Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/OEYyZZKZhp-2fVGqVtoifeZmQ8A.roa
File: OEYyZZKZhp-2fVGqVtoifeZmQ8A.roa (raw, json)
Hash identifier: SXPo45Zy5oQW0FXPgd1Rr0ybBjZhh0uTBvIGSnzxV5o=
Subject key identifier: 38:46:32:65:92:99:86:9F:B6:7D:51:AA:56:DA:22:7D:E6:66:43:C0
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 0194258F68F99DCC741850037AD778EAF148
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/OEYyZZKZhp-2fVGqVtoifeZmQ8A.roa
Signing time: Thu 02 Jan 2025 05:49:02 +0000
ROA not before: Thu 02 Jan 2025 05:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198154
IP address blocks: 91.234.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:68:f9:9d:cc:74:18:50:03:7a:d7:78:ea:f1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Jan 2 05:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=384632659299869fb67d51aa56da227de66643c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:df:0d:3d:b1:ff:15:3a:53:90:94:a5:3b:
82:45:d1:2b:60:11:a4:49:a2:42:10:54:dc:8f:44:
78:9a:47:8c:72:22:23:79:f0:91:8e:1e:67:a2:d6:
b3:24:58:89:4e:e4:97:71:74:cb:1f:78:98:1b:fb:
ea:3a:1a:13:80:51:87:e8:01:35:8d:fe:54:cd:f4:
f9:e5:2c:61:a4:a7:7c:fa:5e:31:cc:88:d2:db:60:
8b:52:cc:ff:b4:7d:80:ee:8f:11:c2:0a:e9:1d:50:
f7:5b:4c:de:02:27:ea:75:0d:97:c4:2e:ef:16:67:
96:6c:6c:a0:bd:4c:11:49:ad:49:f9:66:49:52:1d:
a7:e8:27:80:4a:48:df:13:f9:e0:1a:e9:92:6f:5b:
bb:9d:03:f6:68:af:75:5a:ea:ab:53:f6:dd:1b:50:
77:19:84:3f:17:e4:13:31:c7:5a:6e:3c:0f:6c:3d:
99:86:8a:44:bf:2a:12:13:7d:16:b1:37:7a:78:20:
b2:f2:2e:bd:74:c9:d8:77:a6:ae:3a:6b:b0:fa:5f:
8d:a3:e7:52:f0:a2:d4:15:ca:f4:19:94:aa:62:70:
1b:0e:9b:4f:35:08:10:3a:61:47:43:83:ba:60:2c:
6d:d8:11:c7:f4:b1:bf:a5:e5:db:70:d5:d4:d9:91:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:46:32:65:92:99:86:9F:B6:7D:51:AA:56:DA:22:7D:E6:66:43:C0
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/OEYyZZKZhp-2fVGqVtoifeZmQ8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.39.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:81:91:04:48:ec:ad:69:a8:c4:ec:64:e8:45:5a:64:5f:91:
ab:a9:d1:a2:05:28:d3:8e:04:86:c2:a4:ac:c6:46:58:91:0d:
0b:ce:aa:de:9d:a9:98:bf:b6:0b:f5:67:ec:94:d8:77:83:52:
73:60:43:bd:b3:cc:1a:09:61:03:47:47:63:ac:e9:df:71:b5:
62:37:8f:e7:74:60:93:b6:b4:72:27:68:00:a2:4b:31:b1:49:
a7:48:c6:7e:bf:d4:ce:57:af:83:e4:1d:a2:58:7b:1d:66:9b:
68:6a:c0:11:4b:5e:95:6c:d8:91:12:56:66:62:70:b2:7a:c7:
67:1b:83:de:ef:6b:9d:7d:51:28:d3:15:f4:14:1d:f0:83:40:
6e:fb:54:dc:9e:d2:89:c6:5e:de:bd:7e:0a:6e:c9:5e:38:d0:
ca:1f:b0:1b:9a:45:4b:04:9f:a0:81:d2:fa:79:4a:67:62:b2:
63:d6:e8:87:32:74:92:db:e4:b1:ee:80:b1:2e:8c:af:84:08:
60:43:b8:51:da:85:7f:80:f9:81:da:5b:ab:66:f7:2b:08:d6:
0c:ab:3c:75:19:ab:bb:2e:77:a9:06:00:0b:ee:1b:64:07:8f:
f2:eb:6e:b9:7f:7d:f3:e4:91:17:06:88:69:b0:8d:f7:fe:41:
ca:a2:b7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:13:47 2025 by rpki-client