Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/o0NrrjH0cJM47X58cybWee0ozQs.roa
File: o0NrrjH0cJM47X58cybWee0ozQs.roa (raw, json)
Hash identifier: q3GEExqDcWkrSs1JstnhAnZdlEaJJUxKxv2IaEmCjbw=
Subject key identifier: A3:43:6B:AE:31:F4:70:93:38:ED:7E:7C:73:26:D6:79:ED:28:CD:0B
Certificate issuer: /CN=891d6101d729bc95597da528604ec0b0b7e0042c
Certificate serial: 509C03
Authority key identifier: 89:1D:61:01:D7:29:BC:95:59:7D:A5:28:60:4E:C0:B0:B7:E0:04:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iR1hAdcpvJVZfaUoYE7AsLfgBCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/o0NrrjH0cJM47X58cybWee0ozQs.roa
Signing time: Wed 27 Apr 2022 16:50:28 +0000
ROA not before: Wed 27 Apr 2022 16:50:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41171
IP address blocks: 94.231.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5282819 (0x509c03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891d6101d729bc95597da528604ec0b0b7e0042c
Validity
Not Before: Apr 27 16:50:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3436bae31f4709338ed7e7c7326d679ed28cd0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:44:c8:c6:b0:e4:81:cb:20:45:62:e8:79:
c3:d2:d8:85:75:2d:f1:11:dd:5c:03:02:03:ed:5b:
ea:dd:d2:8a:94:57:69:09:71:0c:9d:82:9d:26:c0:
24:92:1c:b7:3a:ae:ed:87:83:f7:08:65:ab:19:6e:
8d:57:c6:20:96:fb:3d:36:a8:fd:3b:19:5c:3e:33:
ae:d7:b8:0f:5d:26:b4:16:f7:d2:3c:76:f9:62:31:
26:28:48:ff:16:96:4a:0d:5f:ed:7b:55:d9:81:5b:
52:64:7c:6e:6f:26:ea:df:f1:af:49:07:1e:6b:75:
c6:42:a6:d4:04:bb:7f:0f:77:b8:d7:3a:df:2c:6a:
c7:92:61:13:22:5e:cc:55:bb:d3:b6:d3:94:e7:39:
a2:fb:b5:fb:19:88:66:b6:33:fc:b9:d2:1b:15:8b:
41:5d:b2:bb:e6:3c:56:24:0f:f2:2e:a8:41:4c:fe:
36:c1:be:69:8f:32:7d:ab:86:ad:09:f5:0b:f7:f8:
57:a0:46:14:3d:86:cb:77:ef:96:5e:54:62:22:07:
af:b3:cd:07:f1:8f:ce:58:f5:fc:c6:2d:83:81:a7:
5c:23:ea:fc:ac:d4:5c:a7:f1:ff:11:9e:be:3f:dd:
1c:1f:bb:b4:be:3a:12:1a:06:84:6d:d7:6c:4a:91:
e1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:43:6B:AE:31:F4:70:93:38:ED:7E:7C:73:26:D6:79:ED:28:CD:0B
X509v3 Authority Key Identifier:
keyid:89:1D:61:01:D7:29:BC:95:59:7D:A5:28:60:4E:C0:B0:B7:E0:04:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iR1hAdcpvJVZfaUoYE7AsLfgBCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/o0NrrjH0cJM47X58cybWee0ozQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/iR1hAdcpvJVZfaUoYE7AsLfgBCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.198.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a8:9f:92:3a:aa:ea:f8:73:9c:61:9d:26:35:7b:a2:bb:37:
67:6c:92:96:1b:56:d7:6b:5c:6f:e5:37:88:6a:c5:8c:72:2d:
37:de:6c:99:b2:bc:1e:cf:03:0c:d3:2d:27:ff:96:65:b8:76:
42:07:de:84:c7:bc:b5:9a:14:82:e2:9c:73:8f:d0:76:c8:77:
93:cf:e2:f0:f1:e1:c4:61:b7:be:e3:db:a7:3f:9a:08:60:f7:
df:69:0b:3b:71:21:c4:94:ca:5a:d7:2a:c5:17:5e:58:da:98:
f5:db:dc:24:0d:f4:ff:db:09:b6:cb:10:b0:55:fd:79:0e:83:
36:ea:61:98:0c:fd:48:bb:ba:8d:5c:fb:95:e1:b6:3c:8f:71:
b3:85:43:f2:ec:c6:38:12:e7:73:6f:8c:94:2e:ea:26:19:67:
8b:0f:6c:eb:43:59:c9:dd:f2:f7:4f:3b:a3:3f:99:b6:30:2f:
6a:b6:37:77:8c:fb:81:1a:f9:0a:10:65:0c:bf:ab:b4:45:c7:
6d:bc:a4:4f:a8:9a:8c:61:89:6c:00:4f:f4:d0:22:3b:c3:52:
cf:f9:f7:dd:3d:ac:fd:a8:6e:2c:f3:bc:01:b8:75:7e:a3:17:
85:03:8f:a7:41:42:83:90:7a:82:88:37:3f:1c:b0:b5:f1:7f:
ee:94:67:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:43 2025 by rpki-client