Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/Ot-7HwRhwiw981jUp6UvYNL9PLM.roa
File: Ot-7HwRhwiw981jUp6UvYNL9PLM.roa (raw, json)
Hash identifier: EcugWxOIZt454G3Fv0xdCGE/JxfCxOFaDoevKhDUOCw=
Subject key identifier: 3A:DF:BB:1F:04:61:C2:2C:3D:F3:58:D4:A7:A5:2F:60:D2:FD:3C:B3
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0193FBCDF57E7CD9EAFA5A4FDEBA87BB0B23
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/Ot-7HwRhwiw981jUp6UvYNL9PLM.roa
Signing time: Wed 25 Dec 2024 03:13:18 +0000
ROA not before: Wed 25 Dec 2024 03:13:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 128.65.172.0/22 maxlen: 24
188.214.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fb:cd:f5:7e:7c:d9:ea:fa:5a:4f:de:ba:87:bb:0b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Dec 25 03:13:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3adfbb1f0461c22c3df358d4a7a52f60d2fd3cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:aa:9e:ac:b7:8a:c7:6b:a7:30:1c:0f:51:c9:
24:c4:f9:be:cc:6b:f0:51:8b:ad:40:91:18:35:4c:
6b:9c:79:58:45:6a:83:bb:81:0c:9b:4e:de:13:de:
18:24:46:c9:0a:e9:0a:07:a0:42:59:48:38:eb:42:
c1:01:37:8f:a5:88:a0:c0:32:32:38:03:e3:56:f9:
83:cd:6e:b9:03:bf:f4:a8:b4:30:a2:91:df:37:fe:
20:f2:18:10:79:ce:9c:f1:db:fc:3b:1e:3b:c3:5e:
77:0f:b1:fc:3f:ed:10:6b:c2:32:c3:5a:3b:53:a3:
b1:b9:3e:9c:f0:d2:30:44:d3:09:aa:c4:91:e0:75:
90:a9:de:98:bc:a6:03:79:bc:ec:5e:5b:07:ee:fa:
50:9d:99:7a:a2:e6:96:34:7d:8a:9b:43:45:52:e5:
82:8d:7c:6f:7e:32:ea:5d:a5:7b:4e:b7:f3:23:f1:
00:68:f8:a6:84:94:e5:53:ed:97:c7:ae:50:82:27:
ac:80:4c:91:a8:24:10:1f:99:d7:73:dd:fa:31:fb:
04:fc:f6:99:07:5f:b8:46:d4:11:40:51:00:aa:d4:
08:a8:4a:5e:53:92:9a:63:f0:89:b6:7c:20:49:4b:
fb:45:c0:b0:53:9a:8e:7b:0d:46:d2:a3:98:58:e1:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DF:BB:1F:04:61:C2:2C:3D:F3:58:D4:A7:A5:2F:60:D2:FD:3C:B3
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/Ot-7HwRhwiw981jUp6UvYNL9PLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.172.0/22
188.214.234.0/23
Signature Algorithm: sha256WithRSAEncryption
52:27:33:7c:4c:e2:31:8d:1b:9c:02:6b:02:ec:7d:5a:78:76:
35:14:7d:75:fb:23:8e:41:5e:f2:93:98:f1:7c:cc:14:9f:d7:
86:7f:16:07:7d:fd:a8:2f:28:79:e4:29:7d:e0:d0:a5:e6:45:
f3:8e:74:8d:73:b7:c6:3f:7f:20:b2:e4:1b:b5:31:e8:51:2a:
71:12:2a:cb:7e:69:f1:a8:a0:f5:49:a1:4c:57:41:45:06:ac:
20:c0:05:02:86:86:f0:57:e4:a7:f4:fe:0b:45:dc:13:25:d4:
a6:c5:bd:de:e9:33:d7:a8:71:b4:8b:75:14:20:80:09:24:f8:
20:b8:52:f1:b6:64:9d:f8:51:c8:45:a9:72:0c:e9:b6:86:de:
0f:9c:69:b4:d9:42:20:44:e8:32:eb:41:10:11:93:e6:fd:ee:
43:eb:e9:95:09:fe:0e:0a:68:15:f4:4c:81:bb:93:27:2a:ea:
41:f4:04:96:f0:10:a6:e8:27:55:3c:8d:c2:dc:5e:9d:15:da:
47:19:b8:42:05:5b:a7:00:18:10:09:0e:e4:17:66:cb:c9:bb:
fe:86:8c:dc:01:56:f2:d8:5a:14:4e:35:c1:35:b8:0f:8c:16:
07:ad:3a:85:47:96:92:e6:7f:da:a3:a9:a9:f4:c5:a2:06:99:
21:b8:66:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:11:22 2025 by rpki-client