Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/nOlap_eSkN0DuMkgqLYZtcf9o8o.roa
File: nOlap_eSkN0DuMkgqLYZtcf9o8o.roa (raw, json)
Hash identifier: satBk4ZVOcEhBt8FgPxbQTlQ/8tPeh7CEI+elm33h/g=
Subject key identifier: 9C:E9:5A:A7:F7:92:90:DD:03:B8:C9:20:A8:B6:19:B5:C7:FD:A3:CA
Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial: 01942369D627E90282872D5ECBA9CE82441D
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/nOlap_eSkN0DuMkgqLYZtcf9o8o.roa
Signing time: Wed 01 Jan 2025 19:48:45 +0000
ROA not before: Wed 01 Jan 2025 19:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60798
IP address blocks: 185.102.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d6:27:e9:02:82:87:2d:5e:cb:a9:ce:82:44:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Validity
Not Before: Jan 1 19:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ce95aa7f79290dd03b8c920a8b619b5c7fda3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4f:34:72:6a:41:72:d6:77:89:22:f8:71:3f:
6f:cf:6c:70:a0:38:3e:66:10:ef:11:0d:2f:14:a9:
b1:3d:9b:1b:ee:9a:77:77:f7:61:cf:a6:66:74:94:
c0:da:5c:4e:75:3f:4b:24:81:98:84:21:d8:df:c7:
72:83:bb:91:4f:2c:70:18:92:7b:87:34:1a:96:47:
f1:5b:31:66:8a:6a:ba:cf:6a:e2:80:e7:b8:45:88:
75:31:30:63:22:d5:ba:63:6d:5e:37:70:0f:5b:bc:
4c:a0:c1:11:e0:3b:69:c1:65:e3:3c:91:38:0b:e4:
95:85:97:9d:33:be:58:59:b5:86:cf:27:4f:b7:ed:
01:c3:43:32:ef:b2:70:a4:cf:a7:dc:cf:08:a2:9d:
8f:92:34:63:b7:83:3f:43:d4:84:79:b3:9b:25:2c:
16:df:a6:01:21:38:02:b7:89:d0:b4:9c:cd:33:24:
e1:9f:53:29:59:30:00:1a:23:62:1f:78:9c:21:93:
4d:a1:bb:dd:84:17:2d:e8:27:1e:6a:ad:7b:d7:90:
17:14:f9:c5:c8:28:36:82:13:9f:85:1c:46:34:5f:
84:11:a1:9f:b3:f3:20:a2:37:bd:2f:c4:1f:5f:cc:
e3:e5:a4:61:3c:9b:58:73:dd:c6:29:a5:ce:b8:41:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E9:5A:A7:F7:92:90:DD:03:B8:C9:20:A8:B6:19:B5:C7:FD:A3:CA
X509v3 Authority Key Identifier:
keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/nOlap_eSkN0DuMkgqLYZtcf9o8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.169.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ed:72:14:a2:33:ed:06:64:8d:01:f3:c6:f6:27:76:44:84:
d9:f1:1d:d3:70:e9:dd:99:08:f8:39:3b:ef:2a:a8:37:d7:07:
45:56:5a:ac:c6:f6:19:e6:7f:3e:1b:d4:9d:ef:75:b1:c9:38:
29:64:39:32:54:da:f1:1a:8e:56:83:2d:8b:61:57:47:fd:df:
e1:1a:a7:7f:c4:7c:91:da:a8:03:1e:db:29:2b:cb:56:3e:17:
c1:02:4a:08:d9:ae:36:69:8d:74:c2:71:02:9b:14:67:83:7f:
2f:be:83:44:42:ed:72:a0:8f:46:73:e5:c0:db:e6:be:85:04:
72:57:79:d0:7a:77:28:0d:73:16:db:34:10:cb:fd:1a:08:17:
5d:43:eb:c5:db:6f:77:5c:54:73:23:99:40:81:e7:6d:87:f9:
74:d3:5d:ad:09:46:39:8b:c5:e9:f2:d1:93:29:b4:cb:c7:85:
48:8d:00:2a:21:6e:90:d5:2f:c2:3d:78:01:42:b8:ff:d4:cf:
87:50:2e:db:d5:02:40:ee:76:00:af:41:3b:11:ed:52:a8:e9:
27:0e:00:09:09:dc:81:df:48:71:96:29:64:6e:3b:2e:e6:07:
bd:06:38:ab:05:d1:1c:73:2f:3e:23:2e:76:49:2b:ee:2d:ec:
fe:35:21:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:57:53 2025 by rpki-client