Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OCRKDcURj8xaIImY8cNKFLg3_eE.roa
File: OCRKDcURj8xaIImY8cNKFLg3_eE.roa (raw, json)
Hash identifier: HUOGD3LHhRpZmpPeYppPKP+b2mI5WdrLoJBrL3wQ2O0=
Subject key identifier: 38:24:4A:0D:C5:11:8F:CC:5A:20:89:98:F1:C3:4A:14:B8:37:FD:E1
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 01951ACBDCD3EAA3F281DE59114BE60C45DB
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OCRKDcURj8xaIImY8cNKFLg3_eE.roa
Signing time: Tue 18 Feb 2025 20:42:02 +0000
ROA not before: Tue 18 Feb 2025 20:42:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 194.98.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:cb:dc:d3:ea:a3:f2:81:de:59:11:4b:e6:0c:45:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: Feb 18 20:42:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38244a0dc5118fcc5a208998f1c34a14b837fde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:ea:a7:b6:61:a7:07:e7:3a:59:ba:6b:fb:
99:1c:d3:10:4f:e4:41:30:43:66:f2:dc:d2:0a:fc:
9c:1c:27:e4:b5:fe:e9:0b:94:d9:fa:22:b7:47:22:
83:ed:79:8c:89:d1:ce:b9:36:fb:f0:e8:5f:67:7e:
df:45:07:53:b2:74:85:9c:77:45:a8:a8:c6:b1:a8:
89:92:8c:74:dd:e5:a9:7e:b1:aa:53:5f:e1:83:77:
c1:9d:7f:a5:df:88:be:cb:51:d3:f6:83:df:f0:5d:
67:b6:32:c0:79:f0:04:a8:fd:70:de:64:c9:a0:24:
41:75:e2:10:6a:83:b8:7c:71:60:cc:70:74:9b:f9:
c2:c7:ff:e3:7d:89:63:c2:57:8b:ca:7d:bc:ff:f5:
cc:ad:16:a2:b4:65:1a:56:3d:e0:07:75:b4:84:b3:
17:16:25:31:f3:d1:b1:41:fd:2b:cb:2a:79:dd:70:
2c:3e:13:76:7a:bf:dc:ff:e6:8e:c6:f3:7c:71:2f:
22:07:ad:c5:c1:7e:66:38:c6:2d:fe:e5:35:bd:4c:
a9:ac:0c:08:71:df:e3:3e:65:ab:10:a6:0e:19:20:
48:e7:b5:16:ca:f6:25:25:d0:67:0c:8a:1d:be:9a:
e3:f5:73:60:00:83:8d:49:28:68:d6:f4:05:66:da:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:24:4A:0D:C5:11:8F:CC:5A:20:89:98:F1:C3:4A:14:B8:37:FD:E1
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OCRKDcURj8xaIImY8cNKFLg3_eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.98.20.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:1b:ba:0a:9f:a0:aa:c6:3b:df:2d:16:d2:4d:ad:65:d7:bd:
cd:83:89:e4:a4:2a:f0:69:e5:27:2f:2c:0e:8f:c9:5b:cf:55:
59:fc:87:a9:6c:d7:b4:5f:e5:b0:86:5a:01:54:5e:83:bf:ed:
4e:05:13:6d:33:04:b0:f7:38:2b:e6:17:77:d7:91:bf:9c:09:
5f:f4:96:6c:e1:d1:ac:40:6a:ad:70:af:6a:02:a8:e8:d8:be:
e6:64:f9:eb:98:9f:29:2e:dc:99:cd:64:cb:46:82:46:58:24:
c4:6c:04:05:5d:9b:c9:8f:1a:4f:03:dc:fb:ec:5e:5a:93:12:
b3:4a:cc:4e:3f:69:a6:19:85:d1:83:9f:73:5b:a0:f6:49:f6:
b3:c5:5b:16:99:ec:ec:82:47:9e:ac:66:06:95:95:3a:ca:86:
9c:c2:ae:10:51:30:4d:29:98:fb:29:f4:9c:d7:a1:c4:db:34:
13:68:5e:4e:82:c6:83:75:4a:14:ee:48:40:f7:14:dd:0c:7e:
1d:ae:13:b5:b4:b3:59:c4:5a:34:1d:39:f7:81:13:8d:1e:2e:
37:2d:9f:86:80:05:31:ab:06:93:22:9b:15:c7:f4:1d:a5:9a:
51:b0:3d:05:37:96:30:f0:30:be:16:ff:2c:fc:05:3c:0e:84:
5c:ba:4b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:07 2025 by rpki-client