Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/OBU8vlVFbNJaELvdSh6f-vm8Wi8.roa
File: OBU8vlVFbNJaELvdSh6f-vm8Wi8.roa (raw, json)
Hash identifier: Dlm8O3K+/DDrDwWaVhCzSl+5X2EyncHNpdnVYLNwB+A=
Subject key identifier: 38:15:3C:BE:55:45:6C:D2:5A:10:BB:DD:4A:1E:9F:FA:F9:BC:5A:2F
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0194221FCC4149A924EFFD2BF97BC8E39B43
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/OBU8vlVFbNJaELvdSh6f-vm8Wi8.roa
Signing time: Wed 01 Jan 2025 13:48:16 +0000
ROA not before: Wed 01 Jan 2025 13:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39238
IP address blocks: 81.161.63.0/24 maxlen: 24
91.195.125.0/24 maxlen: 24
91.229.112.0/23 maxlen: 23
185.202.0.0/24 maxlen: 24
185.202.1.0/24 maxlen: 24
185.202.2.0/24 maxlen: 24
185.202.3.0/24 maxlen: 24
193.9.17.0/24 maxlen: 24
213.108.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:cc:41:49:a9:24:ef:fd:2b:f9:7b:c8:e3:9b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 13:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38153cbe55456cd25a10bbdd4a1e9ffaf9bc5a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ad:86:d6:c3:67:b4:e6:4d:70:29:82:8e:af:
8d:db:6b:90:fd:b8:e2:5f:73:e2:20:1c:eb:a8:4b:
3b:0f:73:a3:6d:2e:22:2c:cd:d7:7d:db:bd:4e:63:
c1:3e:b4:56:e1:d2:49:5e:d9:bd:2c:45:c0:68:d8:
80:3e:3d:ff:0d:d2:70:54:d6:2b:2a:fd:12:0a:05:
a8:7f:79:45:fc:34:02:d3:d1:1d:15:ab:fb:e4:0b:
c8:d2:55:ca:e7:33:ae:1f:f8:56:05:b5:7e:9d:80:
e2:16:b4:1c:68:00:7b:6a:d4:74:b6:fd:88:74:69:
47:ac:ef:ed:de:79:d3:d0:30:99:9d:9a:a4:34:8d:
33:6c:a7:19:ec:a4:ad:58:cb:7c:ae:3d:b5:35:70:
16:b2:7a:cf:f5:d6:8c:4b:f0:fe:6a:5c:01:c6:4d:
5d:bf:dd:f2:48:86:fe:49:2a:b9:39:8b:d7:2f:18:
8c:c2:88:b3:3a:12:3c:49:0c:89:11:e1:ed:72:85:
cf:8e:dd:d9:fb:6e:10:80:3a:d8:62:47:84:71:e3:
5c:de:19:af:12:ad:5c:85:89:a3:c4:cb:53:af:42:
bd:52:98:27:0e:7f:9d:da:5f:f8:4b:02:7d:c3:1f:
ac:3f:af:f4:24:c9:c4:40:90:63:e7:03:7b:d5:a1:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:15:3C:BE:55:45:6C:D2:5A:10:BB:DD:4A:1E:9F:FA:F9:BC:5A:2F
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/OBU8vlVFbNJaELvdSh6f-vm8Wi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.63.0/24
91.195.125.0/24
91.229.112.0/23
185.202.0.0/22
193.9.17.0/24
213.108.133.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:04:25:12:8b:d3:42:a1:60:32:e0:3e:51:da:e6:a8:90:fb:
9e:6d:54:b1:83:18:71:5b:ae:db:bc:7c:61:dd:b7:e1:e9:d9:
71:22:7e:62:96:4b:51:d5:69:c1:0e:57:ad:2c:51:85:73:97:
89:69:81:c0:91:08:c8:1e:7a:38:4d:5c:f6:0b:6d:38:32:f6:
fa:ba:77:b2:a8:13:de:d1:7c:48:a4:ad:91:a4:ee:e4:75:cc:
93:aa:88:21:ea:eb:9b:49:d9:af:f4:f6:9b:fd:f6:51:2b:9a:
2e:d7:64:2d:f4:49:e0:85:5c:12:0c:5b:cd:32:69:0d:d8:9b:
2f:60:8a:cd:a9:f5:17:61:8e:bd:ee:55:41:d8:7f:c0:1c:ef:
f5:f7:4b:67:47:18:e1:16:38:22:ed:45:e3:91:2e:b9:da:40:
6f:30:a5:90:60:9c:1a:89:fa:18:df:1d:ee:26:ea:52:6d:28:
f9:3d:52:ca:10:dd:5e:22:b8:6a:5f:77:99:35:ac:e8:1a:26:
3d:b9:ee:da:9c:a2:27:23:5d:c7:2c:e8:4b:1e:80:77:a6:9e:
08:6d:cb:88:fc:c2:fe:ac:40:61:21:ce:b1:b5:fa:45:5a:57:
5a:22:f5:ec:5a:85:09:46:93:a0:72:51:68:32:2a:2f:ca:8d:
c2:01:58:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:38 2025 by rpki-client