Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/OcsKAT2NPT0ZOF4-_8aYdFedfrQ.roa
File: OcsKAT2NPT0ZOF4-_8aYdFedfrQ.roa (raw, json)
Hash identifier: hRZG/6yJi8ntHxlEybLhU4Ft+uUUaPLYRTeNmVj2zdc=
Subject key identifier: 39:CB:0A:01:3D:8D:3D:3D:19:38:5E:3E:FF:C6:98:74:57:9D:7E:B4
Certificate issuer: /CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Certificate serial: 019425FD2CB2FBE8BE94CE3F7DBCA20A308A
Authority key identifier: 33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/OcsKAT2NPT0ZOF4-_8aYdFedfrQ.roa
Signing time: Thu 02 Jan 2025 07:48:56 +0000
ROA not before: Thu 02 Jan 2025 07:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12859
IP address blocks: 194.53.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:2c:b2:fb:e8:be:94:ce:3f:7d:bc:a2:0a:30:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Validity
Not Before: Jan 2 07:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39cb0a013d8d3d3d19385e3effc69874579d7eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5f:bd:1e:b0:08:65:4b:71:2b:ec:59:69:d1:
d9:b2:fa:0a:8f:79:5c:1c:39:96:22:51:8b:0a:e6:
c6:38:83:ea:74:db:3c:f1:17:a4:14:a4:15:11:ae:
c7:b6:70:aa:32:e6:df:a0:ba:43:d7:6c:92:39:f1:
c7:b4:74:5b:2d:df:26:ed:1e:a8:9f:14:d3:36:9f:
4f:48:80:a2:7d:11:f2:a2:7d:44:f4:e8:cd:02:dc:
54:4a:38:f1:88:e5:a5:3d:11:1b:45:c0:ab:e3:18:
33:66:57:62:2f:64:9b:ad:e5:7a:de:75:35:cf:8e:
54:ae:1f:4c:5b:95:e9:85:dd:b0:da:21:6f:91:62:
4c:f8:71:47:41:f6:1e:de:23:ec:8a:a2:1c:b3:f2:
46:3d:c9:49:34:36:e6:90:9a:a1:24:85:9a:44:ff:
e1:74:0f:6c:f3:38:9f:63:32:1d:6e:d0:1e:3e:e9:
c7:8a:16:6f:26:fd:fe:18:7e:2b:71:a6:cf:ee:04:
93:76:59:2a:1d:6e:e9:a8:da:f9:43:1a:fe:4a:96:
bf:03:7f:96:e4:9a:5a:00:08:e0:16:a8:23:5e:0c:
0f:7e:6e:51:a9:2e:72:28:66:1d:c2:12:92:9e:b5:
58:9e:52:eb:8a:58:d0:e9:0f:a8:97:1d:92:f7:e8:
2e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CB:0A:01:3D:8D:3D:3D:19:38:5E:3E:FF:C6:98:74:57:9D:7E:B4
X509v3 Authority Key Identifier:
keyid:33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/OcsKAT2NPT0ZOF4-_8aYdFedfrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.0.0/24
Signature Algorithm: sha256WithRSAEncryption
25:af:38:af:9a:a8:21:c4:50:ee:63:ad:1d:7a:a9:66:65:df:
86:a2:1b:d6:4d:16:c4:32:27:50:9d:b2:1b:70:09:81:8d:9c:
2d:71:8f:7f:9d:31:19:52:22:da:5f:62:17:6e:5a:47:ce:eb:
f5:4d:24:da:02:4c:c9:ec:67:74:44:06:27:aa:34:00:c1:5e:
aa:d0:5e:38:08:b9:c2:d8:5f:d0:ab:b1:fa:9b:81:cb:63:6d:
84:ed:99:60:c9:06:a7:93:8a:86:8f:c8:61:11:5f:e2:d5:95:
6c:ad:c8:64:02:aa:5e:b1:93:eb:3a:0b:5b:10:da:4e:83:08:
3b:d2:df:3d:f9:e2:5e:7b:37:c4:01:6c:81:2b:d0:ad:c2:59:
28:f0:9a:ea:e5:47:1a:c2:4c:01:73:2d:35:8b:d4:2d:43:54:
b0:9e:e3:79:f6:c9:66:ea:5c:b7:d1:da:8b:d3:ff:03:e3:78:
95:f3:0f:a1:9e:9f:4f:d4:08:88:fe:8b:d9:84:99:d5:e3:35:
88:c5:e6:79:a0:16:47:e5:1e:b9:85:5d:1a:2e:0f:db:4e:7d:
ba:84:b0:04:8b:42:89:e7:f2:92:c9:3f:22:af:e8:50:54:a7:
8b:76:fb:6a:3f:96:51:49:b0:39:8a:8b:ae:fb:69:ce:e8:53:
1b:6f:f2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:01 2025 by rpki-client