Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/fwe15V3gbUwWh6q8fCfCPzZQDm8.roa
File: fwe15V3gbUwWh6q8fCfCPzZQDm8.roa (raw, json)
Hash identifier: z+s0N2irfFNbej65WJ0ONMjnTWiNWLahh/93F4XH3s4=
Subject key identifier: 7F:07:B5:E5:5D:E0:6D:4C:16:87:AA:BC:7C:27:C2:3F:36:50:0E:6F
Certificate issuer: /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Certificate serial: 01942521C774463320AA2791AB95EB3E986A
Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/fwe15V3gbUwWh6q8fCfCPzZQDm8.roa
Signing time: Thu 02 Jan 2025 03:49:18 +0000
ROA not before: Thu 02 Jan 2025 03:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3209
IP address blocks: 192.109.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c7:74:46:33:20:aa:27:91:ab:95:eb:3e:98:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Validity
Not Before: Jan 2 03:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f07b5e55de06d4c1687aabc7c27c23f36500e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:26:ee:21:a8:4b:f4:b8:25:79:fa:57:09:26:
61:a8:1d:60:30:fd:2d:c2:66:8e:55:6a:39:8b:62:
5e:37:a2:3f:56:c2:5b:43:4c:14:e5:2a:1c:a9:e6:
22:c6:23:f2:92:8b:42:08:e5:16:a2:21:29:6c:d9:
bc:d3:5d:3a:c9:33:32:54:86:32:e2:38:8f:1f:8c:
33:97:9d:e2:15:ca:f1:e8:97:a8:6e:92:43:24:89:
6a:f4:e4:bb:af:0c:20:85:02:d9:8f:97:6b:c4:b1:
00:07:11:57:09:d0:48:cc:9f:ce:20:bc:e8:c8:5a:
e2:5c:1e:89:47:ff:85:3b:ab:7b:19:b1:20:f0:b6:
f5:96:50:25:fc:fb:9c:a4:98:8c:65:26:12:21:ee:
f3:16:23:3b:8e:e7:53:7d:41:6a:99:49:80:ee:12:
77:97:99:8f:b3:66:5a:25:04:1b:ab:1e:3c:5d:8e:
13:9d:70:59:b6:98:eb:d9:70:91:d8:04:9c:16:12:
7b:a1:f4:07:f6:51:09:f8:f3:7a:d8:24:32:04:28:
87:1a:9d:4e:f6:54:25:31:8d:02:eb:83:74:1d:5b:
1a:42:b8:25:be:5f:31:a7:0a:a5:ae:c3:54:c7:61:
80:f6:a3:84:6c:0b:7f:e7:c3:fe:7f:6d:1d:55:0e:
86:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:07:B5:E5:5D:E0:6D:4C:16:87:AA:BC:7C:27:C2:3F:36:50:0E:6F
X509v3 Authority Key Identifier:
keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/fwe15V3gbUwWh6q8fCfCPzZQDm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a0:3b:3a:2a:1a:48:f3:5c:ee:27:25:81:d8:6a:2a:c2:3b:
d8:8b:69:c2:73:b7:a9:a9:d7:78:47:34:d1:24:6c:f9:f3:03:
b9:37:ef:d6:db:3d:46:19:6f:1b:74:16:8f:40:db:9b:9c:d1:
93:a5:da:61:1c:7f:cd:f5:89:65:ff:e6:ab:5e:39:f8:55:69:
39:42:6f:eb:a2:1d:fa:e5:1b:af:bf:50:b9:79:33:a1:27:7b:
11:1c:92:1e:7e:9c:0d:16:5c:06:c8:a8:a7:64:48:52:75:f8:
57:55:4b:70:7c:45:0a:68:b5:b0:6c:12:90:d7:6c:57:83:31:
fc:03:4f:1b:1e:34:6c:62:64:59:c5:07:ea:05:81:c9:fe:b3:
3c:a6:94:ee:d5:97:1a:6e:77:e3:66:b9:b1:4b:36:c9:4a:43:
12:82:06:da:1b:ec:6e:28:51:b1:fc:39:38:68:8e:d1:3b:ba:
60:36:0f:ca:b1:8e:f9:41:b6:ac:49:c5:b3:ca:32:2c:6f:5c:
d4:39:f8:2a:8a:fb:90:39:e8:12:f9:6f:c6:90:f2:63:69:f8:
5c:d9:dd:e8:79:8d:5d:92:b4:be:fb:b1:1e:d8:7e:ad:b7:3a:
15:a4:90:dc:de:02:6b:dd:1c:69:e8:83:bd:f3:ab:a5:39:11:
92:df:37:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:30:31 2025 by rpki-client