Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/OrbivPqblucmH6V35kB0L5AKtbo.roa
File: OrbivPqblucmH6V35kB0L5AKtbo.roa (raw, json)
Hash identifier: SODTTq9zugNEf4h9ojClnLPteVFqsDkyCF3C2PbsV7M=
Subject key identifier: 3A:B6:E2:BC:FA:9B:96:E7:26:1F:A5:77:E6:40:74:2F:90:0A:B5:BA
Certificate issuer: /CN=68c12ffa627f0d1b834c1bc91e476dce5a955dbc
Certificate serial: E7EFFE
Authority key identifier: 68:C1:2F:FA:62:7F:0D:1B:83:4C:1B:C9:1E:47:6D:CE:5A:95:5D:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/OrbivPqblucmH6V35kB0L5AKtbo.roa
Signing time: Sat 01 Jan 2022 05:04:45 +0000
ROA not before: Sat 01 Jan 2022 05:04:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 94.103.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15200254 (0xe7effe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c12ffa627f0d1b834c1bc91e476dce5a955dbc
Validity
Not Before: Jan 1 05:04:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ab6e2bcfa9b96e7261fa577e640742f900ab5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:65:a1:f7:0c:6a:3e:94:09:dc:3f:df:3e:
ef:1e:73:2d:cc:a6:3f:fc:64:d6:8c:04:bc:2f:32:
6d:9e:78:10:37:51:9b:b1:0e:3e:a6:b0:ba:b1:cb:
af:c2:52:5d:43:d9:61:57:e2:2d:d8:ad:09:35:b4:
ed:7a:21:11:89:4c:02:78:fd:a4:e9:00:a1:a7:a1:
34:a0:45:0d:97:f4:5c:64:a4:9c:b5:1c:d5:46:cb:
48:d0:1d:32:7a:9d:7a:7b:ce:0c:76:bf:8b:aa:d9:
8d:c5:e4:62:bd:49:5d:37:65:a2:b5:47:ef:b0:e5:
be:60:9b:59:80:32:c0:e5:91:04:1f:96:42:08:10:
7f:ca:6b:dd:b7:57:eb:c7:7b:9b:c9:94:c5:5f:0b:
7e:33:00:24:d8:38:a1:88:6a:81:54:8a:01:24:ea:
14:22:27:8b:1d:d4:78:51:9c:13:2c:d0:1b:36:e6:
9c:26:dc:c1:e2:ea:91:c7:39:87:ef:df:27:62:b3:
a0:e8:97:04:48:b3:d8:41:f8:84:a7:6d:ad:fb:fe:
97:e2:31:b9:f3:60:f8:13:41:a3:e9:d0:d2:20:48:
b8:4a:8e:1d:d7:98:23:c2:fa:03:f6:ce:ca:71:39:
5a:da:7d:53:53:70:d5:ea:52:1f:bc:95:00:64:7d:
c3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B6:E2:BC:FA:9B:96:E7:26:1F:A5:77:E6:40:74:2F:90:0A:B5:BA
X509v3 Authority Key Identifier:
keyid:68:C1:2F:FA:62:7F:0D:1B:83:4C:1B:C9:1E:47:6D:CE:5A:95:5D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/OrbivPqblucmH6V35kB0L5AKtbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.184.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7e:de:d3:3f:91:95:3b:ad:69:ae:7d:8c:75:d1:eb:2a:42:
f8:0c:a7:19:b2:0d:28:02:94:a2:6e:f6:17:95:47:24:f8:11:
1f:ee:d0:63:a3:03:f5:90:3e:5d:0e:26:c9:a5:b1:c9:73:2d:
27:68:90:3c:ce:01:cf:36:a6:d6:4b:7a:53:9b:1a:08:7b:91:
22:fe:03:aa:ea:bf:dd:c5:a0:42:6e:8c:6c:e3:6b:18:5c:b2:
73:0f:e8:02:82:f4:a6:06:3c:83:bb:ad:e1:fb:34:eb:3d:9e:
71:8c:29:49:24:a1:fe:1e:67:93:f3:35:1c:24:e1:cd:1e:44:
12:fe:3e:74:8f:9f:65:52:9e:39:05:ee:fd:e5:54:71:83:0b:
2b:8d:30:ff:8e:e4:8f:c8:86:02:7d:64:7f:e0:cc:98:9b:a2:
59:43:14:ea:61:43:98:47:a4:63:cf:f0:bf:35:25:00:bf:9f:
56:dc:ac:ab:50:80:fd:f5:64:b0:d8:97:43:e7:38:74:ea:fb:
7a:1b:a3:f7:12:9e:11:cd:65:e8:30:98:a4:95:d8:12:a4:f2:
e5:11:98:65:d6:eb:17:f9:10:68:3c:dd:82:ce:4c:62:d1:4b:
90:66:27:2e:f4:2d:81:2e:ff:f6:d2:54:26:5f:6b:c7:33:ee:
e5:63:78:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:01:06 2025 by rpki-client