Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/OVZzjJYrUylTdSpoIE7hzrPyZac.roa
File: OVZzjJYrUylTdSpoIE7hzrPyZac.roa (raw, json)
Hash identifier: 3s4Ojo31EU/Y4PiKVv5UD2430oJ/lIPFJMDzD7Qe36k=
Subject key identifier: 39:56:73:8C:96:2B:53:29:53:75:2A:68:20:4E:E1:CE:B3:F2:65:A7
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA30E40488F0B76615C68026329CD4
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/OVZzjJYrUylTdSpoIE7hzrPyZac.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31609
IP address blocks: 86.106.168.0/24 maxlen: 24
89.33.243.0/24 maxlen: 24
89.37.108.0/22 maxlen: 22
94.176.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:30:e4:04:88:f0:b7:66:15:c6:80:26:32:9c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3956738c962b532953752a68204ee1ceb3f265a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:3e:02:bb:ba:21:4c:05:b8:e1:67:bf:df:
9b:0b:3a:1f:08:5a:f7:f0:dd:06:4b:b0:78:c1:d4:
1b:c1:2c:14:8b:ff:dc:7d:9a:73:79:ef:f7:2e:74:
37:07:9e:8e:b7:cb:68:06:17:a6:92:f5:9b:a1:13:
9b:74:c5:27:4a:9d:42:ae:e7:d1:6b:ae:35:9d:90:
30:63:b5:c9:b5:eb:a5:5f:3c:12:4c:8c:17:32:85:
e1:3e:b2:47:0a:91:c1:32:6f:3c:d5:ba:c5:87:33:
1d:88:91:f9:cb:7c:10:5e:61:22:6e:ae:7c:35:62:
cd:a7:ba:98:94:9b:e0:5b:70:e0:cd:46:21:11:59:
07:00:ae:4d:c9:4b:de:ae:15:c5:05:33:ca:49:c2:
40:1c:4f:e1:05:55:10:42:fb:77:30:57:e7:25:b9:
02:6a:6b:58:fa:6e:38:79:3d:a8:5e:31:00:15:e4:
d9:f6:46:7f:77:36:89:a9:1e:70:25:9d:cc:43:eb:
9a:9f:bc:7c:f1:70:e7:25:6e:f2:c1:47:be:c4:4f:
6d:9b:d0:6d:21:8d:78:1e:43:7d:e3:65:65:b4:e2:
50:9a:3c:42:22:cc:9e:c8:24:12:43:54:85:fe:ec:
f0:c7:ee:7e:12:1c:9d:a4:dd:5e:b1:2b:7b:d8:81:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:56:73:8C:96:2B:53:29:53:75:2A:68:20:4E:E1:CE:B3:F2:65:A7
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/OVZzjJYrUylTdSpoIE7hzrPyZac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.168.0/24
89.33.243.0/24
89.37.108.0/22
94.176.166.0/23
Signature Algorithm: sha256WithRSAEncryption
74:00:18:63:6a:51:87:95:89:92:20:02:6e:74:4f:fb:3e:3d:
a5:a8:e1:77:7a:7a:66:03:6f:b2:0c:7a:2c:8a:02:a7:e1:e7:
cc:5f:ff:38:60:68:c2:f4:3c:07:f1:9c:df:cb:65:c6:ee:bd:
29:e7:70:db:97:19:1d:65:bc:e7:17:86:f5:b2:07:7e:7e:31:
a3:e2:c6:40:75:84:d1:00:fc:30:de:93:dd:e1:eb:7c:b1:08:
c1:a9:08:b0:c8:91:c3:74:fa:dc:2a:e7:b7:35:5f:eb:f1:53:
3e:f9:8d:e3:17:a6:67:fe:3e:6c:fb:c0:cc:7d:6f:0c:c3:7e:
95:62:d7:57:ef:61:3b:7d:de:3b:f6:3a:f4:6e:24:83:29:fe:
6d:a7:ae:56:1a:22:96:4a:f8:df:04:14:a0:e9:44:d8:b6:39:
22:73:2f:50:02:58:e1:ce:36:41:b3:a0:8f:de:c8:97:19:43:
c1:10:7f:cb:5f:7a:5d:de:4b:12:cb:7e:f9:54:d4:7b:ff:1a:
d9:e3:0f:52:b1:b0:27:13:5b:0c:66:32:0e:12:f0:62:3c:76:
77:d7:77:60:f9:02:ef:73:dc:75:3e:c3:b9:a2:5b:6e:06:67:
d5:f2:a7:93:a9:8f:41:de:f5:a0:b4:f8:ee:42:6c:09:0d:19:
c5:83:4c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:11 2025 by rpki-client