Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/oCmBMF8iI8CutVf6sdX1dTs5wPg.roa
File: oCmBMF8iI8CutVf6sdX1dTs5wPg.roa (raw, json)
Hash identifier: TfgX1fiboG0xroG328eMyAxUa0ejT6atD6RIyf61++A=
Subject key identifier: A0:29:81:30:5F:22:23:C0:AE:B5:57:FA:B1:D5:F5:75:3B:39:C0:F8
Certificate issuer: /CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Certificate serial: 019421B19D81B16652AE4D8551278B8ED586
Authority key identifier: FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/oCmBMF8iI8CutVf6sdX1dTs5wPg.roa
Signing time: Wed 01 Jan 2025 11:47:55 +0000
ROA not before: Wed 01 Jan 2025 11:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57696
IP address blocks: 193.107.64.0/24 maxlen: 24
2a07:1780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:9d:81:b1:66:52:ae:4d:85:51:27:8b:8e:d5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Validity
Not Before: Jan 1 11:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a02981305f2223c0aeb557fab1d5f5753b39c0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7d:71:ab:8e:67:d4:04:a5:5e:dd:c1:bf:d9:
b0:00:e9:4a:92:b2:ed:4f:e1:0b:25:a7:f4:c4:1f:
f7:f2:b2:b2:e9:79:9e:10:21:bf:91:3e:24:ad:04:
43:98:10:cf:38:2b:f5:55:7c:b9:82:91:f1:24:be:
42:17:29:46:6d:fe:91:74:f5:32:fb:e4:51:6c:ba:
d8:0e:66:52:51:b5:68:9a:f1:e3:75:36:ff:94:f8:
00:5b:c8:e7:ac:60:fd:f7:54:6d:04:79:f5:f5:fa:
49:0e:d9:d7:15:45:73:2c:61:46:30:df:06:0b:12:
65:8a:5f:7b:58:5e:43:f4:f4:38:96:c6:d7:66:43:
95:ef:aa:5d:ef:09:9a:74:86:3d:82:83:50:9b:3d:
9b:9d:2b:9d:9b:04:85:70:ac:77:c6:47:54:0b:14:
97:b0:1a:b7:86:0d:be:a1:b9:92:b8:82:0c:1e:9c:
d1:0a:67:75:ec:73:38:00:a7:b8:19:88:3c:c5:ff:
8e:a8:ed:ac:64:fd:8e:fe:ef:ed:84:fd:b3:3a:83:
6d:e1:48:6b:58:64:d6:68:37:e2:0d:5a:c7:20:67:
f7:09:3f:0e:a8:af:49:65:b2:c6:07:1c:34:ed:86:
98:0c:73:85:21:60:bf:5c:76:a1:e2:23:f6:a3:ff:
89:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:29:81:30:5F:22:23:C0:AE:B5:57:FA:B1:D5:F5:75:3B:39:C0:F8
X509v3 Authority Key Identifier:
keyid:FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/oCmBMF8iI8CutVf6sdX1dTs5wPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.64.0/24
IPv6:
2a07:1780::/29
Signature Algorithm: sha256WithRSAEncryption
90:da:15:ba:18:13:60:35:57:ad:9f:d4:9f:8f:8a:7d:8b:f5:
82:58:cb:05:c0:cd:01:19:96:6b:f8:5b:c6:8f:62:93:37:1e:
a0:25:9d:60:bb:d7:d1:93:dc:1d:69:3b:72:3e:f3:65:e5:0d:
ab:96:f4:0b:9a:6a:05:47:4c:af:50:98:67:95:1a:4b:a3:83:
75:8e:72:7e:7d:53:fd:9d:0c:17:60:9d:2b:6f:56:d8:6d:12:
14:57:d4:53:95:e2:b4:00:7d:df:bf:23:a8:49:e4:f1:e2:26:
72:86:0e:73:07:1b:af:b1:f3:96:74:a6:47:dd:a3:ec:21:11:
76:5d:97:ce:c2:2f:45:f1:5d:c8:4e:97:6f:78:56:cc:19:1c:
c8:38:86:0c:dd:f1:02:b7:f6:e8:ed:ec:c3:9a:1b:b6:d5:62:
01:a3:50:e1:12:16:ef:73:90:84:a6:c0:b8:b4:e5:cc:32:48:
2e:65:55:db:f2:61:5e:53:ab:b5:40:f8:2c:8f:56:87:c7:47:
30:f7:cb:bc:89:54:3c:b5:c2:75:e0:21:41:bf:68:a1:04:85:
d8:18:5d:a3:2d:55:d7:6e:05:df:3a:ba:c0:62:d5:af:46:db:
8b:4d:32:8f:42:a6:bc:7b:7d:92:ce:ab:d8:12:05:1e:29:fe:
96:a2:73:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:31 2025 by rpki-client