Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/ojPS-JxjqgcK3lkP3FOPNVOLSko.roa
File: ojPS-JxjqgcK3lkP3FOPNVOLSko.roa (raw, json)
Hash identifier: RLfGUXiqEl8v8DvJvWFXf0p4c2+zthivtfKNvf5h43k=
Subject key identifier: A2:33:D2:F8:9C:63:AA:07:0A:DE:59:0F:DC:53:8F:35:53:8B:4A:4A
Certificate issuer: /CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Certificate serial: 27ED030C
Authority key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/ojPS-JxjqgcK3lkP3FOPNVOLSko.roa
Signing time: Sat 01 Jan 2022 13:00:25 +0000
ROA not before: Sat 01 Jan 2022 13:00:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43698
IP address blocks: 78.159.0.0/19 maxlen: 19
82.151.0.0/19 maxlen: 19
95.168.0.0/19 maxlen: 19
2a00:8d80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669844236 (0x27ed030c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Validity
Not Before: Jan 1 13:00:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a233d2f89c63aa070ade590fdc538f35538b4a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:7f:bd:79:db:85:63:9e:ce:dd:05:67:11:
cf:7e:bc:a2:8f:56:e6:99:58:23:47:52:78:e8:3f:
8c:f9:07:22:f2:57:b8:42:09:08:4f:5d:4b:b4:16:
46:9c:9c:d2:43:fe:b2:0c:66:ed:c2:04:41:dc:e9:
4e:cb:3d:27:b2:0d:9a:3a:ad:d8:a6:a2:21:77:62:
ab:d9:4d:ee:f8:db:90:0f:61:ab:3e:bf:ff:04:05:
d5:47:09:d7:10:66:ea:93:3c:22:b0:05:a9:9d:e2:
1a:a5:60:76:b8:56:07:e3:28:cb:10:56:c0:ab:b0:
05:6c:ef:20:67:fd:fc:10:59:6a:42:b3:f9:29:e5:
e4:1b:d2:8d:f4:c2:90:7d:ec:85:6a:7a:14:ac:39:
0e:60:78:d8:42:ab:b3:e4:7a:89:cd:5c:9b:62:01:
e2:1a:30:d9:0c:bb:f6:45:a1:36:a8:74:e8:0f:f5:
dc:27:18:da:b7:ca:6d:6d:42:8a:b9:1e:2c:6f:c4:
06:85:3e:d8:cb:d2:bb:14:b2:69:28:98:a4:0b:fd:
95:07:d2:38:ae:02:ad:fc:1b:0a:1c:1d:ed:b8:4f:
ce:3b:2c:0e:b2:bd:17:a5:bb:f3:1f:8e:1f:fa:c6:
be:df:71:2d:86:8c:2d:1c:88:e6:aa:7e:c8:23:88:
bb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:33:D2:F8:9C:63:AA:07:0A:DE:59:0F:DC:53:8F:35:53:8B:4A:4A
X509v3 Authority Key Identifier:
keyid:A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/ojPS-JxjqgcK3lkP3FOPNVOLSko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.0.0/19
82.151.0.0/19
95.168.0.0/19
IPv6:
2a00:8d80::/32
Signature Algorithm: sha256WithRSAEncryption
09:19:e1:92:1a:f6:25:6e:32:4b:c6:2c:ae:69:cd:20:c7:f0:
8b:f4:21:f4:df:bd:e4:bf:0d:a7:8b:fd:6d:54:92:c9:67:8b:
d3:0a:8a:3b:3e:45:8b:97:7b:f3:fd:b0:83:74:4a:5c:dd:52:
a8:5a:6e:f5:8c:f3:e0:ed:05:a3:e4:cf:b2:27:fa:8e:11:57:
b9:05:6a:76:07:d0:02:91:bc:dd:5a:4b:14:94:ad:72:9b:8c:
b3:6d:12:ce:93:e5:11:c9:e9:33:e6:e5:d1:9c:84:1b:47:44:
5d:53:cb:46:1b:03:49:b1:be:bc:9d:36:91:86:7c:d9:f7:15:
2a:26:70:f1:cf:8b:71:f5:6b:d6:63:50:ca:65:83:8d:a9:eb:
62:5b:6d:7e:bd:b2:c5:42:2f:2e:80:82:67:b3:8e:80:93:93:
90:6d:64:53:06:69:d9:7b:ec:9f:7b:b0:2e:d4:de:41:ae:7c:
33:2f:a6:a9:7d:1a:40:61:16:43:ca:7f:c5:7c:05:fd:a3:56:
bb:28:8e:ce:20:6d:af:5a:a6:42:21:a7:97:1a:90:1d:f1:16:
42:72:d1:81:a4:54:a9:c8:51:c4:22:f1:1c:17:b1:a5:76:b2:
6b:b3:87:9f:1b:11:25:7f:d5:a7:37:f3:e2:93:d1:c0:6d:3e:
a8:41:b0:32
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:58:10 2025 by rpki-client