Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/oNaxj3U73YsxY2SMYd62wSvMB4E.roa
File: oNaxj3U73YsxY2SMYd62wSvMB4E.roa (raw, json)
Hash identifier: +NOpZAlgmwl+h9fy4R1kVxAQ1d7pxMvgMiKewHh1e4g=
Subject key identifier: A0:D6:B1:8F:75:3B:DD:8B:31:63:64:8C:61:DE:B6:C1:2B:CC:07:81
Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial: 0194228E1033FAC0FFED31D7A404F5AE208E
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/oNaxj3U73YsxY2SMYd62wSvMB4E.roa
Signing time: Wed 01 Jan 2025 15:48:43 +0000
ROA not before: Wed 01 Jan 2025 15:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7155
IP address blocks: 194.213.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:10:33:fa:c0:ff:ed:31:d7:a4:04:f5:ae:20:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Validity
Not Before: Jan 1 15:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0d6b18f753bdd8b3163648c61deb6c12bcc0781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:da:9d:5e:1c:f9:59:28:cc:82:08:4e:09:
50:8a:17:a4:49:56:bb:8c:2a:2c:49:39:26:8c:fc:
e5:f0:c2:c8:78:7d:91:0b:9a:9d:76:5b:23:e5:78:
04:63:02:71:81:b8:fd:d7:23:3b:59:b1:a8:f9:94:
82:1b:b4:a4:0c:ec:93:4e:76:d9:ec:fa:0d:55:59:
24:68:bc:ea:30:3c:80:09:a2:e8:5d:96:08:cb:d2:
50:ed:18:2a:a0:cf:2b:47:ab:21:2e:3b:0b:b9:be:
14:7b:ff:84:31:4d:8e:ad:91:b0:9a:36:09:e1:4b:
08:f6:36:37:69:4b:ce:4e:48:57:e0:89:df:51:11:
c6:c9:25:16:c1:db:cb:d4:6b:78:ec:45:7d:8a:99:
71:59:8a:e0:69:39:f9:f9:f2:85:75:78:27:b6:77:
56:b0:6a:e6:b7:23:e5:30:01:91:1d:8c:02:fa:e2:
41:b0:a3:5c:04:a4:96:87:79:11:10:76:82:0a:87:
3b:3b:9c:51:8c:4a:cd:2b:ad:d5:90:9f:b4:42:23:
08:67:eb:57:29:b0:65:5d:29:04:86:2a:86:31:dc:
17:a2:c7:70:f1:06:13:fd:9c:fd:92:a1:3e:16:0c:
54:ec:39:3c:17:20:de:e2:0a:30:a7:ec:74:d6:1d:
c5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D6:B1:8F:75:3B:DD:8B:31:63:64:8C:61:DE:B6:C1:2B:CC:07:81
X509v3 Authority Key Identifier:
keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/oNaxj3U73YsxY2SMYd62wSvMB4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.213.14.0/24
Signature Algorithm: sha256WithRSAEncryption
68:22:0a:b4:a4:34:b9:46:8c:7c:18:01:e0:4f:f7:a1:4a:ee:
0d:5e:25:ae:23:8c:81:a9:20:d6:85:e3:d2:93:7a:1f:99:f9:
53:8b:ce:6d:ef:89:ac:bc:dc:14:21:1a:3a:cc:58:5a:b4:7d:
39:b5:67:98:fd:fa:76:5d:93:62:b0:8c:64:4c:9c:5f:5f:c6:
30:29:11:65:54:06:3c:89:2a:3c:46:43:a8:6e:90:d3:a6:75:
33:90:bc:1d:2d:4a:5c:55:03:0c:cf:3e:1a:3a:60:e7:66:3e:
d1:aa:44:ef:22:cd:b7:44:8a:99:14:19:2d:69:be:56:8d:67:
af:ba:d8:0a:99:8c:c1:5c:50:c9:89:3e:79:54:47:23:6e:ba:
57:c3:cf:8a:c1:8d:3c:58:23:ec:a6:90:02:14:de:0f:68:1c:
45:31:0b:cd:7c:68:e3:67:53:42:99:ef:4e:76:ea:b5:4e:96:
8d:d0:06:36:a9:3f:64:ec:ea:be:80:32:c3:83:50:80:d2:cf:
e2:55:fb:1f:5f:9d:24:8a:2e:1e:23:93:b0:84:c1:68:61:f2:
71:f4:24:30:df:41:b8:36:ab:3a:65:1c:71:b7:10:67:45:43:
f3:c1:03:d0:e0:6b:fb:0b:69:60:26:65:e5:d3:13:b8:b8:71:
e6:79:ae:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:08 2025 by rpki-client on console.sobornost.net