Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/oTfXHSsIOWC9MxPLXaEGJUMvISE.roa
File: oTfXHSsIOWC9MxPLXaEGJUMvISE.roa (raw, json)
Hash identifier: ekfEyZcUv83nlna/OgZ0tjWLwL4zwzktE2oBpLb6y/w=
Subject key identifier: A1:37:D7:1D:2B:08:39:60:BD:33:13:CB:5D:A1:06:25:43:2F:21:21
Certificate issuer: /CN=c6f2ab2dd515aa3ec24a89b3dd5733f62c422d1c
Certificate serial: 0185710C22EDA78F32627984C70B3F728100
Authority key identifier: C6:F2:AB:2D:D5:15:AA:3E:C2:4A:89:B3:DD:57:33:F6:2C:42:2D:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvKrLdUVqj7CSomz3Vcz9ixCLRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/oTfXHSsIOWC9MxPLXaEGJUMvISE.roa
Signing time: Mon 02 Jan 2023 05:54:58 +0000
ROA not before: Mon 02 Jan 2023 05:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 109.107.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:22:ed:a7:8f:32:62:79:84:c7:0b:3f:72:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f2ab2dd515aa3ec24a89b3dd5733f62c422d1c
Validity
Not Before: Jan 2 05:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a137d71d2b083960bd3313cb5da10625432f2121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:26:f9:83:ee:04:21:70:c5:12:7a:f7:a4:
9f:97:93:06:7f:53:45:1e:bd:05:39:e4:dc:22:0d:
5e:48:2d:1c:1d:a8:06:23:61:b7:03:61:f9:10:e3:
ac:c6:ec:69:c1:32:a5:75:3d:7a:e2:a3:8f:83:54:
8c:d2:86:da:b4:0d:56:94:32:6e:87:88:05:63:22:
9e:f7:eb:78:32:44:80:54:f8:36:df:e5:f4:43:fa:
de:69:70:d3:98:7b:4f:ff:4e:c5:0b:08:10:35:02:
ef:ab:c8:1c:55:80:74:c6:7a:82:48:1c:c8:af:7a:
64:4e:33:e7:78:1b:c2:a6:e4:16:8f:71:68:9b:c9:
f3:80:17:f7:27:6c:aa:78:29:0d:8b:02:9c:ca:c0:
4b:48:3e:e2:13:20:f6:02:4a:a4:07:77:41:63:94:
2b:21:23:10:19:e0:e3:1b:01:5c:9b:fb:83:aa:38:
16:d0:33:cd:23:9c:78:30:7f:97:ae:a6:47:5e:ca:
cf:c1:8a:55:fb:71:dd:54:bd:0b:22:51:01:15:8c:
72:8d:56:ff:22:64:00:c1:23:63:32:55:7c:bd:83:
1f:ab:1e:cf:c9:51:55:ce:99:ce:69:40:77:d3:c4:
52:3c:8e:8e:7b:5b:cd:a6:ef:4d:44:2d:99:fc:a5:
19:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:37:D7:1D:2B:08:39:60:BD:33:13:CB:5D:A1:06:25:43:2F:21:21
X509v3 Authority Key Identifier:
keyid:C6:F2:AB:2D:D5:15:AA:3E:C2:4A:89:B3:DD:57:33:F6:2C:42:2D:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvKrLdUVqj7CSomz3Vcz9ixCLRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/oTfXHSsIOWC9MxPLXaEGJUMvISE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/xvKrLdUVqj7CSomz3Vcz9ixCLRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.136.0/24
Signature Algorithm: sha256WithRSAEncryption
33:3c:13:ba:af:47:16:1e:35:7c:8d:76:64:6b:a1:18:6e:63:
5a:8a:0a:ea:21:20:56:82:1a:6b:ad:77:75:3a:09:b4:7c:4f:
8f:4a:b0:bc:fe:fe:a2:7e:2d:ee:10:15:de:96:9f:d7:5f:cf:
1c:9d:bb:a8:75:f7:2a:e7:5e:19:ab:4c:ff:d5:c7:0a:00:ae:
c5:4c:6e:76:4f:ca:42:09:e0:a7:61:46:a7:20:1f:c6:33:b8:
9b:b7:ae:02:e0:32:58:11:b3:56:9f:26:3a:f7:3b:67:3f:58:
e7:9e:e4:1f:29:6c:f8:e8:56:03:34:6d:c7:00:33:d1:74:81:
04:c1:12:bd:8a:00:af:bc:b8:a2:b3:ff:5e:27:cb:57:5e:0c:
95:7a:e8:22:63:ce:f2:1c:e2:d8:b3:76:e8:9a:4c:f8:58:38:
5f:07:45:a4:bf:ce:77:9f:df:8c:f3:7a:22:9e:8a:6b:4c:55:
ba:c0:3f:1c:37:44:68:a9:5f:57:f4:20:8a:8a:a3:cb:3f:e0:
30:2a:bb:2f:67:8c:b7:7b:c0:c0:b4:24:42:69:12:b5:6d:4e:
9a:13:51:7c:53:76:20:9f:4c:6a:6c:28:6c:e6:18:ec:d7:64:
43:57:1b:93:48:c9:c1:cc:0e:8b:c4:e2:b7:a8:1c:c1:59:49:
07:60:fc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:14:18 2025 by rpki-client