Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xyuGAjE3qG5-hUW-xejoT1E-Tp4.roa
File: xyuGAjE3qG5-hUW-xejoT1E-Tp4.roa (raw, json)
Hash identifier: pyN3POeg3zwDLklhZG4AnyyEiWtfPbFwu8hNzTgqFxI=
Subject key identifier: C7:2B:86:02:31:37:A8:6E:7E:85:45:BE:C5:E8:E8:4F:51:3E:4E:9E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01954D135EB5080D8D95EC8016D1A528A91B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xyuGAjE3qG5-hUW-xejoT1E-Tp4.roa
Signing time: Fri 28 Feb 2025 15:01:09 +0000
ROA not before: Fri 28 Feb 2025 15:01:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153320
IP address blocks: 109.176.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:13:5e:b5:08:0d:8d:95:ec:80:16:d1:a5:28:a9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 28 15:01:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c72b86023137a86e7e8545bec5e8e84f513e4e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6a:d4:25:52:e4:37:ca:be:52:b5:13:ab:c4:
c4:c9:00:77:3e:68:e5:6c:63:66:37:3d:f7:33:84:
fe:93:f9:db:f2:fd:0d:2d:9d:8e:39:7e:c4:73:ce:
1f:fc:13:8c:c9:69:fd:ce:46:cd:69:f4:07:bb:58:
31:12:ab:90:1f:3d:df:0a:a3:1a:43:3c:ee:62:c9:
1d:61:40:21:d0:e8:fb:b4:c7:08:a3:a9:b6:20:c4:
2e:bd:0f:43:57:72:15:db:3c:65:90:a3:14:73:94:
4d:99:d3:87:6e:99:25:51:2a:6d:51:b1:72:b6:d5:
3e:34:55:1a:45:00:43:38:13:7e:6a:1e:42:f5:3f:
cb:12:32:49:7f:0d:b3:e2:63:2b:36:21:bb:52:78:
dd:bd:c7:ce:ab:18:56:3d:f9:eb:0a:69:45:b3:cc:
76:e3:8d:b4:0e:1e:d2:b4:d6:81:b4:e0:ee:a0:fd:
b4:eb:c3:1f:c2:ec:c6:72:6e:ec:8d:14:44:d3:18:
b4:a3:a2:e5:b1:9a:de:88:25:4f:56:6f:b5:2c:eb:
fa:7a:4d:1e:6c:5d:22:5d:09:4c:7c:e6:b5:7f:a5:
a4:b4:5a:8a:69:90:99:da:2b:c8:d7:55:a9:df:5e:
8e:55:7d:52:b5:58:cc:68:09:25:ed:94:a7:23:aa:
51:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2B:86:02:31:37:A8:6E:7E:85:45:BE:C5:E8:E8:4F:51:3E:4E:9E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xyuGAjE3qG5-hUW-xejoT1E-Tp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.22.0/24
Signature Algorithm: sha256WithRSAEncryption
47:6f:af:90:4d:e1:1a:cc:9c:12:3b:41:76:f9:e2:57:14:be:
2c:a3:67:67:25:82:02:18:ea:62:54:6c:6a:d4:13:84:32:f8:
36:b4:55:ef:9d:b3:1a:af:39:12:5c:71:20:08:4a:4b:fc:64:
fd:36:9d:48:ec:68:47:d3:74:75:ee:8b:fe:b7:3c:ef:af:cc:
96:10:ad:4f:11:f6:44:c2:ad:62:1e:c4:1c:20:2c:0e:51:ea:
ee:f9:74:62:7f:04:e4:5c:0c:ac:01:c8:70:c5:ef:7f:89:9d:
30:15:d1:ab:7c:42:56:16:ee:c0:97:c2:ba:3a:75:bb:3e:23:
29:1d:da:00:8a:83:db:2e:81:92:e0:39:3f:b0:25:f4:9e:bb:
6c:2c:68:2d:9b:ad:3d:87:72:5f:4b:fa:16:91:2e:8a:61:d9:
75:b7:8b:6d:b6:eb:d8:cf:71:43:53:10:be:ff:e1:07:30:3c:
f9:0a:2c:f8:48:11:b5:a1:da:ea:29:5b:df:2f:39:bd:d4:d3:
48:8c:ff:4d:4e:c9:f5:e5:d0:7b:04:6b:45:1b:7e:ce:51:2a:
20:1b:b5:25:48:22:ee:5d:9f:92:25:d6:8a:0b:87:b3:c8:b8:
3f:e9:be:5b:e4:30:e9:df:3f:ce:cb:c1:81:e4:a6:7d:de:52:
07:26:98:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:45:20 2025 by rpki-client