:a0:4a:ee:cf:c6:03:14:a3:1d:f9:ff:
7b:50:9f:2f:03:b1:86:36:57:18:82:8d:3e:6e:cb:60:6b:41:
aa:d3:7f:dc:c9:ce:33:c2:bb:4c:94:6c:c7:59:c3:b4:d7:60:
2c:5a:1e:1a:d5:ca:0f:f9:b0:d7:73:f9:80:76:9f:7f:7f:03:
b9:77:dc:fd:78:74:ce:f1:57:1a:07:05:2c:29:b9:32:ee:8b:
b4:a5:97:88:45:f2:0c:ea:53:55:7d:fa:f4:42:4c:b7:63:79:
fa:13:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:08:36 2025 by rpki-client