Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/OTUOod5L1cUgBKIkmwezxLlE8iQ.roa
File: OTUOod5L1cUgBKIkmwezxLlE8iQ.roa (raw, json)
Hash identifier: F6MK9aM/yyebzmWRDHwcRK1mD7d0MKwkjNpV5FBH1XU=
Subject key identifier: 39:35:0E:A1:DE:4B:D5:C5:20:04:A2:24:9B:07:B3:C4:B9:44:F2:24
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 0194266AB7704B21F6CC9CEBD40A1EA4641D
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/OTUOod5L1cUgBKIkmwezxLlE8iQ.roa
Signing time: Thu 02 Jan 2025 09:48:35 +0000
ROA not before: Thu 02 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.49.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:b7:70:4b:21:f6:cc:9c:eb:d4:0a:1e:a4:64:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jan 2 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39350ea1de4bd5c52004a2249b07b3c4b944f224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:02:1e:e6:fd:71:d0:a8:b5:2e:62:15:9a:
6e:b2:f6:83:3b:47:9e:7a:2b:fa:61:75:0c:40:eb:
4a:88:2c:05:b2:db:92:c3:15:fe:13:a8:89:cd:35:
55:14:ab:d5:7c:89:a8:44:9f:8e:96:51:b7:84:b1:
60:a9:3b:28:58:08:2b:b1:c0:bb:74:97:de:58:bf:
cb:24:37:be:03:09:95:71:04:b9:c7:59:05:c0:2d:
d4:8c:9e:05:82:b5:28:1c:13:ae:1e:dd:10:06:44:
1d:d5:8f:41:8b:fd:e7:b0:cf:4e:23:63:73:50:d5:
b7:07:0b:f9:7c:83:18:93:d4:fd:ac:81:ab:9c:6f:
f9:3c:23:27:eb:3a:ff:24:ce:a3:04:c2:6c:2b:d9:
98:8c:6f:96:f3:14:99:1c:05:fa:59:83:e0:06:f3:
41:18:21:3c:9f:71:2f:26:20:a5:87:a1:a7:d9:6f:
41:c9:84:95:a2:82:02:9d:d2:f0:12:34:9e:12:0b:
47:dd:04:2d:d4:a2:f6:1d:fe:1b:1a:f5:6b:90:c7:
4d:81:30:4e:8f:88:7f:f3:7c:63:d6:ff:cd:77:77:
d5:98:3f:d7:a4:ee:79:94:ed:25:8f:e5:ab:78:35:
73:6c:94:fe:de:bb:a4:4b:e9:43:7f:3b:14:8b:f4:
33:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:35:0E:A1:DE:4B:D5:C5:20:04:A2:24:9B:07:B3:C4:B9:44:F2:24
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/OTUOod5L1cUgBKIkmwezxLlE8iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.105.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:21:26:7c:67:0e:18:ed:6d:9e:27:01:8f:32:bd:ee:4e:84:
98:84:3b:1c:38:68:17:08:0e:fa:ad:c4:75:2a:18:13:36:aa:
c6:a5:24:52:9e:f3:c1:ee:e7:f2:ef:78:e3:61:84:99:04:c6:
bb:3a:cd:6d:fa:7f:61:3a:cc:4a:4b:34:14:26:23:09:dd:a6:
dd:9e:07:65:cd:6d:b5:94:f4:f4:43:8e:2d:52:32:28:e6:e1:
3e:89:f1:20:29:4c:49:c3:ed:f8:22:36:1a:60:33:62:69:39:
b7:09:51:32:12:5c:9c:56:e4:cf:1c:5e:cd:86:8d:f9:d6:d3:
03:2c:0d:96:44:42:f8:0c:d1:79:52:ae:a8:b7:28:11:c9:b0:
1c:2c:16:28:6c:59:75:55:09:90:bc:87:97:6c:b1:ab:1f:1c:
ce:91:66:b6:77:a2:2c:39:41:ef:e4:34:37:c0:a3:ca:bf:b6:
22:16:cb:cd:3a:39:3e:5d:88:82:ab:26:2b:28:22:50:63:7a:
a0:cc:aa:61:b5:88:18:79:1d:ab:ca:0b:49:43:8e:6e:c4:7e:
6a:ff:78:90:f7:68:0d:4f:1c:1b:b2:89:ab:39:c5:cf:fb:49:
11:8f:fa:32:4f:1d:82:14:6e:a7:38:53:b6:97:07:3b:33:de:
5a:d7:67:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:12 2025 by rpki-client