Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/O4TtMGRs3ye4O2Q5jvVxazMIR9U.roa
File: O4TtMGRs3ye4O2Q5jvVxazMIR9U.roa (raw, json)
Hash identifier: 9VIYLNfZ020gE1f1hoDXmr1618/zqq7HM/yIvqEEQcQ=
Subject key identifier: 3B:84:ED:30:64:6C:DF:27:B8:3B:64:39:8E:F5:71:6B:33:08:47:D5
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274848E6339709D4507BC5E3BF47E729
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/O4TtMGRs3ye4O2Q5jvVxazMIR9U.roa
Signing time: Thu 02 Jan 2025 13:50:35 +0000
ROA not before: Thu 02 Jan 2025 13:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29216
IP address blocks: 192.36.148.0/23 maxlen: 23
192.36.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:48:e6:33:97:09:d4:50:7b:c5:e3:bf:47:e7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b84ed30646cdf27b83b64398ef5716b330847d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:ee:41:8c:42:db:ed:6f:aa:50:f3:d1:96:
05:af:95:fe:e9:ff:6c:e0:51:a9:d4:d1:9a:ed:02:
8d:eb:0f:13:e6:ea:d1:06:be:dc:98:6d:57:ae:9b:
e6:4b:de:97:ec:2d:e7:e2:d9:de:27:9f:ae:64:36:
02:7c:37:08:e1:89:1b:af:14:e5:c2:51:9c:27:4e:
19:2e:0f:04:2b:8c:c2:13:ea:0a:03:ab:ab:73:59:
73:83:d3:c9:66:2a:9c:be:a1:ce:b5:d7:26:18:6e:
35:a1:ba:b9:83:df:0e:1a:57:2b:b4:69:72:39:32:
7b:fb:1b:bb:3b:c5:a4:c2:29:53:71:13:d0:e6:3c:
38:a0:4a:1e:99:80:fd:c1:c2:70:8d:19:87:e7:e5:
01:14:22:d0:0e:fc:f8:7c:ba:aa:ac:85:9c:ab:fd:
60:dd:42:a3:90:2f:6b:ed:a7:3e:6e:d3:75:64:3b:
66:46:de:3c:4c:4c:34:79:83:8f:fb:fc:da:87:1d:
98:00:d9:ce:a8:5c:6f:46:1c:6e:ab:0d:63:bd:85:
4f:91:72:e0:43:05:44:51:61:ec:6f:b5:ff:6c:fb:
93:2f:7f:76:9e:db:48:74:3a:f5:8e:32:e9:57:d8:
1f:22:e2:99:15:69:d6:5e:a5:c0:65:62:a2:7c:e0:
63:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:84:ED:30:64:6C:DF:27:B8:3B:64:39:8E:F5:71:6B:33:08:47:D5
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/O4TtMGRs3ye4O2Q5jvVxazMIR9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.148.0/23
Signature Algorithm: sha256WithRSAEncryption
59:7e:76:3d:b1:13:52:00:30:96:61:a8:7a:2b:33:24:72:89:
0e:5c:bc:67:8c:9b:62:2a:e1:0a:d9:43:c2:6b:88:a5:f3:97:
61:25:73:dd:cc:6a:2a:f0:dd:11:42:88:be:f0:48:09:eb:15:
db:26:6c:fe:51:c2:7e:5c:2b:a0:23:94:f0:af:34:6b:ee:2a:
61:d0:94:04:99:08:fd:da:6f:01:42:89:74:37:c4:69:7c:9f:
95:2d:cf:1a:fa:e1:b1:80:aa:4e:11:a7:0b:56:0f:79:62:9c:
20:f5:64:c6:c5:05:ee:b2:e3:1a:52:7d:35:e7:19:bc:f7:f3:
5e:80:b1:af:d4:4b:a8:0c:ee:41:4b:97:f9:5c:88:7d:60:a2:
ed:5c:b0:c3:ec:3d:fb:6a:17:ef:ea:38:01:4e:33:a1:05:c7:
fe:08:57:55:58:c7:c1:88:e6:1e:32:49:c8:b8:f8:cd:80:4d:
0d:0f:97:c4:1f:6b:f2:bf:98:0a:90:29:10:e7:6f:b5:db:95:
05:86:e7:66:93:b8:85:38:27:c3:23:fb:c6:de:b3:1c:fb:ff:
0b:ac:ae:22:14:31:cc:32:4c:0e:6f:25:2f:0d:24:65:7a:fa:
24:82:71:d9:ec:96:7a:38:7c:ab:a5:f1:9a:3c:94:aa:29:83:
1e:54:4c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:18 2025 by rpki-client on console.sobornost.net