Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/oJLE-2_94_c-xo-RAtTN4rr9WQ0.roa
File: oJLE-2_94_c-xo-RAtTN4rr9WQ0.roa (raw, json)
Hash identifier: isC+c/rku78c9EvyyONTsf6U7PEYgH7eykKDngVLyP4=
Subject key identifier: A0:92:C4:FB:6F:FD:E3:F7:3E:C6:8F:91:02:D4:CD:E2:BA:FD:59:0D
Certificate issuer: /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial: 0196A00565B455278596A44556BB03FF1453
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/oJLE-2_94_c-xo-RAtTN4rr9WQ0.roa
Signing time: Mon 05 May 2025 10:37:10 +0000
ROA not before: Mon 05 May 2025 10:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41959
IP address blocks: 84.234.123.0/24 maxlen: 24
91.206.96.0/23 maxlen: 23
185.79.32.0/22 maxlen: 22
193.242.146.0/23 maxlen: 23
194.126.229.0/24 maxlen: 24
194.140.250.0/24 maxlen: 24
195.80.229.0/24 maxlen: 24
195.93.142.0/23 maxlen: 23
195.226.207.0/24 maxlen: 24
195.245.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:05:65:b4:55:27:85:96:a4:45:56:bb:03:ff:14:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Validity
Not Before: May 5 10:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a092c4fb6ffde3f73ec68f9102d4cde2bafd590d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:b4:7e:ed:88:98:2c:4b:82:ca:66:31:56:
eb:0a:41:a6:10:4a:56:1f:72:6d:03:01:e8:3d:03:
46:ec:8c:06:9a:3f:ca:81:be:03:fd:29:43:af:2a:
b3:37:5b:24:03:d5:56:de:cf:80:f9:d1:0b:f5:25:
a8:f8:7f:cf:77:00:a8:bd:74:09:d5:0a:6e:6a:93:
a5:f6:4b:01:67:e7:81:46:c6:20:05:da:70:38:60:
6f:12:28:ab:e4:40:fc:05:fe:58:06:d5:3d:7a:38:
57:c2:95:f4:58:7f:d5:66:f2:c6:3a:a5:b1:8d:f3:
f0:75:5f:42:f7:03:f3:f8:ed:f3:0c:29:ea:d1:4b:
df:cd:8c:7e:4a:f8:c9:ed:99:7e:e1:09:50:74:d5:
34:23:f8:71:1f:cb:99:59:86:74:51:e9:b5:bb:c2:
50:34:ad:fb:2d:4f:0e:70:ad:9b:29:8b:db:e3:00:
06:93:ac:e0:b3:46:7c:0d:70:03:86:96:63:b1:e2:
58:cc:06:98:d5:44:06:17:db:46:96:05:32:c7:9b:
ab:64:92:98:d1:a8:18:31:cc:1c:b8:4d:d8:5b:3f:
42:70:72:39:bf:ff:cb:d4:5c:d0:5c:45:11:07:08:
60:58:52:7d:5a:54:1f:df:df:a9:3e:e1:e5:2d:bb:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:92:C4:FB:6F:FD:E3:F7:3E:C6:8F:91:02:D4:CD:E2:BA:FD:59:0D
X509v3 Authority Key Identifier:
keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/oJLE-2_94_c-xo-RAtTN4rr9WQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.123.0/24
91.206.96.0/23
185.79.32.0/22
193.242.146.0/23
194.126.229.0/24
194.140.250.0/24
195.80.229.0/24
195.93.142.0/23
195.226.207.0/24
195.245.204.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:06:9f:2f:0e:bf:d0:85:a9:5c:bc:5f:4b:bd:e0:78:22:cd:
68:82:90:0e:30:e2:68:c1:2b:03:49:0a:1e:b2:e9:1b:f9:f4:
3c:70:05:af:e1:31:d5:1e:66:d2:56:f3:fd:5a:85:6a:9f:dd:
af:a3:9a:fc:1e:9a:ee:2b:1e:26:1a:31:bc:fa:44:66:28:37:
de:17:e9:d2:28:4f:c1:da:c2:1c:2e:6e:01:ce:1a:3a:32:85:
1d:87:c6:fa:b0:10:13:d7:3e:42:79:d5:4c:6f:25:47:92:64:
27:1a:12:83:83:f8:76:89:09:ab:ba:89:bb:7e:c1:f4:2b:f5:
f9:d2:8c:55:8f:c5:c0:13:15:d3:c2:9f:ed:bd:2e:4b:c9:0f:
ed:32:eb:06:19:28:82:65:92:f6:70:0d:4c:95:9d:14:72:fd:
c1:c2:1f:6b:92:0a:37:92:d5:a8:3e:f5:2b:f2:0d:66:65:ea:
e2:f7:00:47:c8:d6:b4:58:0d:0b:ad:de:62:ed:5c:40:57:30:
43:f7:b4:0b:8f:4b:dc:2d:c9:0c:26:0e:d9:52:b0:f9:57:72:
45:28:50:ba:16:4b:e4:33:5c:44:e4:00:37:db:fa:70:24:03:
c6:da:4c:aa:74:8f:4a:8f:d2:17:10:90:33:75:10:75:13:76:
29:9e:bd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:11:07 2025 by rpki-client on console.sobornost.net