Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/OognzbRI52-tUVqPrupLJHIhUV4.roa
File: OognzbRI52-tUVqPrupLJHIhUV4.roa (raw, json)
Hash identifier: yDdzqTQld2bKmh7pdXZ3qLlf4D/eksuK9uXSZZ/NG7o=
Subject key identifier: 3A:88:27:CD:B4:48:E7:6F:AD:51:5A:8F:AE:EA:4B:24:72:21:51:5E
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 01952318CC96F257B175EF9FE3D4B07A64BA
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/OognzbRI52-tUVqPrupLJHIhUV4.roa
Signing time: Thu 20 Feb 2025 11:23:02 +0000
ROA not before: Thu 20 Feb 2025 11:23:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 91.238.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:18:cc:96:f2:57:b1:75:ef:9f:e3:d4:b0:7a:64:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Feb 20 11:23:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a8827cdb448e76fad515a8faeea4b247221515e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:b4:86:98:ac:a6:a1:6f:f0:64:0c:d8:c6:
62:e5:42:dc:3e:7a:8a:0e:5c:b4:43:23:0a:fc:79:
ef:73:d8:fd:b2:1b:31:a2:da:44:49:76:51:a7:30:
cb:3e:2e:41:61:24:8c:d8:96:7c:62:59:72:09:eb:
2d:c7:41:f6:b1:33:ce:21:17:36:c6:dc:1b:42:a7:
6f:12:80:b8:ea:74:4d:70:bc:5f:0e:5a:26:dc:a2:
18:20:9f:57:22:7b:a1:77:fc:33:96:41:2a:91:49:
f3:c6:54:e5:d9:8d:a6:f0:66:ce:5a:0f:f8:6e:57:
88:79:69:ee:b3:db:51:6f:1e:4d:89:62:1e:4c:4b:
4d:35:de:05:43:f9:02:f5:41:03:d2:bc:ba:f6:e6:
4f:26:49:fb:63:e7:e4:42:d3:a1:85:68:ca:09:0f:
d7:19:4a:dc:a1:d8:3b:4a:5d:b4:c7:b4:dd:1f:12:
f9:2d:f1:90:a2:c1:32:14:3d:fd:23:22:e7:0a:48:
f7:3e:b3:1c:3f:64:ce:a3:c4:ba:45:cf:f4:bb:4c:
81:94:2a:59:8f:13:fb:d8:81:c6:68:8d:4c:11:e3:
a0:0e:f7:90:b0:9b:57:f3:c2:d4:96:8b:f2:3a:b8:
e7:a1:2b:a3:a5:fe:9d:81:e4:92:65:e9:8b:8f:25:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:88:27:CD:B4:48:E7:6F:AD:51:5A:8F:AE:EA:4B:24:72:21:51:5E
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/OognzbRI52-tUVqPrupLJHIhUV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.71.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:67:f7:1d:15:9f:11:03:79:52:53:cc:f5:91:75:db:ed:61:
3a:d4:8d:98:06:ce:df:b4:e4:eb:8a:5e:66:92:81:9a:d0:dd:
df:3e:18:5e:83:35:01:97:68:cc:6b:81:05:d8:0b:42:36:36:
fb:ac:63:51:29:6f:c9:ad:8b:51:b4:6a:ad:78:89:7e:5c:dc:
8f:7c:02:ad:86:cd:40:83:98:ac:97:59:bb:a8:ba:51:12:52:
10:a8:ba:d8:92:30:bc:b3:1d:b2:da:25:97:cb:fa:b1:f7:f6:
44:34:a1:ee:86:73:61:99:4a:d1:7b:67:09:67:13:7b:90:bb:
5a:ee:3b:e8:bd:35:38:a4:6d:95:24:ae:c5:62:25:24:4e:9d:
ff:ae:46:98:9c:6b:cd:bf:cb:86:e0:41:1f:3c:af:1d:5d:ad:
7d:f5:2d:eb:05:0c:96:0c:b2:f7:24:d8:27:17:4a:2d:61:be:
ee:60:24:4a:76:aa:b2:a5:c6:f0:1a:58:02:96:b8:bb:9d:71:
f8:4f:b7:8d:d8:69:bc:b4:98:da:78:e6:bb:ef:5f:f0:8c:6c:
52:f9:7f:ca:25:36:d4:03:8c:43:c0:65:cd:58:0b:54:e6:7f:
71:6d:1c:18:be:c7:1f:da:17:59:d1:78:ef:27:25:ed:45:9c:
7b:b1:8c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:30 2025 by rpki-client