Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/ogeSaiZjPO4Kd4PF4MmZ3E0M2dA.roa
File: ogeSaiZjPO4Kd4PF4MmZ3E0M2dA.roa (raw, json)
Hash identifier: Y6nye2lCZkZiTnuBzh99LMq3fLt8LGMzc9QAvB3SwlM=
Subject key identifier: A2:07:92:6A:26:63:3C:EE:0A:77:83:C5:E0:C9:99:DC:4D:0C:D9:D0
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 01956A5AF2B95DF8EC6EBCCDACC076F78D58
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/ogeSaiZjPO4Kd4PF4MmZ3E0M2dA.roa
Signing time: Thu 06 Mar 2025 07:28:20 +0000
ROA not before: Thu 06 Mar 2025 07:28:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198580
IP address blocks: 176.53.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:5a:f2:b9:5d:f8:ec:6e:bc:cd:ac:c0:76:f7:8d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Mar 6 07:28:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a207926a26633cee0a7783c5e0c999dc4d0cd9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:a2:4d:97:91:88:d1:10:c2:7c:6a:34:e8:
90:9f:39:43:d9:f4:e6:23:0f:8b:5f:db:8d:05:b4:
f1:46:b3:35:70:b0:b2:5a:f1:65:62:16:7a:2a:7c:
92:a3:c8:c2:2b:7b:83:70:2a:fd:8a:e0:84:ec:88:
d8:a6:0c:c4:4f:7f:52:1f:5a:bd:90:33:d8:1b:95:
aa:47:e7:3a:26:5a:6b:f4:58:5b:f8:31:25:62:d2:
46:a1:24:ae:81:cd:07:b6:27:b8:ce:94:f2:f2:b2:
be:30:78:f0:17:f1:bc:ad:36:1c:76:01:7f:b3:a9:
12:f5:17:be:76:cd:35:35:31:13:66:e3:b1:f5:64:
90:c2:f4:9a:05:63:70:9a:40:eb:82:f6:4c:be:5c:
81:0c:9c:4d:0f:9f:34:6f:60:c4:96:ab:23:32:ea:
a4:34:16:fa:40:ab:7e:ad:49:b8:b8:92:44:28:74:
57:91:3a:e0:a6:8d:85:e3:c1:25:40:76:ab:38:fd:
d4:7f:32:eb:f0:9a:f9:20:a2:a7:77:b7:24:76:20:
cc:df:36:13:9b:ac:03:76:ec:6c:c5:18:46:8e:b7:
b0:f8:72:29:01:72:5c:e8:26:69:99:59:a4:b5:a0:
24:ea:6e:8e:c0:e1:89:28:e6:b3:87:b5:80:a9:13:
ce:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:07:92:6A:26:63:3C:EE:0A:77:83:C5:E0:C9:99:DC:4D:0C:D9:D0
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/ogeSaiZjPO4Kd4PF4MmZ3E0M2dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.193.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d1:7d:81:4d:47:40:c7:4e:c5:8c:8c:11:6b:61:94:22:a6:
78:51:22:ed:46:f9:e9:76:b4:62:13:3f:ed:1a:fb:60:25:b3:
a7:5d:43:d6:f9:51:c3:ad:2f:7e:55:a5:1d:04:62:2e:5f:cc:
3a:02:0f:34:fb:61:81:5f:ce:2e:59:82:75:1c:99:b7:cf:af:
eb:36:73:6e:25:89:3e:42:78:57:8b:9d:12:4d:fe:9c:d0:fb:
8a:e5:dc:e6:24:4b:e9:64:c2:b0:96:15:d0:f0:a0:4d:c0:d2:
a7:03:6d:e3:15:9d:99:5a:93:5c:dd:68:89:69:50:d7:0c:31:
d4:fc:a8:5d:6b:2d:43:d7:c2:cc:77:2f:2a:45:0f:05:e0:7a:
47:95:50:cd:cc:0a:97:ea:d8:2e:2f:f8:33:04:b8:c7:6d:c7:
9b:c8:d8:22:64:bc:53:25:5a:aa:b1:8b:a5:b9:af:3a:9b:70:
f1:f1:96:0c:49:48:df:3b:88:ab:22:42:b6:b8:c4:62:93:1e:
ac:92:e0:05:11:d9:ae:13:34:12:5d:45:23:49:45:d2:19:5f:
33:ae:42:ff:35:5f:20:b8:90:90:85:2d:85:55:ff:e0:cc:fe:
a1:12:13:f9:f4:c0:3b:0c:15:35:d8:04:c3:94:4c:28:70:0f:
0b:f2:5b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:50:09 2025 by rpki-client