Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/s_OgySCxSbkFQ1FfJj8AqbP1Bbc.roa
File: s_OgySCxSbkFQ1FfJj8AqbP1Bbc.roa (raw, json)
Hash identifier: Dcy8od4Ahxd48qYrPZ7VWHhJBrjz5F59N+Tv2t+VRo4=
Subject key identifier: B3:F3:A0:C9:20:B1:49:B9:05:43:51:5F:26:3F:00:A9:B3:F5:05:B7
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019386D6963D8B0BE2D92C66CEF83BD4C5B5
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/s_OgySCxSbkFQ1FfJj8AqbP1Bbc.roa
Signing time: Mon 02 Dec 2024 10:07:10 +0000
ROA not before: Mon 02 Dec 2024 10:07:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 109.104.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:d6:96:3d:8b:0b:e2:d9:2c:66:ce:f8:3b:d4:c5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Dec 2 10:07:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3f3a0c920b149b90543515f263f00a9b3f505b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:50:e5:f0:fa:b7:b3:10:2e:f5:ad:e3:63:
db:35:82:7b:50:a3:41:6c:dd:f2:16:ea:99:10:b4:
7d:26:20:4e:22:82:34:b7:88:71:33:a7:9c:43:a6:
a6:e0:f1:ee:7a:9f:e1:36:ca:a2:a4:82:52:f5:23:
d5:59:c5:83:a7:88:b0:99:83:b8:01:57:ef:48:1a:
fc:c4:98:93:0b:44:29:20:52:1c:20:e4:cd:5a:ad:
4c:f4:d8:b8:2b:2c:77:c3:10:9f:63:e5:20:33:c7:
81:a6:7c:4e:14:e1:6b:98:4e:65:8b:eb:c2:f1:56:
8d:d7:ac:4a:de:9a:48:61:47:11:37:d9:91:0c:49:
86:e8:f1:cd:00:f2:8a:2d:e0:03:96:8e:bb:fa:19:
60:43:9a:f5:6a:ae:76:e2:a2:9b:1e:c3:5a:53:b6:
11:a5:d0:e1:5d:74:c0:2c:b6:ce:8d:73:8e:cf:80:
61:24:65:47:f8:15:a9:51:d9:9c:34:11:9b:41:4f:
ae:0d:16:06:8e:d4:79:55:5e:53:3d:d8:6e:2d:9b:
84:98:09:32:dd:77:7f:2d:84:33:2e:bf:bb:f3:00:
2e:45:3c:da:95:92:9a:9c:47:db:51:98:87:8d:df:
ce:ba:86:f6:d8:de:56:02:cc:08:41:5a:35:5e:47:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F3:A0:C9:20:B1:49:B9:05:43:51:5F:26:3F:00:A9:B3:F5:05:B7
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/s_OgySCxSbkFQ1FfJj8AqbP1Bbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.104.134.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f3:ab:a8:5e:92:36:71:bd:13:d7:fa:83:7f:73:17:84:62:
a4:bb:89:12:e0:89:32:44:a5:91:29:7d:fc:49:a3:bb:b2:b7:
07:dc:bc:62:c9:98:e4:7e:41:dc:46:fc:30:26:2c:53:1a:45:
a8:6f:ae:81:80:29:08:38:af:83:51:72:69:e6:b4:88:f1:f5:
43:49:bf:4b:a1:6f:5c:b4:a8:f5:95:5b:8b:bc:98:39:88:c5:
00:14:ed:21:06:a6:c8:e5:79:d9:8c:e9:60:f2:d0:d3:77:2f:
01:63:b2:8c:ef:b4:91:c9:c9:86:2e:6c:29:ad:3c:ea:29:95:
a2:f0:af:3e:fb:14:f6:9c:df:5c:90:6c:44:8f:43:66:9c:31:
22:f1:6c:80:38:91:28:cb:6c:f1:8b:0b:d1:a1:78:5d:ee:9c:
c4:bc:a3:1d:25:de:1a:44:13:3f:11:9e:4f:e2:68:e2:63:9c:
2d:04:f6:da:1d:93:ab:fe:19:5a:f1:98:19:cc:e6:2b:67:fd:
5c:f3:9d:2b:ac:21:ac:65:04:e7:1a:63:13:e2:e5:ed:ca:af:
ca:02:cc:9a:fb:6f:94:1e:10:c4:4a:1b:c5:fe:f5:3e:a1:54:
09:97:9d:0b:ce:d4:27:b9:71:0b:64:78:86:50:c5:bd:5a:46:
5b:1a:17:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:30 2025 by rpki-client