Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/9lCeO4TUjBNc1nJhioNR2Srwqjc.roa
File: 9lCeO4TUjBNc1nJhioNR2Srwqjc.roa (raw, json)
Hash identifier: Fg6u79AASkerccVWXjCGzoOYhRTs135qG7S8Ln7z22s=
Subject key identifier: F6:50:9E:3B:84:D4:8C:13:5C:D6:72:61:8A:83:51:D9:2A:F0:AA:37
Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89
Certificate serial: 01942444E1971940DF8695F11DE85B3D806D
Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/9lCeO4TUjBNc1nJhioNR2Srwqjc.roa
Signing time: Wed 01 Jan 2025 23:48:01 +0000
ROA not before: Wed 01 Jan 2025 23:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24745
IP address blocks: 109.99.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e1:97:19:40:df:86:95:f1:1d:e8:5b:3d:80:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89
Validity
Not Before: Jan 1 23:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6509e3b84d48c135cd672618a8351d92af0aa37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2d:19:67:37:b2:ab:94:c5:c0:37:df:da:22:
46:d7:71:af:6c:af:8c:24:c5:cc:cb:2c:ce:74:57:
b3:61:a2:e3:a9:6e:74:62:49:b2:88:22:42:8e:14:
96:2c:e1:cf:e5:6c:17:a2:a5:25:88:13:94:a1:c2:
15:74:c9:51:8b:a3:72:e2:d6:1a:45:29:9a:43:b3:
27:5b:f7:af:38:9c:ed:eb:29:82:80:4b:45:d9:ee:
b7:d7:68:67:b1:44:ab:1b:21:bd:58:95:11:c7:70:
93:11:72:6a:2f:12:cb:36:73:45:31:0a:a0:ea:35:
ad:3b:71:c3:c0:6c:54:05:85:86:0b:6e:b2:e5:6c:
5a:27:19:fc:dc:03:83:52:f6:22:e7:2c:23:44:34:
42:be:73:bc:61:3b:b3:82:d5:de:0f:c3:74:d0:ee:
92:a0:ce:1a:03:98:f0:28:35:75:c6:20:d2:30:87:
9b:3f:c8:bd:d6:0e:ba:3b:b1:d6:96:bc:e3:ac:3e:
c6:99:3f:85:90:c6:af:1e:9e:ab:eb:c9:99:92:5a:
18:d8:01:81:4c:a2:e2:2c:4e:59:ae:d7:0e:b8:78:
55:c5:c6:54:35:43:d8:c5:a2:62:51:79:a0:41:0c:
d4:3e:0d:81:ca:72:1b:17:de:86:ca:ec:08:7b:3b:
52:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:50:9E:3B:84:D4:8C:13:5C:D6:72:61:8A:83:51:D9:2A:F0:AA:37
X509v3 Authority Key Identifier:
keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/9lCeO4TUjBNc1nJhioNR2Srwqjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.99.158.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e0:99:79:c2:e3:76:4b:90:e5:d4:3f:64:49:15:cc:48:87:
ba:d1:5b:a2:43:02:8b:6c:ab:85:7a:19:4e:5e:c8:c0:91:55:
70:09:51:be:d2:17:7e:6e:91:73:15:2f:a9:e6:8c:8e:ed:e5:
42:ba:52:9d:79:10:72:0f:69:fe:a2:a4:30:ea:3a:50:62:2c:
2c:84:c6:30:67:22:33:b1:de:87:b5:ac:99:01:7e:db:cd:78:
4f:e2:98:c7:de:17:8c:89:d3:42:46:e9:89:67:23:02:3c:a6:
19:f8:b7:91:f9:33:53:56:ad:8b:22:ba:90:20:e9:b7:7a:c7:
01:2f:bd:6a:ac:54:87:f3:96:20:e7:21:d0:1e:35:dd:15:d1:
6e:88:fa:c5:72:69:82:fb:1f:30:f2:d2:90:b1:2c:c8:bd:2f:
3c:6e:87:4d:c8:d8:d4:16:34:a4:d3:f2:91:6c:56:e9:32:30:
24:f7:e0:17:a0:8a:4e:24:21:b1:61:11:97:ff:8f:56:a9:38:
55:e4:68:a2:69:85:a3:ea:f1:c0:cc:3d:01:d6:7f:bc:5b:a9:
32:6c:fa:27:9d:7f:c6:82:da:37:6a:18:64:8c:07:f3:5d:df:
1e:fd:0b:57:b2:13:08:6c:bf:73:73:b4:09:99:90:f7:e4:2a:
b4:74:2f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:30:44 2025 by rpki-client