Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/tCisNJ6DglcXEZ31LF-Rgf-neTw.roa
File: tCisNJ6DglcXEZ31LF-Rgf-neTw.roa (raw, json)
Hash identifier: uUtSdE7gHvILAFi4FBY9YNAfyCfbbvIXbt1FjZxpoB4=
Subject key identifier: B4:28:AC:34:9E:83:82:57:17:11:9D:F5:2C:5F:91:81:FF:A7:79:3C
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019275E84F9228BB149CBDA927519E77AFC0
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/tCisNJ6DglcXEZ31LF-Rgf-neTw.roa
Signing time: Thu 10 Oct 2024 10:10:11 +0000
ROA not before: Thu 10 Oct 2024 10:10:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 109.104.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:75:e8:4f:92:28:bb:14:9c:bd:a9:27:51:9e:77:af:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Oct 10 10:10:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b428ac349e83825717119df52c5f9181ffa7793c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:37:d3:bd:7a:77:19:48:71:67:99:51:f1:
96:0f:02:79:27:a7:12:32:30:4b:df:f0:10:5f:f6:
10:92:2f:8e:74:b0:ba:46:59:15:29:11:5b:c4:07:
1a:d6:d0:1c:e0:f3:b1:05:9e:8a:48:f8:b7:3c:85:
ec:17:36:31:1d:5f:04:72:01:22:35:64:50:d2:1e:
76:e9:b3:4a:b5:50:6d:a2:71:15:bf:fb:15:7e:ad:
5e:ba:02:e4:74:87:df:2d:a9:25:ed:86:39:8a:1d:
fe:ff:6e:20:1e:4a:5e:c2:c9:02:3f:50:3d:3b:fa:
e9:6a:b2:a8:48:41:ae:ec:5c:dd:28:de:4a:e2:4c:
3c:91:a6:03:4a:28:97:2f:f0:35:15:ba:6b:41:5c:
62:00:18:59:e9:05:b3:4b:be:4a:58:88:85:81:b7:
63:fb:fd:36:93:af:57:4a:a4:c1:9b:e7:87:e0:f6:
d1:79:52:33:de:cb:3e:29:83:4d:57:49:50:bf:cd:
f6:7b:a0:9f:12:9f:6f:6c:9c:34:73:66:fd:c9:ee:
2e:15:2f:1b:87:e1:eb:f9:1e:ce:e8:08:46:a5:7c:
45:c8:a8:ad:d0:c2:86:d2:43:0e:ad:04:fb:f4:94:
a3:9b:00:21:68:b4:53:4b:67:b0:8f:df:d0:8d:e7:
e7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:28:AC:34:9E:83:82:57:17:11:9D:F5:2C:5F:91:81:FF:A7:79:3C
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/tCisNJ6DglcXEZ31LF-Rgf-neTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.104.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:8b:2e:07:3f:04:9b:c1:e2:9a:df:35:c5:6a:e2:b8:e7:51:
1c:94:03:b5:79:c8:07:e4:de:96:50:51:7c:01:d2:03:36:9a:
04:b0:a9:3a:11:c4:0b:bb:27:5b:e2:b4:b0:da:13:43:c2:72:
c5:b3:e0:e5:11:9d:f5:eb:12:26:97:21:cc:5c:65:aa:c3:d5:
ef:21:57:b4:4e:34:08:6e:b7:85:ea:c1:97:8d:1d:ca:a9:2b:
8b:14:22:60:9e:af:fb:7a:f7:3b:73:74:8a:bb:4e:be:03:53:
77:86:57:2f:1f:68:6b:94:08:79:3c:52:7d:5a:03:fe:04:1b:
6f:87:70:89:a9:31:c2:ce:2b:09:d2:9b:af:e0:dd:b9:8f:a2:
26:a9:c4:9c:48:ba:ca:e6:d8:6a:96:70:32:8d:30:11:73:64:
23:f2:49:b2:64:0f:cc:63:4f:ea:46:ea:e7:41:1d:66:8c:a0:
6c:df:a5:07:aa:4c:68:6a:e1:60:a2:1e:51:92:64:f9:0f:cd:
d0:b6:bf:88:08:22:f0:6c:d5:dd:4d:96:d7:d8:b3:31:eb:b0:
54:b7:0a:4a:b6:e8:1e:31:4c:cf:7a:82:6f:27:c8:13:a9:3b:
5b:6c:60:af:e8:7b:61:07:92:28:7f:c9:bc:d2:01:69:58:cd:
1b:08:09:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:17 2025 by rpki-client