Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/pAyjul0_J9gr6tdbjhXmTBljcmw.roa
File: pAyjul0_J9gr6tdbjhXmTBljcmw.roa (raw, json)
Hash identifier: eXLgKRUdh/VGFhYAPARBzn3DhXsVdR5rnTqQJgv7N8U=
Subject key identifier: A4:0C:A3:BA:5D:3F:27:D8:2B:EA:D7:5B:8E:15:E6:4C:19:63:72:6C
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 07FD11B0
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/pAyjul0_J9gr6tdbjhXmTBljcmw.roa
Signing time: Fri 01 Jul 2022 10:12:25 +0000
ROA not before: Fri 01 Jul 2022 10:12:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 109.74.28.0/24 maxlen: 24
109.74.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134025648 (0x7fd11b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jul 1 10:12:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a40ca3ba5d3f27d82bead75b8e15e64c1963726c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2a:29:64:05:4a:26:0e:10:42:8e:3c:8f:d8:
67:d8:d0:2f:36:83:b2:8d:c3:bb:8f:6f:15:44:53:
da:51:7e:b0:eb:f6:b8:d7:43:10:27:03:d2:a7:8d:
48:93:c6:5b:e3:6b:32:9e:ae:c8:91:2d:94:db:e9:
9b:c5:51:24:9a:c9:c2:dd:97:10:2e:87:d5:fd:10:
b6:63:c3:9c:59:09:98:53:ac:81:65:a3:d4:5e:27:
72:bd:ea:f3:12:c1:e1:aa:c7:cc:bc:1b:e8:c8:62:
af:8c:52:df:fe:53:2f:a3:22:ee:cb:63:73:0d:1e:
16:e6:ce:5e:4d:4f:21:b6:af:fc:2d:e3:f0:05:f0:
9f:75:8d:8e:59:40:24:7c:89:cb:c2:29:c9:a6:23:
cd:9c:e3:4d:51:ca:91:fb:ed:e2:7b:00:e2:55:ec:
46:5e:38:0f:31:62:e4:82:62:4d:2a:44:9c:7e:84:
34:fd:a1:45:3e:bc:98:93:6a:ed:c8:41:e4:d3:5e:
19:4b:28:00:5f:33:14:b7:7d:4e:03:4f:62:13:65:
75:26:42:26:8c:88:72:1a:20:f2:a4:97:0b:9b:51:
6a:b6:39:d0:16:f8:16:a7:39:9c:5d:7d:34:6a:bd:
51:1a:f1:1b:2a:82:f9:21:de:bb:7a:3f:15:a5:67:
ae:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0C:A3:BA:5D:3F:27:D8:2B:EA:D7:5B:8E:15:E6:4C:19:63:72:6C
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/pAyjul0_J9gr6tdbjhXmTBljcmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.28.0/24
109.74.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:47:78:b2:2c:ea:6e:02:d2:97:36:56:ef:4f:85:44:e5:d6:
07:63:24:4f:ac:b7:12:c4:44:58:ae:ad:b5:77:bb:b1:fa:46:
78:0b:1f:65:fe:62:50:32:eb:bc:7b:0d:22:c7:40:1a:40:04:
a8:44:28:64:de:12:e9:13:6c:1c:46:53:6b:16:2b:70:6d:10:
b8:e0:d5:d4:ad:ae:90:cd:64:32:7e:75:59:cd:af:b3:3c:38:
d7:8d:0c:b8:85:e8:5f:b7:47:8f:e6:1d:3c:85:bc:0d:89:79:
d4:bd:62:33:11:eb:35:4b:cd:dc:b0:83:cc:21:c6:0f:3b:ed:
a0:f5:4a:c2:3e:05:13:37:5d:32:4c:11:8b:b8:e6:01:31:eb:
64:5a:c5:f9:3a:40:93:b9:4e:77:99:14:a9:ed:e3:9d:a0:04:
84:04:7e:f1:95:89:60:85:39:c2:5c:f5:ba:34:55:8b:2c:fa:
fb:3a:7e:53:04:9b:b1:12:1c:7f:32:a2:2c:98:4d:01:a3:78:
5d:e9:d7:1d:08:68:c4:0d:b4:5e:48:21:ff:03:be:e0:59:84:
2b:86:38:8e:d7:32:14:86:ca:41:0f:c9:c6:0d:e2:68:bf:61:
28:d9:c1:80:92:9c:56:ff:bd:15:97:a7:23:cf:38:75:d5:da:
10:0f:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:53 2025 by rpki-client