Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/OcMN4PGYYl4NIh--L2pu14Kv2wI.roa
File: OcMN4PGYYl4NIh--L2pu14Kv2wI.roa (raw, json)
Hash identifier: y5JZ+EK3MrQ+Hieebg8h6lpRv7jQFoUhr5uq84o9xb4=
Subject key identifier: 39:C3:0D:E0:F1:98:62:5E:0D:22:1F:BE:2F:6A:6E:D7:82:AF:DB:02
Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial: 01941FFAA3F6332A5E235D99DAD3DAE16640
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/OcMN4PGYYl4NIh--L2pu14Kv2wI.roa
Signing time: Wed 01 Jan 2025 03:48:27 +0000
ROA not before: Wed 01 Jan 2025 03:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61357
IP address blocks: 141.93.0.0/16 maxlen: 24
141.93.10.0/23 maxlen: 24
141.93.10.0/24 maxlen: 24
141.93.11.0/24 maxlen: 24
2a0d:f0c0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a3:f6:33:2a:5e:23:5d:99:da:d3:da:e1:66:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Validity
Not Before: Jan 1 03:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39c30de0f198625e0d221fbe2f6a6ed782afdb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:61:8a:36:a7:d8:b1:b5:a2:fe:1a:60:e2:
bf:12:c7:97:ff:50:3b:76:c1:0c:1a:30:9f:ce:42:
d5:b4:4d:28:6d:dd:bf:e7:74:18:41:31:2d:4f:d2:
2f:34:71:e2:80:b9:4c:4c:bc:86:eb:97:44:9a:e2:
6e:3b:9a:a8:a9:de:1a:99:db:7a:e4:54:45:9f:9e:
61:e8:84:72:37:cb:c2:d9:61:5e:26:7b:c2:c5:fb:
6f:3d:45:5e:b1:40:97:3e:2d:05:f3:1a:52:0d:96:
43:e8:ef:22:20:43:7c:4c:11:15:a4:24:7b:14:55:
e3:fd:67:fc:3d:39:bd:11:15:d0:a0:50:19:e5:98:
f1:6a:8c:ba:07:44:d3:1a:73:9e:38:a7:3e:5d:e2:
26:bf:68:3d:f4:ad:82:21:3d:a0:92:c9:de:c4:e4:
ca:e1:fa:2d:e7:ff:0b:fc:2f:3c:e5:63:98:1f:04:
97:5d:2c:9e:25:30:d2:25:25:88:13:24:7a:11:e2:
71:f0:e1:48:e3:8a:49:5a:9d:3a:de:c1:54:de:6e:
0b:8e:62:6d:35:af:bf:de:05:fe:92:0c:c3:80:f9:
0e:11:d7:40:6e:b4:34:e0:af:14:0b:1d:0b:3e:24:
fc:08:37:1f:6f:c3:e3:c8:bb:5c:70:29:64:f3:6e:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C3:0D:E0:F1:98:62:5E:0D:22:1F:BE:2F:6A:6E:D7:82:AF:DB:02
X509v3 Authority Key Identifier:
keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/OcMN4PGYYl4NIh--L2pu14Kv2wI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.93.0.0/16
IPv6:
2a0d:f0c0::/29
Signature Algorithm: sha256WithRSAEncryption
04:18:81:3a:b0:28:fa:88:8d:8e:dc:7a:ab:6f:5c:a2:cc:67:
bc:e7:03:99:89:cd:99:06:16:ed:b0:04:19:66:7d:db:33:f8:
f9:d9:f0:bb:a3:9e:07:b5:40:e2:13:b7:34:f4:fc:12:6f:b2:
76:52:5f:f9:10:3f:91:56:a8:bf:8d:e9:91:80:77:d1:9c:52:
1d:8e:08:c8:15:c1:fe:e1:d1:54:7b:44:48:d1:83:f3:b1:b6:
fa:22:c7:73:0b:26:a5:66:79:de:99:f1:57:a5:03:03:8e:52:
b8:f8:23:59:46:0c:4b:65:df:1b:8e:f2:55:af:fb:21:3d:01:
1f:73:13:0d:f4:6d:e0:3c:82:36:70:03:b7:2a:26:1d:43:6b:
c5:5d:cf:c8:c2:61:1e:cd:20:5e:6f:32:1a:7e:c7:b7:96:73:
17:b9:82:6e:56:1a:61:a4:36:ac:a8:1a:02:22:0f:ba:85:7c:
4e:bd:eb:ed:cc:64:78:96:80:4e:1f:ca:ac:b6:00:5b:82:89:
cc:a5:e0:a2:c8:84:9d:a9:62:f1:ec:18:1d:91:e3:7f:bd:52:
54:93:74:4e:65:6d:2b:fe:34:c4:f9:d5:de:e9:d2:df:a5:d7:
aa:bb:c5:22:a9:cb:f6:d8:57:65:56:25:6f:9c:dc:77:3e:55:
dc:4a:a4:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:33:18 2025 by rpki-client