Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/OelzXCNyRdJDcTAMZ4XyMzIgxcQ.roa
File: OelzXCNyRdJDcTAMZ4XyMzIgxcQ.roa (raw, json)
Hash identifier: bMfXjKhotrEhF8a4BqCjobsAnEO9NWeA0d2QlYefuYE=
Subject key identifier: 39:E9:73:5C:23:72:45:D2:43:71:30:0C:67:85:F2:33:32:20:C5:C4
Certificate issuer: /CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
Certificate serial: 019604E7EA4E2EBE20FE0BFFCF77F990A5D4
Authority key identifier: 2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/OelzXCNyRdJDcTAMZ4XyMzIgxcQ.roa
Signing time: Sat 05 Apr 2025 07:43:49 +0000
ROA not before: Sat 05 Apr 2025 07:43:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44019
IP address blocks: 31.128.176.0/22 maxlen: 22
146.19.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:e7:ea:4e:2e:be:20:fe:0b:ff:cf:77:f9:90:a5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
Validity
Not Before: Apr 5 07:43:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39e9735c237245d24371300c6785f2333220c5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:03:a6:5e:8a:b3:3c:e7:5c:a2:1f:95:b5:da:
cb:e0:a1:27:b0:af:9c:bf:42:5a:a1:35:86:e3:bf:
16:d5:3a:c8:4b:5a:8c:71:62:ae:b6:ad:89:61:4a:
4c:8a:5c:08:21:b3:fa:4e:56:8d:e2:03:31:41:b0:
57:64:0b:bb:c9:b7:36:b9:42:34:df:8d:c3:ec:c8:
53:73:d7:8a:bd:d9:6a:97:cd:db:15:d4:82:e6:ad:
2c:a7:35:df:0b:4a:74:04:92:4f:e2:08:90:f2:07:
bb:3b:4b:fa:ac:be:cc:0b:08:34:20:3d:8e:47:92:
af:e4:69:6e:48:9a:0a:86:0a:90:39:d3:42:77:93:
29:21:9c:7a:aa:30:a5:17:3c:10:de:35:74:49:d1:
bf:68:de:11:21:e7:14:2a:6c:02:d6:8f:e9:33:93:
0e:bf:6f:63:6b:1b:39:67:3d:ad:3b:98:6d:50:d6:
69:a4:24:7b:56:c3:5c:95:51:02:7c:cc:4d:27:8e:
89:0a:a9:07:9d:62:76:78:41:a0:24:dd:eb:6c:c9:
58:80:dd:be:02:39:30:3e:34:14:49:8d:9d:f7:2f:
06:34:10:bd:13:78:94:8f:ed:d3:76:93:96:fd:56:
20:ea:5c:c3:e8:39:db:b7:61:c2:55:43:19:cb:30:
7c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E9:73:5C:23:72:45:D2:43:71:30:0C:67:85:F2:33:32:20:C5:C4
X509v3 Authority Key Identifier:
keyid:2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/OelzXCNyRdJDcTAMZ4XyMzIgxcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.176.0/22
146.19.241.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:5a:16:c6:27:64:a6:7e:7d:99:64:a4:24:2c:f7:ec:b1:4b:
c8:e2:e7:e3:2c:f5:c9:19:cc:0e:0c:6d:fe:69:a9:ce:77:de:
92:d4:12:49:62:7a:d1:06:e8:45:19:52:f6:a7:8b:38:97:9e:
0e:f2:d0:d1:7d:d4:86:53:fc:ee:6c:0e:e9:4a:ed:eb:61:34:
63:02:81:dd:c9:fd:8f:03:dc:43:e0:65:17:8f:bd:96:6f:33:
c9:25:ca:26:91:03:01:53:4d:ea:5b:b5:cf:88:3a:6e:aa:09:
a8:ce:c9:db:ba:1d:f5:fc:8f:9b:4c:51:9d:26:cd:86:41:92:
67:67:35:05:c3:54:bf:bc:be:a3:29:43:82:c2:45:4e:c5:a1:
be:ed:f7:1c:0a:fb:ac:94:52:cf:c5:19:39:e5:3c:fa:2d:0a:
a0:07:1d:86:ad:b6:98:66:0c:d2:88:f3:bb:5f:d4:39:e2:bc:
d1:e2:21:08:2e:a9:e1:94:01:0d:0b:af:89:54:e7:08:2e:f2:
1b:82:37:8d:96:f8:1f:56:eb:0f:21:c3:14:17:02:79:d0:31:
68:fe:2f:bd:3f:2b:aa:94:21:65:50:a2:84:b0:e5:b8:40:c4:
a7:57:ab:6a:46:46:61:c8:c6:73:71:55:18:aa:4a:2a:32:77:
04:b0:a0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:00 2025 by rpki-client on console.sobornost.net