Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/On0DEmf-01HORZk3spXyektI0Lk.roa
File: On0DEmf-01HORZk3spXyektI0Lk.roa (raw, json)
Hash identifier: Bar0MHXwwTasd/Ac6N80OMRmJdgWaPAig35Wp/SdC24=
Subject key identifier: 3A:7D:03:12:67:FE:D3:51:CE:45:99:37:B2:95:F2:7A:4B:48:D0:B9
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 01946913C7D7C447AB9A69EE3AA289CAEBF3
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/On0DEmf-01HORZk3spXyektI0Lk.roa
Signing time: Wed 15 Jan 2025 08:28:11 +0000
ROA not before: Wed 15 Jan 2025 08:28:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35280
IP address blocks: 147.234.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:13:c7:d7:c4:47:ab:9a:69:ee:3a:a2:89:ca:eb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 15 08:28:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a7d031267fed351ce459937b295f27a4b48d0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:ea:6f:f6:b3:5d:64:85:a5:6c:28:bf:e5:
af:18:90:14:11:bf:24:c8:bd:c0:e6:4e:53:e9:92:
f6:ee:75:56:1a:37:be:57:07:55:7f:97:a4:de:63:
42:2c:bc:07:5d:65:50:96:ac:8d:31:31:35:02:9c:
8e:92:dc:3b:d4:b2:bd:12:02:42:ea:e3:79:e4:45:
f2:3a:7d:6b:32:f5:2e:0e:b3:10:74:a5:71:9c:94:
f7:85:5b:3c:de:eb:55:b2:33:6d:ee:61:c0:90:72:
fb:d2:93:86:e6:7d:23:de:77:37:36:a9:1b:3e:60:
0a:bc:c5:de:47:d1:94:08:7e:7d:78:75:22:24:d7:
fd:24:84:c4:c8:a7:9c:5e:5b:07:00:bd:ce:8e:d1:
91:fb:e2:47:01:6d:06:a6:8d:bc:10:f6:f5:65:fe:
11:35:dd:62:bf:d6:9e:18:88:1a:d0:b6:e8:4d:41:
6d:08:ac:cc:62:69:39:e5:d2:7c:b5:7b:9e:a9:9b:
3a:70:81:b5:1f:d1:77:50:2e:84:d6:5b:9a:0f:1b:
cc:70:1e:10:7d:7c:c8:b6:33:db:58:77:63:fa:29:
8d:eb:b4:2f:ed:34:2c:2c:d2:47:7c:34:92:0c:25:
f0:2b:b7:05:89:cf:38:d3:ec:d4:62:f2:31:1f:88:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7D:03:12:67:FE:D3:51:CE:45:99:37:B2:95:F2:7A:4B:48:D0:B9
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/On0DEmf-01HORZk3spXyektI0Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.5.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e9:aa:21:c5:a5:94:b3:f7:68:11:5d:70:2f:cc:e8:66:53:
ef:be:bb:c6:a0:79:52:0e:82:c0:14:90:f2:c4:a6:a0:68:5d:
c8:6c:27:01:e0:9f:d0:05:53:f3:c5:15:bc:ee:af:b6:2b:27:
50:e4:0a:da:2b:0c:2c:53:4d:88:1d:70:e0:a6:01:b0:2e:2b:
4e:e2:aa:1c:59:ab:2c:11:73:90:e9:67:f0:d1:76:a5:57:dc:
fe:9b:c7:e0:76:57:1c:37:5b:47:e1:e8:c7:f2:87:6e:74:aa:
06:8d:da:f5:9d:6a:c0:c7:ed:bb:0d:1e:ea:e7:e5:f6:ad:12:
54:78:5b:44:9e:70:29:3d:86:7a:6a:84:51:f4:e6:09:3e:04:
13:59:74:0e:27:8b:94:ff:cb:b1:00:2f:f8:02:74:4c:8e:88:
b1:18:57:2b:ba:41:19:37:5a:ca:9f:72:72:15:92:ac:d4:6e:
5c:f7:63:99:3a:81:3a:37:19:8e:51:d3:a7:39:ea:bb:c9:df:
c2:c8:dd:7b:06:0e:93:ad:fd:9c:ea:1d:a7:24:27:c6:5b:aa:
1b:79:25:49:5e:00:59:30:9c:0a:13:80:43:9e:c4:93:c9:d8:
2d:ca:e8:72:cc:35:c9:0c:7d:8f:e9:24:82:d7:d7:48:6d:d0:
e5:21:0f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:25 2025 by rpki-client on console.sobornost.net