Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/OxvFaONKoxCOrutDpukgqJ3nW28.roa
File: OxvFaONKoxCOrutDpukgqJ3nW28.roa (raw, json)
Hash identifier: dLzb+IBamoEUiaEEA1Z/yikvFEJhXOcTvLAmddRrWJ0=
Subject key identifier: 3B:1B:C5:68:E3:4A:A3:10:8E:AE:EB:43:A6:E9:20:A8:9D:E7:5B:6F
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01961A749DB72470EFD3D5D9819D67C898C8
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/OxvFaONKoxCOrutDpukgqJ3nW28.roa
Signing time: Wed 09 Apr 2025 12:09:32 +0000
ROA not before: Wed 09 Apr 2025 12:09:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211904
IP address blocks: 213.176.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:74:9d:b7:24:70:ef:d3:d5:d9:81:9d:67:c8:98:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Apr 9 12:09:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b1bc568e34aa3108eaeeb43a6e920a89de75b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:28:13:31:5a:ab:62:7f:4a:56:b3:b3:16:4b:
61:83:f2:62:ff:d5:98:49:7d:c6:c4:33:68:0a:5d:
e6:9e:bb:90:aa:83:db:66:58:87:ae:90:6f:73:94:
84:09:ab:ba:0d:41:39:00:f6:4e:5b:98:d4:3e:e2:
8c:5f:98:d9:fd:47:2d:83:85:5e:5e:62:34:e6:76:
84:9f:e1:08:2f:70:df:0f:06:7d:43:e3:14:98:81:
a1:70:1a:0a:77:50:da:58:83:aa:77:f7:45:4b:e0:
64:fe:94:bb:fc:38:d8:22:f4:30:86:f7:47:af:43:
60:56:ad:98:01:48:85:a1:71:cb:2f:7c:7b:1c:3c:
b1:f0:a6:4f:ff:fc:b9:1d:1b:90:da:b0:7d:6c:b0:
e1:7d:6b:96:4c:ba:82:7d:ef:a8:f6:ec:d6:d3:8f:
8b:8e:df:c4:dd:c4:56:4c:58:06:07:68:3c:9c:96:
87:3b:db:7f:5c:c9:fd:db:9d:80:78:eb:c1:dd:7f:
39:15:b3:f4:1b:1c:e4:8d:ee:68:ad:f5:0c:9c:0b:
68:4f:54:ca:94:32:05:54:b5:9c:7f:e0:86:36:ac:
bd:62:2e:cf:13:0f:83:2c:14:30:b5:6c:d2:10:9a:
b3:81:b3:a4:ac:4f:92:7a:e7:a2:b3:7e:f6:90:d9:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1B:C5:68:E3:4A:A3:10:8E:AE:EB:43:A6:E9:20:A8:9D:E7:5B:6F
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/OxvFaONKoxCOrutDpukgqJ3nW28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.1.0/24
Signature Algorithm: sha256WithRSAEncryption
01:22:e2:99:d0:40:1f:c8:24:a9:bd:19:e9:f1:98:cc:1a:d9:
6e:1d:9e:24:f9:df:ea:98:d3:81:92:df:ed:b7:c5:51:13:9a:
d0:cc:b9:9b:a9:e6:2d:d8:cb:e7:83:49:34:09:66:17:9f:cc:
8f:2f:3d:15:b5:df:f3:21:6c:f5:99:93:b9:67:cf:81:07:da:
4f:76:96:c5:b3:52:27:73:81:87:62:b8:a3:e0:de:b5:57:d8:
78:2b:76:4b:24:f2:77:7a:eb:48:04:a3:70:7f:33:d1:fc:42:
be:cc:c1:77:1a:d2:8c:4d:d8:78:5b:07:02:94:f8:af:4a:3a:
d0:d4:1e:49:4d:fa:83:95:c3:ae:5a:06:a9:c5:b9:d1:b5:8c:
7d:94:96:dd:2d:04:ac:4f:d3:8b:97:f5:d5:d3:41:87:bf:ce:
5b:16:b1:cc:b5:ad:69:ba:70:27:a6:14:fc:42:b0:75:df:17:
7e:e5:e0:05:59:1d:e2:67:b3:89:d7:b5:8d:e8:90:0e:85:fb:
61:d5:af:a8:ff:53:2d:d8:e6:a3:62:c9:ff:d5:2f:44:61:17:
76:3b:ac:51:46:bd:ad:b9:72:0a:03:e3:92:36:45:a2:50:b3:
e4:a1:9e:66:a0:1f:5a:91:18:ad:21:5f:ea:96:cf:6f:f4:7b:
26:a6:34:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net