Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/3OCOSwCDa3y9iqu0OCylZw-JsZ0.roa
File: 3OCOSwCDa3y9iqu0OCylZw-JsZ0.roa (raw, json)
Hash identifier: cJbssAnGbz9pvbgU1PNdJ9XA2exd9SjijPrifOZ6Kb0=
Subject key identifier: DC:E0:8E:4B:00:83:6B:7C:BD:8A:AB:B4:38:2C:A5:67:0F:89:B1:9D
Certificate issuer: /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Certificate serial: 019421B1E5D763B4069F697AE8394E916ADE
Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/3OCOSwCDa3y9iqu0OCylZw-JsZ0.roa
Signing time: Wed 01 Jan 2025 11:48:14 +0000
ROA not before: Wed 01 Jan 2025 11:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 195.206.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e5:d7:63:b4:06:9f:69:7a:e8:39:4e:91:6a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Validity
Not Before: Jan 1 11:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dce08e4b00836b7cbd8aabb4382ca5670f89b19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:17:db:59:bf:ed:b3:73:ef:1e:9b:28:a8:
49:ea:25:d7:c7:df:58:7c:30:3a:ef:30:90:77:7b:
b3:99:64:64:32:db:bc:5b:43:91:88:46:2f:6a:5e:
3f:1a:df:45:9c:28:35:08:cf:89:5a:cf:22:72:c9:
b1:72:26:aa:a2:3e:12:29:0b:8c:6d:65:9e:0a:9f:
d0:19:d0:53:43:2a:c9:e0:5d:f7:5e:ec:5b:b4:a9:
f8:cf:b6:f3:3f:91:27:b6:cc:9a:34:5f:83:db:92:
d1:48:db:72:e3:cb:0e:c3:19:6b:8b:55:ff:9e:1f:
f4:f0:da:2a:0a:d6:0a:e6:11:8c:78:40:e6:7a:74:
bd:c1:ae:11:33:54:55:3f:7d:16:c9:30:f6:0a:7b:
b8:a5:54:4d:b5:57:5b:a8:1a:33:49:48:40:04:5c:
79:f0:67:fd:b8:0a:b8:b0:fa:d4:54:5d:5b:89:19:
37:45:4b:0e:a2:77:ec:4a:e3:8e:e8:93:bf:3c:2a:
20:df:67:fc:00:7b:24:eb:af:eb:64:d4:6f:8a:7e:
41:5f:e0:fe:24:bd:f4:45:57:7b:99:b2:6d:70:98:
48:78:20:8d:25:4c:68:ce:8b:ad:28:7f:41:fb:1d:
37:05:e7:0b:d9:b1:5d:3b:2b:18:7b:e7:e0:c9:51:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E0:8E:4B:00:83:6B:7C:BD:8A:AB:B4:38:2C:A5:67:0F:89:B1:9D
X509v3 Authority Key Identifier:
keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/3OCOSwCDa3y9iqu0OCylZw-JsZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.242.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a5:ba:f3:0e:e7:b0:d4:73:4f:f3:6a:a1:14:9c:6b:3b:7e:
98:9f:49:49:d4:59:d7:d1:01:8d:6d:73:49:ff:d6:b5:85:96:
7d:7d:db:35:00:50:73:e4:9d:e4:ab:45:b6:e3:02:d7:18:38:
08:f5:29:69:54:4c:21:b7:89:4f:70:82:8d:dc:26:c6:05:ce:
35:38:cf:71:17:7e:51:2f:31:29:32:d0:7a:fc:c4:93:df:b4:
85:62:97:c5:40:50:2e:21:dd:88:99:02:d5:a9:74:18:cd:5b:
8d:b1:98:d5:9d:b3:19:82:2c:8c:fa:8b:51:d3:90:e4:d0:09:
33:18:fe:0a:7e:5b:34:ab:94:08:36:4a:51:78:1a:03:15:51:
6b:5d:cf:b2:5c:4f:cf:4e:88:60:3c:d2:15:04:98:aa:72:bc:
e3:53:82:e3:2d:e2:c3:4b:9d:27:7f:6f:ca:68:66:df:69:84:
57:0f:83:3c:3f:63:b4:32:03:e1:e9:1a:6d:64:cf:32:b1:19:
a8:72:be:05:1d:c1:2a:05:5d:26:ab:eb:91:05:b0:2d:e9:05:
b7:c4:7b:1d:8a:56:15:88:3b:eb:ef:98:46:53:43:74:f6:7a:
b3:5e:f0:c9:91:8f:52:53:5d:84:24:a6:86:e6:fa:eb:7e:cb:
ed:28:3f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:58 2025 by rpki-client