Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/OcZcubUX32yTaOc_sPyqHxmJsuI.roa
File: OcZcubUX32yTaOc_sPyqHxmJsuI.roa (raw, json)
Hash identifier: 25cKdLxFRjnSsxjg3v0t5xt9S2rPppOiHrP99GiMS0s=
Subject key identifier: 39:C6:5C:B9:B5:17:DF:6C:93:68:E7:3F:B0:FC:AA:1F:19:89:B2:E2
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019503726221CF570BA9C193DD9BC55AF04E
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/OcZcubUX32yTaOc_sPyqHxmJsuI.roa
Signing time: Fri 14 Feb 2025 07:53:02 +0000
ROA not before: Fri 14 Feb 2025 07:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 45.141.234.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:03:72:62:21:cf:57:0b:a9:c1:93:dd:9b:c5:5a:f0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Feb 14 07:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39c65cb9b517df6c9368e73fb0fcaa1f1989b2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:07:0e:ae:ce:b9:ae:d9:10:72:fe:cb:38:
ba:e1:44:c0:08:8f:8b:01:61:c7:b2:91:cd:ec:5a:
8d:3e:b5:0f:49:d5:af:9f:d0:28:58:ce:60:d4:35:
a3:64:74:f9:3e:5d:1c:4a:fc:b0:ce:81:64:c7:88:
8a:8c:a7:62:7d:4a:8a:07:b3:12:bc:93:8a:bd:f9:
37:5e:bc:c4:a8:53:0d:e1:44:70:3a:72:b8:69:d5:
9d:85:13:2a:2c:cd:79:7c:93:b7:75:1b:ce:5e:a4:
2d:75:40:45:63:33:14:86:d1:b3:69:69:2b:98:c4:
33:de:de:ee:92:fd:00:68:6f:e3:99:8b:98:c8:b2:
fb:69:06:20:6b:40:3f:55:33:7b:19:7d:e7:d6:02:
77:9d:a1:a5:6f:73:91:7f:5a:c1:3e:15:72:f8:68:
fc:d5:98:db:e8:13:7f:20:9d:9c:58:40:bf:de:97:
11:aa:32:fc:4f:5f:5c:4b:dd:49:5e:ab:a1:83:84:
8c:53:0f:33:ad:22:00:86:93:d3:fc:9d:1c:44:08:
6c:06:e4:81:5b:ce:b5:70:d0:16:cb:36:3d:87:64:
a8:57:81:ff:98:05:23:1f:bd:a9:51:b7:79:b3:6f:
79:87:96:3a:33:9f:cf:85:97:5d:fd:44:61:cb:6f:
b8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C6:5C:B9:B5:17:DF:6C:93:68:E7:3F:B0:FC:AA:1F:19:89:B2:E2
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/OcZcubUX32yTaOc_sPyqHxmJsuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.234.0/24
78.159.131.0/24
93.152.207.0/24
Signature Algorithm: sha256WithRSAEncryption
99:95:79:f9:13:7b:13:6e:35:c3:36:56:da:ba:c5:60:4f:39:
e4:24:e0:b6:82:01:78:4d:35:3e:03:ad:95:5e:8a:1b:a3:fc:
76:99:99:13:ac:90:b2:c1:fa:47:fe:7e:50:51:4f:3a:61:a3:
67:04:b0:fb:4d:49:8f:94:1a:4c:7d:c4:5e:78:4a:a7:27:eb:
b2:e0:84:55:96:41:0f:8f:a0:ff:07:9e:d3:d3:e1:20:d8:91:
af:eb:8e:ea:5b:69:7a:1f:e9:86:56:89:a1:ff:3b:33:4e:63:
5e:05:e1:37:a4:d4:1f:6a:c2:65:a2:c0:75:09:07:53:a3:06:
7f:6c:5b:5b:a7:a4:3f:7e:04:26:bc:72:f3:95:59:8e:cd:79:
b2:61:d1:93:a6:5c:fd:e6:83:4a:3c:dc:68:97:98:54:dc:05:
ce:ce:14:da:a5:32:e0:6f:ca:d2:2c:11:2f:5a:b7:b1:6b:99:
8c:63:a1:b6:80:33:90:15:50:3b:ff:cd:d7:23:c6:6a:25:f3:
c0:d8:79:5a:56:b3:de:f3:c6:08:59:73:b5:29:fc:c2:96:ea:
3d:5a:c0:d3:7e:e1:ad:7d:ba:3c:e9:8c:70:96:50:1c:44:b9:
5b:90:e6:cf:03:cb:ce:01:b8:08:37:89:5a:58:1c:53:b2:9d:
cc:29:00:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:24:47 2025 by rpki-client