Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f70e3b-7028-493a-9597-6d57af72bb3c/1/O-K02tM6utk_tqlvxALrfhdy1F0.roa
File: O-K02tM6utk_tqlvxALrfhdy1F0.roa (raw, json)
Hash identifier: NkBNGQs9nCUIXgm9kut9BxoHzyeBzfZxvbmnKBcY/1o=
Subject key identifier: 3B:E2:B4:DA:D3:3A:BA:D9:3F:B6:A9:6F:C4:02:EB:7E:17:72:D4:5D
Certificate issuer: /CN=361f9afdac42548074495a2953879d6ea6456e09
Certificate serial: CEF6E2
Authority key identifier: 36:1F:9A:FD:AC:42:54:80:74:49:5A:29:53:87:9D:6E:A6:45:6E:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nh-a_axCVIB0SVopU4edbqZFbgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f70e3b-7028-493a-9597-6d57af72bb3c/1/O-K02tM6utk_tqlvxALrfhdy1F0.roa
Signing time: Sat 01 Jan 2022 11:05:15 +0000
ROA not before: Sat 01 Jan 2022 11:05:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 194.104.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13563618 (0xcef6e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=361f9afdac42548074495a2953879d6ea6456e09
Validity
Not Before: Jan 1 11:05:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3be2b4dad33abad93fb6a96fc402eb7e1772d45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ac:8f:d1:62:00:37:74:e0:1d:8f:7f:7a:26:
f3:98:b4:01:1e:b9:b8:4f:ba:84:5e:3a:0d:41:f4:
df:93:62:a4:67:bf:b0:9f:71:76:fe:1b:47:af:94:
53:f9:00:7d:e5:62:a0:eb:77:9e:fd:c0:67:c7:0d:
f2:d0:ea:ca:90:d8:51:55:96:ef:71:01:97:c3:cd:
67:d0:35:0c:f3:c7:57:d9:d7:01:06:ff:68:8e:cd:
cd:06:18:9e:08:c8:a3:5c:81:46:92:8c:ab:9d:fd:
9e:f6:ef:f7:a9:55:fa:f8:0b:42:dd:53:b7:fe:e0:
2a:d4:93:10:b0:7e:73:41:e6:9f:bb:da:81:d9:38:
fb:e3:49:67:07:1f:81:6f:3a:28:7b:cb:8d:2d:f8:
4d:e3:61:e6:25:30:00:bf:c5:e0:9d:2a:30:67:2a:
db:57:dd:3e:e3:21:dd:72:4d:a2:b4:f8:03:7d:63:
55:40:52:c4:1d:7b:ad:e6:ad:5a:59:bf:ce:f4:bb:
a4:1f:d9:3f:8f:5b:58:d6:1d:35:5b:15:08:d2:40:
bc:54:60:c8:78:eb:02:1e:f4:5f:52:d8:9f:7e:5c:
76:f3:5c:20:cd:cf:98:f6:7c:01:a1:1b:f6:86:a7:
21:c0:d4:98:71:fa:cb:51:4a:c0:23:95:6a:1f:a6:
c3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E2:B4:DA:D3:3A:BA:D9:3F:B6:A9:6F:C4:02:EB:7E:17:72:D4:5D
X509v3 Authority Key Identifier:
keyid:36:1F:9A:FD:AC:42:54:80:74:49:5A:29:53:87:9D:6E:A6:45:6E:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nh-a_axCVIB0SVopU4edbqZFbgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f70e3b-7028-493a-9597-6d57af72bb3c/1/O-K02tM6utk_tqlvxALrfhdy1F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f70e3b-7028-493a-9597-6d57af72bb3c/1/Nh-a_axCVIB0SVopU4edbqZFbgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.229.0/24
Signature Algorithm: sha256WithRSAEncryption
64:6f:f1:e6:f5:e6:09:50:68:5a:1e:79:cd:6b:13:f7:a4:e2:
e9:4f:a5:30:2b:9b:d8:7a:00:4e:63:62:d4:7b:6b:9e:1c:e0:
5f:d2:63:f0:02:46:9a:7b:3a:8e:02:97:53:4b:16:f4:c7:c1:
b3:9f:14:aa:a0:ac:2c:9a:79:1e:39:8d:94:8e:51:4b:18:70:
2d:43:6f:88:43:f1:71:73:bf:99:25:5d:a5:ac:c5:0e:3c:6b:
6a:b4:a6:87:26:b3:4c:60:e5:4b:fc:24:1d:ff:08:b4:d2:11:
40:29:71:b9:d4:ce:dd:c0:9b:6f:b7:ad:46:0b:b0:f7:e9:a1:
f0:ed:05:fa:e9:5f:d8:17:f6:c8:9a:aa:a3:a1:f9:3a:fb:c6:
86:ff:b7:47:54:ec:fc:44:d0:69:f1:18:be:21:b4:5b:07:b7:
37:aa:4f:d7:9e:d4:a4:cb:35:95:00:41:ba:9f:1a:a7:5d:85:
54:38:2f:52:73:3e:cb:0e:2b:81:50:56:3f:d8:18:a6:5b:6b:
6a:9a:cd:66:eb:5a:09:55:3b:47:7c:2d:08:39:b3:bc:96:a2:
a8:b2:2b:23:aa:75:01:76:fb:92:0c:b7:9a:ed:5e:72:82:09:
3b:7b:b0:6c:d5:e6:eb:12:cf:08:0f:18:03:51:0b:cb:c2:84:
dc:23:b0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:05:22 2025 by rpki-client