Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/w1iF5CiJeCHkszCW3U2fF3iWHfg.roa
File: w1iF5CiJeCHkszCW3U2fF3iWHfg.roa (raw, json)
Hash identifier: jSF2bgkChfkaiNUq0c9ACAnTtaiP8CKGbBiy1Ib+MAc=
Subject key identifier: C3:58:85:E4:28:89:78:21:E4:B3:30:96:DD:4D:9F:17:78:96:1D:F8
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019518E20EB77250CD8575DF8506A8FC5866
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/w1iF5CiJeCHkszCW3U2fF3iWHfg.roa
Signing time: Tue 18 Feb 2025 11:47:02 +0000
ROA not before: Tue 18 Feb 2025 11:47:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 109.69.61.0/24 maxlen: 24
194.31.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:e2:0e:b7:72:50:cd:85:75:df:85:06:a8:fc:58:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Feb 18 11:47:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c35885e428897821e4b33096dd4d9f1778961df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:b5:eb:00:cb:d9:07:29:da:01:d7:33:5a:
f5:0c:99:f1:2b:cd:41:3d:9b:50:14:8f:3e:91:19:
b2:e4:61:e7:3c:e0:c6:c2:cb:fb:d9:ee:37:db:5c:
22:bb:93:81:a0:20:f0:00:3f:42:71:36:4f:ba:2e:
03:5f:c9:e2:78:e9:b5:54:98:b8:77:a7:16:5f:7e:
48:6b:3d:c6:94:9b:da:81:60:39:5a:c7:87:aa:1f:
5b:6c:7e:87:3b:81:5d:a6:0e:d4:55:1f:fa:66:3d:
2d:40:e5:9a:c9:49:59:4b:cb:2d:91:a7:fe:44:19:
7b:f1:5c:74:70:3d:16:a7:cb:d6:6f:c5:ee:c1:0e:
c3:2a:42:cc:8d:9e:f8:be:d2:44:85:4f:1f:bf:7e:
c8:d7:a8:c0:66:36:f2:a6:57:ed:65:fc:0c:b0:c3:
90:68:02:2b:aa:c3:95:7e:1f:16:43:29:b2:9b:7f:
82:2d:8e:7f:67:96:5f:9b:7a:2b:46:be:85:3f:ea:
f8:d4:95:b2:e9:d4:1b:07:0d:d5:75:44:a5:3c:5b:
55:fb:b4:12:59:49:bd:28:48:7d:f7:ac:64:47:c2:
ed:96:d1:7e:fb:8c:83:c5:24:1c:42:2d:80:aa:e6:
8f:f3:0f:be:24:d8:95:81:b1:6a:cc:42:2e:9a:dc:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:58:85:E4:28:89:78:21:E4:B3:30:96:DD:4D:9F:17:78:96:1D:F8
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/w1iF5CiJeCHkszCW3U2fF3iWHfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.69.61.0/24
194.31.73.0/24
Signature Algorithm: sha256WithRSAEncryption
04:74:0f:30:b5:24:3e:b1:48:f7:33:8c:3c:d3:31:17:ec:03:
93:3b:71:13:75:16:cf:75:7d:7b:20:94:46:8a:59:4c:e3:74:
1e:e1:05:5d:b5:d1:b1:34:ba:a5:2d:1e:b7:d6:30:a0:04:97:
ba:41:84:da:54:b8:18:1c:28:92:15:d8:89:dd:db:69:47:9f:
e3:2c:1c:fe:a1:7e:d4:ae:02:55:fa:bd:68:50:43:92:2e:d2:
96:80:6d:17:27:fe:4a:c6:ab:d2:86:e3:88:37:a7:69:eb:ee:
4c:6c:3d:78:05:e5:a9:4e:af:f5:10:0c:64:13:39:d6:e7:49:
25:e9:b7:d2:7e:75:e3:c3:ea:bf:0d:f0:53:bc:65:29:33:99:
fc:d9:d9:0d:fd:26:b9:05:c7:31:7e:d5:5f:54:f3:aa:1f:7c:
02:ba:b4:30:ae:dc:5b:c0:16:0c:a2:b2:22:93:2c:ca:81:a2:
bc:41:55:3c:5f:a2:d6:cb:0c:ab:19:b7:0b:e5:b2:26:99:ab:
ed:41:b5:f9:ce:a1:bf:f3:ef:ed:1d:e6:9a:c0:94:0e:e8:a8:
19:8b:89:6d:2d:ea:96:72:04:5e:43:3b:60:85:e8:8a:4b:40:
2c:f7:32:89:df:1f:3f:75:ce:9a:5c:1e:26:b1:a9:fe:30:8a:
d9:fc:66:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:24:27 2025 by rpki-client