Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/O8rJ_g_ovwk5yvHXqMWZfVoRoxM.roa
File: O8rJ_g_ovwk5yvHXqMWZfVoRoxM.roa (raw, json)
Hash identifier: pD6HPrgkTDleJEArLeGUbepYdRaE9Tfe7gJ5DsWObZU=
Subject key identifier: 3B:CA:C9:FE:0F:E8:BF:09:39:CA:F1:D7:A8:C5:99:7D:5A:11:A3:13
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 01941FFA74FCAB3EEEF479491BAA519105D8
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/O8rJ_g_ovwk5yvHXqMWZfVoRoxM.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.39.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:74:fc:ab:3e:ee:f4:79:49:1b:aa:51:91:05:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bcac9fe0fe8bf0939caf1d7a8c5997d5a11a313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:2c:a4:93:ed:b9:b8:5f:e3:80:5f:13:83:
55:62:2d:e3:8d:31:40:25:ab:25:aa:69:0c:4c:d7:
2b:2f:0c:8a:c0:4d:da:d4:78:da:16:0f:b6:91:aa:
17:6e:58:d5:32:f4:c8:eb:31:e1:e8:30:af:38:87:
c7:62:f1:6a:34:05:fb:1c:f5:6a:6e:8f:cc:7b:0d:
69:25:57:b7:ea:e9:06:4d:1d:a1:7f:4f:a2:49:1e:
5a:9e:f3:cd:8d:ef:4e:8c:cf:1c:0b:63:9f:85:6b:
33:49:71:99:ee:05:58:f8:5b:9b:a5:f3:98:48:3f:
b5:03:ba:7e:c8:a0:55:44:c2:02:59:2a:2a:e6:6c:
3a:c2:0e:85:ed:67:ba:83:29:f6:01:2e:46:a8:1e:
0d:72:2b:c4:80:bb:65:ed:ea:ff:2f:5a:6f:74:2a:
d3:5c:c0:47:84:49:9e:13:6f:be:ce:e5:f6:be:13:
f8:de:d5:f2:ca:9b:7c:9f:5b:75:3f:d1:61:c7:d9:
64:28:8d:02:42:04:dd:98:ea:16:47:a9:de:d1:f1:
a9:e0:72:db:1b:7b:55:26:99:e3:9c:db:da:46:da:
ce:5a:e2:14:95:c2:63:b9:95:b7:88:ab:d0:db:a5:
a4:36:8e:41:42:d3:30:d9:e0:15:9e:47:51:60:71:
a0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CA:C9:FE:0F:E8:BF:09:39:CA:F1:D7:A8:C5:99:7D:5A:11:A3:13
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/O8rJ_g_ovwk5yvHXqMWZfVoRoxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.114.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:da:39:67:51:9f:49:92:9e:a2:8c:50:19:73:98:25:8b:52:
7f:6b:08:88:6e:2a:11:ab:b0:23:92:57:3c:e7:be:3a:cf:ad:
9b:74:c3:58:7f:7d:33:70:57:1a:d4:48:02:bd:88:b2:0f:17:
20:34:b3:96:cf:9b:b7:73:73:00:81:4a:dd:d1:18:3e:ff:e4:
f8:91:4b:87:7f:7a:57:57:80:73:fa:ca:3d:91:9c:61:5c:92:
b0:4e:f6:8d:8f:99:f3:1a:76:5f:28:48:56:46:b5:02:32:74:
24:96:fe:e6:08:0c:42:f7:ed:da:69:86:3a:46:ef:0b:da:58:
4e:f9:96:07:f8:44:2f:d4:42:e1:fb:e7:0b:0f:49:27:e1:ad:
08:5b:0e:89:dd:49:63:93:e4:e0:71:be:01:73:48:25:7d:54:
d8:fc:19:9e:08:4c:1b:31:34:19:29:2f:10:ab:58:fb:da:39:
ae:ef:9b:af:75:c3:36:a1:c1:97:f1:b6:1d:9f:d8:fd:76:42:
91:ff:b2:13:8c:f5:0d:b6:6f:c4:d5:c4:7f:0b:f3:df:64:84:
c7:4e:ea:a8:ce:8e:7a:eb:9f:03:e4:e2:a2:a7:34:ec:00:a3:
05:40:92:cc:c8:50:7b:c1:41:57:93:08:43:ec:cb:6d:b1:cd:
f0:86:a5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:32 2025 by rpki-client