Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/ocfaSphrJL3xu-4-94X1BAg_eco.roa
File: ocfaSphrJL3xu-4-94X1BAg_eco.roa (raw, json)
Hash identifier: CMK1dG+CtJembHP9+sAk12iQiNKdSn83yhz9BkvkSQ4=
Subject key identifier: A1:C7:DA:4A:98:6B:24:BD:F1:BB:EE:3E:F7:85:F5:04:08:3F:79:CA
Certificate issuer: /CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Certificate serial: 019425221590861C8D78056F53E581A30E86
Authority key identifier: 5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/ocfaSphrJL3xu-4-94X1BAg_eco.roa
Signing time: Thu 02 Jan 2025 03:49:38 +0000
ROA not before: Thu 02 Jan 2025 03:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2445
IP address blocks: 192.33.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:15:90:86:1c:8d:78:05:6f:53:e5:81:a3:0e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Validity
Not Before: Jan 2 03:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1c7da4a986b24bdf1bbee3ef785f504083f79ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:19:89:e8:44:b1:4b:88:41:5c:7e:af:67:
87:07:e0:f5:08:63:cb:eb:9a:eb:04:cd:00:ce:e8:
13:be:21:4d:01:8d:43:ca:d5:29:c3:3a:69:d9:be:
89:d9:54:3e:31:a9:67:c8:c7:7b:ec:43:86:1c:22:
09:30:3f:48:6a:2d:1f:2a:27:f6:a5:22:e7:d2:ef:
db:6e:cf:7e:d0:c3:45:c3:cd:71:71:60:1d:c8:8f:
a5:30:8a:b4:8e:67:1b:ce:b5:99:ac:25:fa:2f:04:
8d:b3:83:67:06:ca:c9:64:1b:5d:b5:88:7c:cd:4a:
bc:1b:a2:de:ee:12:6f:89:49:96:74:c4:8c:5c:a5:
71:5f:6e:ed:55:e9:f2:a4:cc:62:b7:fd:18:25:1a:
54:3c:30:09:5f:25:a1:31:21:02:bc:18:d6:76:c0:
ae:55:31:4e:69:7c:4f:17:3c:fa:8d:dd:33:e8:91:
c3:f0:f8:0c:8c:73:04:6a:31:d0:c6:97:2b:de:cc:
4a:0b:98:28:22:fd:1b:c2:c3:07:c3:84:fe:fd:fb:
af:c2:02:4e:c7:6f:ab:bc:2c:9f:9c:24:70:54:86:
9b:90:d1:0f:c6:a5:30:4d:2a:f0:29:29:bd:b2:9a:
27:5f:3a:13:ee:6a:21:67:fb:63:3e:60:a7:07:39:
6c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C7:DA:4A:98:6B:24:BD:F1:BB:EE:3E:F7:85:F5:04:08:3F:79:CA
X509v3 Authority Key Identifier:
keyid:5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/ocfaSphrJL3xu-4-94X1BAg_eco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.33.156.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:af:26:b6:90:c7:60:f1:6c:9d:89:de:b6:28:af:2c:8b:a8:
6a:0f:53:76:23:e9:10:ff:03:a2:d6:23:6a:35:70:8b:77:8d:
b5:9f:fa:60:2a:f8:38:f8:af:5a:f1:b3:c0:c3:29:4d:bb:c6:
f8:2d:89:26:4d:c5:57:15:90:f0:5c:0b:07:c7:1a:e7:de:57:
3d:fc:9f:da:6a:34:2c:b7:10:2b:d0:24:7e:b4:cb:85:7f:d3:
fb:7a:45:d9:e9:60:39:b8:30:91:f4:aa:03:6d:55:bd:b6:7f:
95:f4:3f:89:f3:34:5c:5a:f3:cb:06:88:75:fc:43:28:60:b6:
75:16:91:39:ba:0e:ff:00:dc:9e:23:82:2d:79:ad:ed:08:25:
89:a3:9d:62:85:62:e2:4b:24:6b:11:4b:9b:8e:7e:96:23:81:
27:17:8e:ae:a1:f9:60:83:0c:4b:78:3f:a2:54:21:37:c4:cc:
88:76:5e:0a:94:96:85:8f:bc:9c:de:25:84:8f:21:4f:0b:bf:
b8:be:3e:d0:5d:71:cf:46:1b:c5:ec:b1:26:58:1d:fa:c6:0d:
60:78:bb:44:06:d6:7b:85:11:33:54:0a:d4:ce:38:fd:d9:ac:
e7:29:f4:bb:8f:b3:cb:80:70:99:f0:e4:08:ed:ee:04:8e:91:
f0:83:47:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:10 2025 by rpki-client on console.sobornost.net