Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/OGaXmBMfcWvZ6ltHdLZ9jEV9lOE.roa
File: OGaXmBMfcWvZ6ltHdLZ9jEV9lOE.roa (raw, json)
Hash identifier: eJOYvtDNe3FhBqS6Vln19RuplvlaDGsRE5/7K05uBUA=
Subject key identifier: 38:66:97:98:13:1F:71:6B:D9:EA:5B:47:74:B6:7D:8C:45:7D:94:E1
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01942827FBA357CF29E65807224245125FA8
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/OGaXmBMfcWvZ6ltHdLZ9jEV9lOE.roa
Signing time: Thu 02 Jan 2025 17:54:56 +0000
ROA not before: Thu 02 Jan 2025 17:54:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45027
IP address blocks: 31.129.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:fb:a3:57:cf:29:e6:58:07:22:42:45:12:5f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 2 17:54:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38669798131f716bd9ea5b4774b67d8c457d94e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:77:6b:c6:89:fa:93:93:f3:ec:77:59:d9:
e4:8e:98:56:d8:b8:43:39:50:01:0d:ac:16:de:5b:
a1:e1:ea:63:49:dc:5d:55:03:85:04:b7:fc:21:f4:
a9:62:fa:d5:97:b5:a1:de:24:7b:48:d2:2a:b4:6b:
47:a6:5c:1e:6d:b6:6e:28:66:70:a0:7e:1a:92:92:
34:9d:03:11:71:5c:6a:35:b7:1a:4d:a2:ce:a1:ae:
4a:81:6a:92:ad:71:f0:2c:8b:40:da:15:c5:89:a9:
0d:b3:5d:00:24:0c:bc:04:3e:1f:46:c5:cb:52:07:
b5:dc:73:c0:2d:e5:49:fa:13:7a:d5:10:57:b4:28:
a2:e5:47:c1:73:04:e7:37:0e:d7:22:27:f9:07:ab:
23:0a:2c:5b:eb:10:1b:71:3c:d6:e7:53:ba:5c:b5:
b1:05:df:4b:46:03:09:ea:5c:79:93:ef:12:26:60:
10:89:ae:f1:17:09:80:d5:d6:56:24:28:f8:c8:96:
24:e1:ac:48:67:47:2c:fc:d1:c8:56:d7:66:4e:18:
a9:91:08:10:7b:34:a6:87:84:e7:e1:54:bc:a1:ec:
95:1d:cf:a8:5d:77:33:4d:fb:3b:8f:86:c0:cb:48:
87:bf:45:25:59:5e:17:da:09:42:86:de:dd:b7:35:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:66:97:98:13:1F:71:6B:D9:EA:5B:47:74:B6:7D:8C:45:7D:94:E1
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/OGaXmBMfcWvZ6ltHdLZ9jEV9lOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.30.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:cc:4a:e1:85:43:9e:48:fe:94:4b:4a:1e:90:aa:b8:a0:90:
c5:7e:7c:f8:0f:48:45:db:70:45:ed:42:a6:01:42:13:b8:32:
38:ac:23:6c:95:e0:13:2f:2c:74:64:96:87:c7:b3:53:58:a9:
5c:0d:04:80:10:0c:3c:ee:1f:c1:db:5d:dc:9d:80:d0:1f:d6:
4f:40:a6:2b:87:3e:fe:9d:54:07:4f:83:c2:5a:28:98:68:7a:
28:4d:49:b7:d8:d8:4c:57:a3:1b:48:a8:5a:ad:7a:59:c7:72:
51:d9:1c:e6:9d:7d:32:7d:f3:e2:73:82:13:54:23:91:ed:1c:
33:3a:e3:45:53:99:74:d4:e0:e4:9f:ca:00:b1:f5:b2:58:c7:
4b:00:b7:81:b9:76:19:8b:7f:ed:b2:a0:57:2f:57:4a:ba:fe:
90:00:63:be:68:20:f5:d3:27:9a:07:b5:5d:23:dc:f2:5e:53:
58:b2:c9:49:d0:8f:5c:15:8b:ac:ce:fa:95:aa:3c:d7:02:db:
82:b3:10:e0:02:d0:50:cd:db:af:01:6b:90:8b:b9:52:41:a9:
40:f1:80:37:b1:71:cb:5f:9c:c6:42:e9:66:db:a0:93:e8:d4:
00:a0:1d:05:fe:1a:f5:81:3c:c5:4c:c5:9c:9e:fb:90:c1:9b:
c9:48:a0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:46:53 2025 by rpki-client