Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/oo-z_CXtsFEYNitndCSAJspDNSA.roa
File: oo-z_CXtsFEYNitndCSAJspDNSA.roa (raw, json)
Hash identifier: QnQx9vPssVxJL7EjnTa4Xy3dXyJwi0Kmh9Xnp+svQIA=
Subject key identifier: A2:8F:B3:FC:25:ED:B0:51:18:36:2B:67:74:24:80:26:CA:43:35:20
Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial: 019425FD0FC636FEC27B5B8956CE56807F86
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/oo-z_CXtsFEYNitndCSAJspDNSA.roa
Signing time: Thu 02 Jan 2025 07:48:49 +0000
ROA not before: Thu 02 Jan 2025 07:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15532
IP address blocks: 91.206.104.0/23 maxlen: 23
194.11.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:0f:c6:36:fe:c2:7b:5b:89:56:ce:56:80:7f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Validity
Not Before: Jan 2 07:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a28fb3fc25edb05118362b6774248026ca433520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:24:26:6c:52:ad:f6:ad:c8:6d:2d:3c:df:69:
81:70:3a:08:6a:4e:29:54:06:8e:97:48:3e:a1:c3:
92:f2:fa:fe:71:f0:1f:25:4e:aa:64:a5:58:8c:0c:
38:b2:d5:a4:ad:c0:fd:c6:bf:4a:d2:f8:93:c2:c9:
38:48:c9:ea:d3:76:7d:f4:f5:2f:a0:02:b0:8f:3d:
0f:c0:26:c7:fa:ae:60:f8:d1:62:ce:71:3b:32:14:
18:ea:17:1f:cd:3f:e4:dd:5e:04:63:68:e5:4f:a3:
c0:7f:24:95:06:0e:1e:96:69:ca:bc:e5:4f:e7:97:
b0:b3:a8:62:68:9f:ff:29:23:83:92:9d:ed:37:60:
0d:5b:b6:1d:55:f8:2a:ac:6d:d2:54:31:a7:17:78:
c3:71:2a:98:58:34:0b:27:dc:56:4e:1b:fa:8a:37:
19:cf:20:00:78:22:45:20:9a:90:e3:f4:5c:5a:7c:
af:6b:6d:32:ee:c0:6e:fc:72:a4:d0:10:e9:58:f8:
96:64:6d:a6:a1:ad:65:f2:50:1d:43:bd:a0:c1:e6:
b8:06:33:d8:bd:68:26:4d:57:71:c2:16:02:0e:93:
80:af:ae:0f:e6:92:c5:53:3f:1b:de:e1:95:d1:5e:
b4:ad:bf:2a:b6:40:b4:e8:a4:13:d4:22:78:7d:20:
78:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8F:B3:FC:25:ED:B0:51:18:36:2B:67:74:24:80:26:CA:43:35:20
X509v3 Authority Key Identifier:
keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/oo-z_CXtsFEYNitndCSAJspDNSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.104.0/23
194.11.223.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:8d:ee:93:16:88:6f:e7:58:e2:cd:22:f5:80:a1:13:19:7a:
41:72:7b:ab:8d:2e:c7:71:82:65:29:02:48:0e:56:82:25:d8:
61:b4:93:bc:f9:fc:cf:dc:8b:e7:b0:5e:d2:29:5b:ee:fa:90:
dc:bb:a1:56:1f:5d:92:72:4a:68:c2:4a:56:22:59:ba:ba:80:
de:f6:5b:a6:d1:49:6e:fb:dd:c4:41:ff:04:60:89:27:12:01:
6c:9b:87:e9:9b:bc:56:47:db:95:08:b8:1b:c2:26:d1:7f:02:
e4:8b:1a:b2:d6:0d:65:07:fa:51:c7:2e:56:3a:de:94:a9:b0:
05:c5:69:cf:70:a9:3d:55:10:6a:c1:6b:53:23:2b:1d:22:a8:
a0:ee:44:f0:76:c1:a3:00:49:f1:55:ae:dd:5c:f7:bc:99:8d:
ad:3e:1d:49:fc:5c:37:9e:1a:bd:93:d2:3e:d2:e9:f4:63:83:
ad:d6:7e:90:7a:7a:95:d9:bc:81:ee:f2:92:3f:f5:a1:04:29:
1c:41:9c:ed:65:ea:be:2a:20:12:18:79:0a:c4:7e:29:2e:a2:
7d:91:e0:97:70:4f:5c:95:0b:f8:8b:d2:55:c8:5f:65:ce:e2:
95:1f:91:79:eb:df:5c:e6:c0:82:7a:c1:51:c2:d5:a8:a8:66:
5b:a1:cc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:50 2025 by rpki-client on console.sobornost.net