Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/oSktbEz0CouLjJ7YPnkmyrcQfcw.roa
File: oSktbEz0CouLjJ7YPnkmyrcQfcw.roa (raw, json)
Hash identifier: V6P4xLHRE/6CaQ7pxwLQqH6zR4WlFEsCjnepA34qqx0=
Subject key identifier: A1:29:2D:6C:4C:F4:0A:8B:8B:8C:9E:D8:3E:79:26:CA:B7:10:7D:CC
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019624F6DCBEAA283963BF264F04502CBA3D
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/oSktbEz0CouLjJ7YPnkmyrcQfcw.roa
Signing time: Fri 11 Apr 2025 13:08:00 +0000
ROA not before: Fri 11 Apr 2025 13:08:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31715
IP address blocks: 62.72.188.0/24 maxlen: 24
81.21.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:24:f6:dc:be:aa:28:39:63:bf:26:4f:04:50:2c:ba:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 11 13:08:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1292d6c4cf40a8b8b8c9ed83e7926cab7107dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:bd:ad:63:dd:4e:ef:e0:54:f6:9d:15:9b:
fb:01:20:42:9f:67:48:92:91:3a:0d:31:36:27:2d:
60:aa:c0:e5:e2:b8:3b:92:25:58:a2:0f:05:5a:a1:
87:e5:64:0e:bd:39:1e:ff:38:70:90:8f:90:f6:29:
f7:e5:2c:f2:43:58:3c:78:37:85:0b:01:1a:7e:44:
73:cf:22:68:19:86:c3:32:a8:68:14:e5:52:16:c8:
bb:a9:8e:0f:c6:35:f9:5b:51:88:d5:08:db:f9:65:
bd:a4:a4:24:61:3e:25:4c:16:9e:a3:bd:3c:bb:71:
6a:2d:a6:5c:9f:ae:94:9f:f7:fc:73:5c:bc:62:71:
14:8d:a2:49:0f:ba:a7:e4:bd:7b:af:a9:ae:02:d6:
14:63:d7:b6:2b:be:40:e9:7a:31:ae:92:04:cf:9d:
1c:e5:4c:0d:79:73:03:b9:5d:8a:02:46:83:f7:b2:
bf:7f:df:c0:fd:44:40:c9:c4:06:42:3f:85:c7:87:
ee:3a:ba:f5:49:b7:56:a0:1c:7f:7c:88:5b:d1:5f:
c9:26:85:cc:7a:db:88:c9:01:ec:ea:57:10:01:f6:
13:bd:0c:5e:4d:f2:26:6c:ad:89:b0:87:e4:3f:01:
bd:8b:4f:73:1a:4b:c1:35:8d:43:24:af:cd:2f:78:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:29:2D:6C:4C:F4:0A:8B:8B:8C:9E:D8:3E:79:26:CA:B7:10:7D:CC
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/oSktbEz0CouLjJ7YPnkmyrcQfcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.188.0/24
81.21.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f0:6f:da:47:dd:cb:ad:b5:aa:c9:ba:23:fb:9e:81:f4:98:
1d:30:d8:e8:91:d4:c9:29:1f:59:4a:6e:f0:d4:53:bb:d8:8a:
5f:28:7b:12:34:a9:56:f2:f8:ec:2c:23:b7:4d:a9:c3:8c:ae:
45:d0:c1:a5:42:9a:51:97:89:55:c0:06:ba:d9:6d:a8:52:8f:
2d:dd:5a:5d:0a:24:c8:26:26:15:7a:dc:66:d1:c3:52:3e:03:
6b:a7:43:a1:50:db:33:29:95:71:b1:6c:46:65:70:f2:1f:02:
1c:77:17:eb:80:b6:55:2f:f2:1c:b5:1d:8a:fd:7e:f2:12:d9:
9f:1f:95:b6:9e:82:a8:56:a0:c9:17:6a:82:ab:0c:26:58:2b:
b0:2e:19:e4:3b:2e:68:c0:e3:69:78:5c:5a:2a:f8:ee:53:0a:
72:9e:33:a4:cb:9b:86:b1:2b:85:a8:66:41:30:e8:01:b9:02:
a6:29:37:e9:02:81:20:b9:a7:75:d6:8e:e6:e7:5f:2e:cc:bc:
c9:2a:7f:df:c7:b9:f6:82:66:a5:aa:89:f8:15:af:8f:ac:25:
4e:4f:f2:ea:b4:dc:e0:b6:74:5c:2f:6f:f2:72:09:4a:5f:c1:
fe:8d:d8:b5:60:7a:df:f6:da:09:a4:b4:09:a9:62:59:1c:36:
45:ca:0e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:41 2025 by rpki-client on console.sobornost.net