Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OtfNIp_jb6HOI2uijeGzs2i4R7Q.roa
File: OtfNIp_jb6HOI2uijeGzs2i4R7Q.roa (raw, json)
Hash identifier: x7yqlpuzOUYTjhI9koKYGYix8ZFmxFeUptiD8PTHtzo=
Subject key identifier: 3A:D7:CD:22:9F:E3:6F:A1:CE:23:6B:A2:8D:E1:B3:B3:68:B8:47:B4
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019421B1AFB39FD6D3D39A1A0E48B425995B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OtfNIp_jb6HOI2uijeGzs2i4R7Q.roa
Signing time: Wed 01 Jan 2025 11:48:00 +0000
ROA not before: Wed 01 Jan 2025 11:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200131
IP address blocks: 176.57.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:af:b3:9f:d6:d3:d3:9a:1a:0e:48:b4:25:99:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ad7cd229fe36fa1ce236ba28de1b3b368b847b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:98:38:d8:2e:bb:13:36:41:65:f2:a7:c0:
c7:19:c9:57:57:3b:c9:d4:db:b5:d5:da:68:b0:b2:
ec:f4:07:be:5c:09:c6:1f:ff:01:83:8d:77:9f:1c:
93:71:62:6f:7f:86:fc:7a:e6:9c:0a:00:89:73:7d:
ee:df:a3:a3:99:bf:d2:42:a0:b5:cf:c5:5a:63:89:
d5:d9:61:ae:f9:8c:f8:0f:f8:95:ab:9e:c9:a3:4c:
32:ec:9f:64:4c:b1:25:4b:83:e6:d4:29:10:8f:96:
8e:07:1b:23:a5:e4:2c:94:08:52:aa:34:cd:bd:81:
4d:8d:67:59:f3:70:71:52:60:88:53:c7:a6:fe:14:
a3:0c:9f:cf:bb:ba:fd:b8:7b:e5:02:20:c9:55:52:
24:eb:ef:36:0c:4f:4d:3d:11:ab:42:e5:29:34:e5:
3b:50:4a:78:af:f7:49:a4:b7:b1:61:62:63:da:60:
1a:27:bc:36:f3:ed:ed:99:fc:56:f8:58:e0:96:20:
c0:9f:b6:fc:53:78:93:dd:6b:5a:6a:13:9d:47:03:
49:72:60:d3:c8:ab:58:89:62:05:2c:21:db:c3:f9:
e6:f1:bb:20:07:ef:f6:5b:f8:49:86:28:0c:87:97:
07:ed:9c:95:16:73:a4:ad:72:b5:94:40:8a:0d:c6:
87:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D7:CD:22:9F:E3:6F:A1:CE:23:6B:A2:8D:E1:B3:B3:68:B8:47:B4
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OtfNIp_jb6HOI2uijeGzs2i4R7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.50.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d3:b4:a6:8b:7d:45:b3:1b:7d:6c:d2:07:f6:05:cf:e1:7e:
53:1c:1b:b0:02:86:01:ea:8c:1c:85:c5:30:07:76:a7:55:c9:
33:68:47:3e:94:0e:36:84:3d:4f:e9:c6:3b:45:b0:ca:a5:46:
bd:f7:fb:b2:1b:3e:59:a5:74:85:68:ae:1a:05:ae:b5:ab:8b:
19:97:33:6f:e3:0c:b0:35:59:76:32:c6:94:c4:bd:6e:0e:4a:
88:da:1f:f3:9e:ea:3e:d3:72:e7:64:27:f5:08:00:01:12:ad:
99:51:72:b0:d5:ff:f4:ce:d9:66:58:1d:1f:52:e0:4f:1a:eb:
1d:28:b3:99:33:75:f2:99:68:58:98:cf:25:fd:c1:e2:11:ca:
97:30:3a:bc:4b:d1:5b:68:cf:43:4a:2c:fc:fb:27:54:16:30:
f4:37:f2:ea:76:88:e4:32:a1:16:37:7f:17:6f:c3:17:14:90:
97:71:36:a1:e9:b6:29:4e:26:86:c0:12:37:56:2a:e4:f4:33:
37:51:8f:75:24:a0:bd:6c:52:d7:1a:cc:3c:49:9b:a2:ca:cd:
67:5f:63:a3:7e:27:d4:9b:09:01:8d:51:9f:70:2f:05:db:ab:
b0:9b:c6:5d:bd:10:6d:ca:d7:fc:e7:02:1e:15:72:15:f9:42:
05:3f:50:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:41 2025 by rpki-client on console.sobornost.net