Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/OcSSArCWQB8P_3TQhOP1Kjmg4F4.roa
File: OcSSArCWQB8P_3TQhOP1Kjmg4F4.roa (raw, json)
Hash identifier: +2C6c4zXqA1Vi974tbwpI0Ciww2lyqoubywKBoSNij8=
Subject key identifier: 39:C4:92:02:B0:96:40:1F:0F:FF:74:D0:84:E3:F5:2A:39:A0:E0:5E
Certificate issuer: /CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
Certificate serial: 0194236A17BDDC5CA5EC38DC5E02FB7C0C16
Authority key identifier: 5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/OcSSArCWQB8P_3TQhOP1Kjmg4F4.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31477
IP address blocks: 91.198.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:17:bd:dc:5c:a5:ec:38:dc:5e:02:fb:7c:0c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39c49202b096401f0fff74d084e3f52a39a0e05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:98:01:22:61:6e:9e:26:5a:d0:72:10:c2:
4c:ac:6e:44:18:95:35:bf:a9:4f:6f:89:03:56:47:
da:20:06:e7:f5:9c:cd:a4:ff:02:7e:5a:60:09:60:
ee:ee:b0:4c:97:c6:5d:69:37:35:f8:9b:15:5e:92:
7a:79:61:bf:90:fc:16:78:c3:a4:e2:5d:c9:e1:04:
86:39:46:f5:98:bd:9a:ec:4e:df:af:25:7d:a8:80:
17:9c:02:41:ec:8f:12:37:b2:c8:2a:79:69:0f:f9:
e4:f2:4e:2f:ef:45:a6:1c:18:88:d0:23:e3:68:a8:
b0:bc:86:47:15:ec:64:c0:cf:0d:42:f9:44:ae:5b:
9e:93:77:36:e6:cb:c1:d2:df:87:e3:9b:5c:f6:a6:
a4:aa:ca:67:7a:98:fe:7e:37:5b:2b:54:45:06:d3:
59:bc:18:de:2e:8a:ed:79:c7:6d:1e:10:20:e4:0b:
50:a4:31:6a:6b:6a:d7:2d:17:5c:23:e6:bb:50:e3:
00:30:cf:31:b2:4a:36:a7:0a:46:67:3a:87:a9:a0:
05:38:08:49:22:da:89:3d:cf:26:dd:ca:50:15:e2:
69:bd:c8:e0:0f:05:6c:3c:cf:9e:30:f0:5e:cc:22:
34:58:5e:67:3b:18:d8:c5:90:4d:53:75:c2:ab:02:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C4:92:02:B0:96:40:1F:0F:FF:74:D0:84:E3:F5:2A:39:A0:E0:5E
X509v3 Authority Key Identifier:
keyid:5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/OcSSArCWQB8P_3TQhOP1Kjmg4F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.178.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:81:c9:c7:d5:23:7f:ad:dd:88:2e:ee:d5:37:89:4f:69:f4:
b6:ce:b4:35:d6:b4:c4:db:67:90:77:60:fd:3c:cc:5e:bc:1f:
4a:42:b3:a4:e8:c1:e1:49:6e:fa:7e:83:13:ca:9f:5e:ff:0b:
97:31:b7:2b:c0:0a:52:a4:1e:6f:cf:11:34:60:98:33:7c:fe:
9f:3d:78:8c:ff:8e:f7:c6:75:bd:f3:c1:dc:c3:55:be:9b:ae:
31:30:67:df:d0:0f:9c:e6:af:d7:91:df:d5:64:2c:9d:0b:bd:
6d:e5:a6:b2:65:38:ec:0a:91:03:bf:ce:10:9a:5f:c9:f1:b4:
c3:47:a8:4f:2d:3f:e4:4d:46:e6:74:e7:55:bb:a2:5c:82:ad:
b8:43:d8:f5:c8:e1:9b:c2:b1:6d:32:fc:64:61:f8:5e:c2:38:
7d:cb:9d:da:26:1a:9c:27:1a:ef:f5:b6:34:ac:21:61:c0:46:
93:b6:83:07:4c:44:c6:95:a4:95:75:df:81:19:74:df:41:b3:
c8:47:50:ab:ea:70:4a:bb:7b:28:90:e9:4a:e1:18:ba:40:0e:
89:58:56:62:38:21:65:f1:2a:18:ce:d5:87:56:c3:39:17:b9:
42:cc:b8:7f:22:c1:93:cc:6a:4c:7b:19:7b:20:5a:d9:8c:b0:
46:c1:15:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net