Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/ObT--BjZ0RTC9v8KUfNAXJErkK4.roa
File: ObT--BjZ0RTC9v8KUfNAXJErkK4.roa (raw, json)
Hash identifier: PUggAjXL6p26e7O1E2dQJLLZhDJNB05tG3qARPuO6Zs=
Subject key identifier: 39:B4:FE:F8:18:D9:D1:14:C2:F6:FF:0A:51:F3:40:5C:91:2B:90:AE
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 0194228D61DD293F5897C9F64BC23E629F05
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/ObT--BjZ0RTC9v8KUfNAXJErkK4.roa
Signing time: Wed 01 Jan 2025 15:47:58 +0000
ROA not before: Wed 01 Jan 2025 15:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 5.61.32.0/20 maxlen: 20
37.1.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:61:dd:29:3f:58:97:c9:f6:4b:c2:3e:62:9f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 1 15:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39b4fef818d9d114c2f6ff0a51f3405c912b90ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:76:4a:e7:50:98:bb:fa:2b:96:0e:ca:43:
d1:30:48:bf:bc:3f:40:7b:5f:60:b9:1a:b4:b5:3e:
4e:83:c4:af:f2:ae:ea:e2:db:60:c7:55:66:7d:d4:
d4:be:cd:a3:d8:92:8b:f0:60:67:9d:cf:bc:18:6a:
23:fb:d7:1f:b2:04:15:ae:dc:d6:7c:f4:60:93:9f:
a3:5e:27:bf:b0:58:9a:e1:89:d8:31:08:fb:cb:0a:
2f:20:a9:5d:16:32:9f:0a:1a:50:44:3c:20:4c:1b:
90:23:18:9d:86:3b:8e:14:19:57:53:fd:d5:3c:c2:
ab:d8:ee:a0:96:02:7f:48:29:0b:a2:fd:34:87:71:
70:83:ea:e2:7a:63:4f:65:b1:41:b2:a6:ae:37:26:
9b:2f:dc:67:37:55:eb:e7:27:bf:f5:fa:3d:7b:ac:
80:8f:ca:5e:eb:72:b2:b7:74:c4:27:e1:86:40:ce:
77:3b:ff:63:79:15:df:66:c1:34:4d:6c:dc:bc:fe:
cf:c3:c7:fd:fe:a1:71:30:17:e6:29:fa:d9:8a:aa:
b2:77:ad:5c:37:68:20:32:86:ee:fa:93:d5:52:6d:
d3:90:48:f3:5a:cf:96:6a:1f:f1:70:4a:eb:ff:5f:
a9:28:ac:26:78:bc:e1:57:7f:d9:0c:e5:b5:4a:c4:
d7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B4:FE:F8:18:D9:D1:14:C2:F6:FF:0A:51:F3:40:5C:91:2B:90:AE
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/ObT--BjZ0RTC9v8KUfNAXJErkK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.32.0/20
37.1.192.0/21
Signature Algorithm: sha256WithRSAEncryption
b7:2a:81:24:0c:39:dc:3e:0b:05:a8:bc:8a:dd:44:2b:6b:6b:
f3:2b:bb:0c:72:67:8a:9f:e6:66:d6:d3:37:b4:37:c9:a3:9d:
8e:c8:5f:f5:07:2c:b0:bc:2c:cb:54:9f:67:80:4b:f0:ca:44:
45:dd:cc:f6:f8:09:5e:ca:aa:e0:2d:89:5a:d7:11:df:6a:02:
03:6e:70:f0:57:b8:d3:af:51:1e:22:ad:da:98:6a:1c:9f:a0:
4e:e1:f6:34:a7:7b:14:cb:1e:b7:db:23:48:e4:c9:66:38:55:
a1:50:53:00:e0:2f:78:7d:92:57:82:ba:06:13:e6:dd:44:a2:
52:f8:3d:84:e8:f5:8f:02:ed:65:58:fc:44:4b:59:14:33:0d:
91:e0:63:be:07:53:81:a8:da:06:62:c7:e4:2c:e9:3c:1d:f2:
4c:0c:4a:65:3f:5a:8a:8d:13:52:c6:6b:ad:31:bc:9a:66:80:
0b:b4:5c:ee:d2:83:3e:d8:4a:88:85:9f:9c:b0:4b:bc:91:66:
d1:ad:79:c0:f8:67:d7:87:6b:a3:16:c4:d3:be:54:c2:3d:d4:
56:d8:2a:69:03:51:eb:7a:84:bf:ef:7c:41:df:72:67:27:23:
72:6a:8d:fa:f5:8c:c5:e7:3a:ab:66:be:e5:e9:fd:5a:35:73:
14:b4:c3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:36:37 2025 by rpki-client