Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/Oa0g679mvypviiVbNjxeVuyxhGA.roa
File: Oa0g679mvypviiVbNjxeVuyxhGA.roa (raw, json)
Hash identifier: RtDCQrB5ptBU+UbNZPr5j7d7cciy+IUJ3cqzxE+6UTA=
Subject key identifier: 39:AD:20:EB:BF:66:BF:2A:6F:8A:25:5B:36:3C:5E:56:EC:B1:84:60
Certificate issuer: /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial: 01941BFCC98A4E53ACEBFC90E80B456B5F9E
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/Oa0g679mvypviiVbNjxeVuyxhGA.roa
Signing time: Tue 31 Dec 2024 09:12:19 +0000
ROA not before: Tue 31 Dec 2024 09:12:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203698
IP address blocks: 185.12.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1b:fc:c9:8a:4e:53:ac:eb:fc:90:e8:0b:45:6b:5f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
Validity
Not Before: Dec 31 09:12:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39ad20ebbf66bf2a6f8a255b363c5e56ecb18460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:54:19:69:ab:64:26:4d:09:46:4b:94:70:
f1:bb:bb:56:01:44:4d:8d:02:21:c6:89:46:2e:f7:
34:1b:fc:13:ce:7c:4d:39:c8:39:e8:7c:70:0d:e0:
36:30:9c:86:6a:cc:f2:7d:25:04:4d:0a:bc:08:ee:
28:61:94:66:91:a5:0f:32:da:0f:7f:79:50:3f:ed:
a6:c8:8d:c3:c2:24:f1:ad:78:d8:8b:1f:2c:dc:e2:
ae:81:3e:cb:b2:d5:9d:4b:6f:17:b0:78:9e:80:e2:
a1:eb:9e:11:64:f1:c7:21:08:13:03:1c:94:45:de:
69:98:96:68:87:57:8a:27:ef:31:53:eb:69:75:d6:
2a:61:e2:a6:64:16:ce:d3:37:5c:6a:f0:45:04:a7:
c3:19:8a:b1:d7:5a:aa:bd:fc:a5:84:ff:18:b5:76:
fe:9d:d8:67:1c:28:75:8a:9a:99:0d:91:69:6e:7e:
e7:54:94:8c:78:11:3b:8e:d9:56:72:06:62:77:36:
56:ad:c3:2f:88:44:b2:4e:92:11:ee:5e:58:dc:0e:
27:26:65:4a:32:a9:dd:8d:d6:3e:03:dd:1a:ca:f0:
e2:75:06:7a:5c:6d:dc:42:00:78:75:45:3f:31:96:
cf:2e:a2:c7:eb:38:56:6d:86:5c:6a:34:fe:a9:30:
60:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AD:20:EB:BF:66:BF:2A:6F:8A:25:5B:36:3C:5E:56:EC:B1:84:60
X509v3 Authority Key Identifier:
keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/Oa0g679mvypviiVbNjxeVuyxhGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.37.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e6:88:89:d0:7a:8d:77:66:ca:0a:6d:a9:f1:e2:da:14:f0:
4e:a7:62:93:d0:93:ca:59:96:45:4a:a9:d7:2c:fb:f4:ec:60:
5a:e6:08:70:8b:78:e4:02:2c:ed:dc:a3:77:06:8f:6f:0a:fb:
9d:6a:dd:98:75:37:c8:61:d5:a0:40:df:05:01:fb:74:2d:a0:
bb:ed:08:fc:43:0a:fc:20:92:78:ad:3a:b4:66:91:28:06:0c:
d1:9c:05:dc:2f:fb:e5:e3:59:97:e7:67:4c:73:d3:9f:fa:45:
dd:58:e5:11:70:ff:3d:75:f7:8a:60:7b:99:bd:01:29:e1:b8:
38:39:56:cd:d8:d3:cb:e9:a6:17:bc:56:45:e2:2d:b9:83:ee:
db:20:15:fd:13:d5:4f:ee:94:16:87:7b:fc:1b:f8:5f:41:f6:
78:37:78:83:0d:c2:da:5a:63:79:40:ce:22:0d:d2:c5:78:14:
01:f6:ef:44:72:74:40:41:7f:e8:9b:a7:ca:3a:90:4b:3a:cc:
c5:fe:ab:75:29:f9:c3:55:a0:85:a5:d5:8c:07:3e:a9:1a:e7:
c0:1b:ac:01:ae:bd:61:13:1c:5d:68:e0:75:cf:4e:b0:72:81:
68:50:6c:d4:33:02:a7:84:7d:cd:94:a6:5c:3b:6b:e3:a0:7b:
f3:f3:df:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:22:11 2025 by rpki-client