Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ooHg4rWHmeM34qs-Ypzv4TndobU.roa
File: ooHg4rWHmeM34qs-Ypzv4TndobU.roa (raw, json)
Hash identifier: GTQkT267E9Xgxhkdknkdc8+5kUN6WhG757R5R5N1wI8=
Subject key identifier: A2:81:E0:E2:B5:87:99:E3:37:E2:AB:3E:62:9C:EF:E1:39:DD:A1:B5
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019423699E6550B9E638DF2F763CF0D27DBA
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ooHg4rWHmeM34qs-Ypzv4TndobU.roa
Signing time: Wed 01 Jan 2025 19:48:31 +0000
ROA not before: Wed 01 Jan 2025 19:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50660
IP address blocks: 93.115.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9e:65:50:b9:e6:38:df:2f:76:3c:f0:d2:7d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a281e0e2b58799e337e2ab3e629cefe139dda1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:13:e3:06:ff:10:ec:47:ee:8b:04:41:50:
5d:fe:85:55:df:d9:70:ff:7c:e8:43:ab:89:c1:76:
35:df:e6:1e:08:94:65:29:a4:79:14:7f:52:a6:9d:
3b:ab:ba:11:b6:ce:c7:2b:39:fc:d7:e9:07:ec:76:
a6:a8:95:df:ac:7d:a2:37:f2:4f:90:2c:87:93:08:
25:aa:bf:44:4f:f9:2d:43:a6:8d:65:67:64:17:d4:
78:37:03:27:4c:19:d3:e9:23:7e:a5:44:36:c7:93:
17:60:c5:7a:3a:08:8a:cb:5b:ba:5a:12:10:40:d8:
71:d9:0d:e2:c7:e0:c4:06:19:8f:fd:6f:39:d1:f7:
70:c4:de:5a:47:6c:05:67:e5:11:64:26:36:e6:15:
fa:32:8b:28:1a:4a:e3:2d:5f:47:40:2f:1f:b3:d2:
c2:bd:b7:c8:7f:d9:73:f6:17:80:84:f8:61:b9:a7:
5b:9b:d1:e2:d2:96:de:a3:31:c9:56:3d:0c:51:22:
b7:3f:e2:95:8a:1c:dd:27:f5:a0:ec:54:06:c9:00:
63:cc:cb:d2:73:fd:ce:12:9a:9a:96:00:0d:b6:5b:
d2:75:01:f1:9c:55:36:33:17:05:85:63:a8:b5:c1:
c6:1d:60:3d:d9:ad:a1:bf:11:35:9d:56:46:dc:26:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:81:E0:E2:B5:87:99:E3:37:E2:AB:3E:62:9C:EF:E1:39:DD:A1:B5
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ooHg4rWHmeM34qs-Ypzv4TndobU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.153.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f7:2b:6c:f8:7e:ae:87:a7:00:e8:b8:19:14:cc:b7:11:73:
e7:ae:0d:b2:29:0c:6b:67:ea:8e:35:b6:63:45:d2:3f:3d:d9:
2d:f9:6d:bb:3e:ca:9d:f8:85:66:de:68:bf:bc:3d:bb:86:6b:
42:23:ee:9f:b9:91:a9:38:3c:dc:5e:e9:de:80:3c:17:4b:98:
16:17:05:05:8c:ff:fb:69:58:84:88:72:df:bd:75:de:85:fc:
a4:ef:5c:6a:4c:b5:77:c1:08:01:54:78:fe:a0:b0:30:fd:e2:
a3:14:93:f7:97:9d:73:0d:22:f1:25:d3:ed:5f:13:15:d2:ed:
b7:ed:dc:49:c5:9a:0b:75:4c:18:aa:1a:79:75:b0:1b:24:6f:
e9:1f:41:e4:62:66:53:12:8e:bb:6a:23:1f:75:d1:26:5e:b7:
96:84:0e:da:3e:14:2f:4b:2f:01:4e:18:04:23:3a:9d:8e:32:
e1:7e:3f:6a:79:dd:c9:4b:f7:6d:4e:5b:a0:f6:15:ca:c2:e2:
99:7c:5f:8c:85:d9:b0:86:57:fe:88:98:4b:88:ab:a6:16:a7:
02:95:12:1e:cd:53:15:7f:0e:10:42:e1:76:27:7c:0e:51:63:
8a:5e:2e:f2:1b:98:2a:93:29:a7:2a:dc:55:1c:81:a4:e2:e6:
cb:85:6b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:05 2025 by rpki-client