Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/oPbpIuurGDNWxlhxGNaecINHkK8.roa
File: oPbpIuurGDNWxlhxGNaecINHkK8.roa (raw, json)
Hash identifier: Yfyu027jENzRJLW4wdKwaLmNt1fzSDCD+UX22sKOIOw=
Subject key identifier: A0:F6:E9:22:EB:AB:18:33:56:C6:58:71:18:D6:9E:70:83:47:90:AF
Certificate issuer: /CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Certificate serial: 01E4E405
Authority key identifier: 44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/oPbpIuurGDNWxlhxGNaecINHkK8.roa
Signing time: Tue 03 May 2022 18:31:56 +0000
ROA not before: Tue 03 May 2022 18:31:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399045
IP address blocks: 194.104.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31777797 (0x1e4e405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Validity
Not Before: May 3 18:31:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0f6e922ebab183356c6587118d69e70834790af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:02:1c:5f:b1:ac:15:9f:ff:2f:18:f4:25:04:
52:f3:95:bc:c0:98:7b:b6:b7:a8:93:4d:39:fa:3a:
23:b6:b5:60:06:6f:9b:a8:52:d3:a1:d4:96:8f:db:
72:f1:03:01:4b:e7:cb:56:6a:11:07:d2:a3:bf:9d:
4c:83:3d:29:7d:85:76:e4:4e:1e:be:96:e0:1a:07:
b7:88:79:a3:29:3c:34:7e:00:2f:3d:b0:0d:28:fa:
f9:79:32:ed:00:95:0a:a3:5f:4d:1f:e5:e7:84:95:
b2:21:7d:0b:f4:47:c9:f0:ab:57:08:c8:9e:31:50:
af:a6:5f:aa:ea:4b:3a:e9:64:86:aa:fc:eb:ef:81:
30:f4:c3:e5:cb:9e:75:27:2c:ca:b1:0f:d5:cd:dd:
fd:f7:4a:4a:2f:1e:83:21:6c:6d:30:5e:02:da:5b:
f9:91:3f:18:ea:47:50:99:64:a2:10:4e:ff:f9:cf:
79:23:54:e2:51:70:3b:c2:81:53:18:1f:58:3d:7e:
f9:5e:7d:47:83:c0:4c:59:92:90:7f:d2:cb:4f:04:
5a:f4:de:9d:d6:ff:d4:84:83:f5:f2:9d:0c:d8:d9:
67:e3:c0:a5:ed:d0:07:7a:99:2c:a0:a1:6e:51:3c:
19:10:fe:80:75:09:29:8a:08:6d:c5:f8:28:bb:89:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F6:E9:22:EB:AB:18:33:56:C6:58:71:18:D6:9E:70:83:47:90:AF
X509v3 Authority Key Identifier:
keyid:44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/oPbpIuurGDNWxlhxGNaecINHkK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/RB-9MENGoUQj5c5cr8aVOj4kWyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.131.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:57:61:62:07:63:e8:46:de:0b:c2:83:9f:4f:a4:e5:85:72:
95:08:cd:4d:7c:e1:1c:0e:1f:a2:d7:6c:ad:f6:f3:81:d2:87:
cc:d2:d4:93:7b:a8:75:86:ca:da:75:50:53:1e:37:ef:71:64:
05:7d:21:2e:3d:a1:ce:3e:4c:ee:6b:91:91:01:1f:17:af:02:
ba:76:62:e6:c6:59:28:b2:90:af:d5:38:97:5d:36:c8:77:40:
5f:e7:f7:13:09:f4:b4:3a:52:ba:41:86:fd:c4:4b:3a:c4:2a:
4b:d4:03:e2:7e:ee:d0:73:f3:7d:73:20:32:6a:ff:d7:62:c9:
e5:3b:04:9f:d7:5c:45:c5:02:59:4b:c4:72:fb:91:f0:2a:80:
06:08:db:3d:25:32:9d:92:5c:40:b6:42:03:65:b9:bf:3d:27:
55:8b:87:ab:2e:f8:ed:a8:f6:07:23:1c:a9:c3:7f:a5:fb:cc:
52:e4:71:eb:64:01:cd:ba:5c:39:0f:f7:f3:ea:fc:a7:8d:d9:
a2:d0:23:21:fc:00:5d:f8:67:67:2b:8d:5c:54:6d:8a:ae:9a:
69:0c:62:2c:09:dd:32:99:25:2e:51:4a:81:df:17:fe:03:ca:
ec:56:8d:77:61:57:61:3e:c2:dc:3b:b5:7f:7d:ae:9c:cb:17:
0e:b8:0f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:14:12 2025 by rpki-client