Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/om79o73t6ugVwTVSXsmb8Es0uMI.roa
File: om79o73t6ugVwTVSXsmb8Es0uMI.roa (raw, json)
Hash identifier: 1kXIglQwWJgAJgzFjJ3Evpck99NFLbG+l6ogMNdQ4a4=
Subject key identifier: A2:6E:FD:A3:BD:ED:EA:E8:15:C1:35:52:5E:C9:9B:F0:4B:34:B8:C2
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01939B4C50AE5B0A7B399F6603C7C5E4C070
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/om79o73t6ugVwTVSXsmb8Es0uMI.roa
Signing time: Fri 06 Dec 2024 09:28:09 +0000
ROA not before: Fri 06 Dec 2024 09:28:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 62.233.36.0/24 maxlen: 24
91.246.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:4c:50:ae:5b:0a:7b:39:9f:66:03:c7:c5:e4:c0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Dec 6 09:28:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a26efda3bdedeae815c135525ec99bf04b34b8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:b8:c1:1d:16:25:62:e2:8f:ba:c3:18:36:
73:fa:80:3b:d9:3f:4a:2b:b7:0e:05:e9:68:3b:fc:
4a:39:86:18:78:cf:b9:8e:2d:3a:74:d9:85:58:00:
97:b1:f2:27:ce:19:04:63:e4:05:ac:7f:83:74:28:
32:f8:a8:f6:6f:74:a2:8d:96:ad:b0:79:d2:22:b7:
78:12:83:cf:de:9b:12:d4:db:b8:f0:1a:7e:e6:ac:
ac:d9:c7:8c:89:e1:8c:75:1f:ca:93:6d:69:fc:49:
ed:1c:0d:06:58:8e:79:d2:99:67:44:84:4a:4d:54:
7f:dd:e5:95:a3:ca:4d:98:2c:e7:84:70:ae:fc:47:
50:64:e8:6a:1e:45:03:43:c3:ce:ab:4d:e8:f4:89:
ee:ba:a2:d1:2f:fc:0e:d9:47:6a:b1:11:5c:7b:4c:
a4:61:4f:32:74:7a:f4:df:e9:c8:74:53:a0:7e:75:
f7:9f:4e:ad:1a:4b:fb:be:5f:44:20:65:3f:e8:7a:
df:27:d9:97:db:14:b6:c9:5c:6e:be:5a:87:5c:22:
56:f2:af:b8:ee:77:02:bb:96:b3:39:1d:cb:43:e7:
09:f6:fb:a4:e9:a4:14:14:40:45:51:db:54:88:26:
a2:12:5f:2e:a2:d5:74:fe:d3:45:86:2c:3f:6d:13:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6E:FD:A3:BD:ED:EA:E8:15:C1:35:52:5E:C9:9B:F0:4B:34:B8:C2
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/om79o73t6ugVwTVSXsmb8Es0uMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.36.0/24
91.246.59.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b6:c6:30:fa:07:63:fc:50:98:e2:3b:ca:e2:df:6c:32:c5:
d5:6d:e5:85:df:f8:dd:88:10:79:cd:46:8d:85:c6:cf:07:22:
58:71:08:b0:b0:c0:2c:80:9f:00:fd:24:c2:2a:15:fa:81:d2:
8b:da:13:46:98:e8:18:2d:27:06:74:43:2b:e5:39:f7:43:bd:
a0:94:fb:fa:81:c5:8b:a7:6a:8a:9f:f0:38:87:c1:3b:b5:f1:
13:30:bb:75:fb:2c:e8:9d:b1:94:0d:47:a2:24:81:e4:80:93:
e7:ca:00:04:87:f1:40:87:3c:ff:c5:ac:fc:6b:84:22:2d:6d:
83:18:69:73:10:a3:f3:fc:ad:38:49:7c:52:ea:6c:ef:30:66:
8b:56:88:0e:b3:e1:f7:97:9f:be:35:16:c0:cd:9c:88:1a:5c:
51:a3:ba:17:de:09:2c:02:52:c1:0c:24:b3:36:a0:80:6a:4f:
47:d6:bd:aa:d3:9c:72:bf:8c:2b:d6:b1:58:8f:6e:3a:5c:9a:
48:10:65:a2:81:91:fe:82:55:9c:e7:d8:4c:2e:1f:ee:49:eb:
9d:4a:96:c4:b8:1a:00:21:28:d1:d8:7a:0e:d2:32:ea:e6:69:
67:9a:0b:c3:7b:20:2e:ba:87:b1:be:1c:a3:42:87:4e:4e:71:
ff:f0:bf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:22 2025 by rpki-client