Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/342db7-350f-4014-bf70-7afe04f2670f/1/nNOEVURMrM7Bx92jkyXWOb9S8Fw.roa
File: nNOEVURMrM7Bx92jkyXWOb9S8Fw.roa (raw, json)
Hash identifier: r0PWBwlM/ZPGneXqJ7K22MN6jAO3QSQmod36Ru7ZH+Q=
Subject key identifier: 9C:D3:84:55:44:4C:AC:CE:C1:C7:DD:A3:93:25:D6:39:BF:52:F0:5C
Certificate issuer: /CN=604e21f91e41ce0994a15e2c36babf1953e7278a
Certificate serial: 018852DB5057A901DB781EE52F46C5A91150
Authority key identifier: 60:4E:21:F9:1E:41:CE:09:94:A1:5E:2C:36:BA:BF:19:53:E7:27:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE4h-R5BzgmUoV4sNrq_GVPnJ4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/342db7-350f-4014-bf70-7afe04f2670f/1/nNOEVURMrM7Bx92jkyXWOb9S8Fw.roa
Signing time: Thu 25 May 2023 12:21:24 +0000
ROA not before: Thu 25 May 2023 12:21:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56971
IP address blocks: 109.205.56.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:db:50:57:a9:01:db:78:1e:e5:2f:46:c5:a9:11:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604e21f91e41ce0994a15e2c36babf1953e7278a
Validity
Not Before: May 25 12:21:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cd38455444caccec1c7dda39325d639bf52f05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bc:0d:df:4f:00:6f:25:c9:c2:3c:cf:f6:32:
df:32:11:5d:51:2f:e7:9a:7c:2f:00:15:50:89:18:
46:ec:29:5e:a8:e0:05:52:06:5b:06:96:53:e8:88:
6d:14:73:f9:60:20:61:3b:a9:cc:87:86:e2:9e:00:
09:37:12:39:2b:8d:3c:fb:38:49:40:58:22:62:47:
16:9f:b0:1a:0b:a0:db:d3:f5:c1:93:5e:f3:81:e2:
59:9f:71:0c:3a:f1:58:25:43:b0:50:7f:f8:54:48:
10:50:e8:2b:3d:08:48:fa:68:ef:43:ed:d2:94:6b:
30:c1:ee:ee:7a:0c:46:9a:c3:c6:20:5b:c4:60:c0:
65:6b:d6:de:13:f6:ae:9d:60:f4:ea:0e:ee:27:02:
e6:b6:5c:f0:db:fc:20:46:7d:8b:c2:f0:3a:8d:ec:
1d:a4:22:53:b1:d6:c6:a4:39:56:5d:67:2e:2e:f9:
b1:a2:bd:f0:2c:a8:f1:c8:7a:e2:36:fd:14:cf:00:
20:77:93:41:ea:21:d0:b6:53:1f:bf:11:1c:7d:14:
26:4e:de:02:e5:21:4b:75:e1:50:85:17:b4:50:d9:
8e:42:ec:90:57:6f:ab:0e:b0:f2:f0:7a:74:84:90:
ae:cb:68:af:c5:77:4c:73:46:63:b5:53:48:70:c0:
b3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D3:84:55:44:4C:AC:CE:C1:C7:DD:A3:93:25:D6:39:BF:52:F0:5C
X509v3 Authority Key Identifier:
keyid:60:4E:21:F9:1E:41:CE:09:94:A1:5E:2C:36:BA:BF:19:53:E7:27:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE4h-R5BzgmUoV4sNrq_GVPnJ4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/342db7-350f-4014-bf70-7afe04f2670f/1/nNOEVURMrM7Bx92jkyXWOb9S8Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/342db7-350f-4014-bf70-7afe04f2670f/1/YE4h-R5BzgmUoV4sNrq_GVPnJ4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.56.0/24
Signature Algorithm: sha256WithRSAEncryption
64:bb:a4:77:78:c7:e2:e5:26:ee:69:4c:25:6f:28:ad:34:0a:
7b:c2:8e:31:a8:6f:af:ba:04:95:98:61:79:66:2a:4a:69:97:
0a:9c:31:fc:35:61:ad:73:e9:d9:00:b6:62:a9:91:36:a4:17:
9d:4a:1d:04:5b:d8:c8:8e:1f:79:63:e0:72:6b:ae:2b:92:31:
f7:fc:cc:33:64:6e:f5:0c:94:a5:af:df:5e:dc:cc:36:13:be:
09:c7:29:4a:31:d8:52:60:df:74:17:e8:36:b0:f4:42:92:15:
b3:eb:ca:20:99:5f:06:44:8b:f5:69:c5:0a:b2:30:2c:d0:2e:
79:9b:09:ff:96:7e:e5:5e:0a:f7:3d:a6:34:19:ed:69:e4:86:
91:ed:82:d7:0b:5d:3f:1f:c7:89:53:7e:c5:36:cd:6f:e0:0c:
91:81:18:b5:ed:27:00:72:b3:34:42:c1:fc:b5:55:d3:b2:1e:
c3:25:01:be:15:a9:47:fd:ec:25:f2:d5:c0:19:a0:9a:b2:a5:
ab:a6:6c:01:ac:74:8c:99:ec:c4:f0:2e:f8:56:4b:6a:be:0a:
49:b8:69:e3:10:b1:54:c6:c6:dd:68:04:85:06:f4:be:b2:b0:
87:bf:7b:80:17:ab:c6:69:20:b0:fe:db:d2:f4:8b:9a:58:d4:
94:1b:c0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:11 2025 by rpki-client