Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/p59K7aev36ERUItnhS5Mz1k5-Bc.roa
File: p59K7aev36ERUItnhS5Mz1k5-Bc.roa (raw, json)
Hash identifier: yncXPcPIvJo8NAHq8Y//lz3+TC6bWI59QGBmAMQf5A8=
Subject key identifier: A7:9F:4A:ED:A7:AF:DF:A1:11:50:8B:67:85:2E:4C:CF:59:39:F8:17
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 019421446E924342C9EE1ADE6CABB4DA4AF6
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/p59K7aev36ERUItnhS5Mz1k5-Bc.roa
Signing time: Wed 01 Jan 2025 09:48:40 +0000
ROA not before: Wed 01 Jan 2025 09:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 109.234.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6e:92:43:42:c9:ee:1a:de:6c:ab:b4:da:4a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a79f4aeda7afdfa111508b67852e4ccf5939f817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:4e:63:46:8c:8b:c5:52:53:3a:d4:85:2f:
c4:2b:e3:23:8b:5f:49:2e:68:69:3d:fa:7e:1d:98:
a6:70:6f:83:36:b0:ef:04:1c:26:50:91:d1:ab:7f:
e4:29:af:b9:cb:27:07:57:a9:f6:02:7c:06:45:98:
d0:29:40:71:e6:3f:a1:08:50:b1:b2:05:46:99:c7:
54:a2:6d:70:f1:2d:92:b9:9a:60:47:5e:1b:04:36:
22:df:ac:31:f9:9b:13:58:b4:6a:f3:b7:99:5b:5b:
41:3f:d9:54:fa:e2:2e:bf:90:55:53:90:b8:d1:9f:
db:7e:27:3d:0d:12:fe:26:47:7a:ef:24:a9:31:b1:
27:34:75:a0:ce:55:10:f2:e8:f6:5e:39:61:64:2c:
a1:80:41:f9:4a:41:8d:e6:c4:3a:8b:34:68:01:3c:
a2:22:10:9e:6d:08:55:df:30:d7:24:d4:d4:07:27:
20:80:cc:38:3a:80:97:1f:93:34:37:9c:e6:5e:18:
7a:85:2f:fb:38:b0:f3:63:ef:e1:8a:4d:3e:38:c2:
01:af:ba:e5:48:2a:9e:b3:61:cd:3f:d9:4d:11:36:
13:ac:1f:cc:fe:a6:cd:1e:28:cb:81:b1:75:cf:29:
8f:27:49:45:66:b1:e5:e9:20:9b:60:96:0a:06:47:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9F:4A:ED:A7:AF:DF:A1:11:50:8B:67:85:2E:4C:CF:59:39:F8:17
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/p59K7aev36ERUItnhS5Mz1k5-Bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.72.0/24
Signature Algorithm: sha256WithRSAEncryption
93:72:ea:bc:43:7f:f7:06:23:a9:80:07:76:b6:0b:06:07:39:
b3:c2:0d:6d:12:90:51:55:67:97:ad:b9:e3:9f:36:71:69:d1:
f1:9d:02:fe:7b:b2:cb:de:79:53:bf:88:2e:fe:a6:e0:80:49:
fb:bd:b9:5c:90:f1:29:47:dd:80:d4:55:d6:f2:80:9c:16:d1:
ba:13:bb:49:25:99:6e:b5:43:ab:3b:ce:79:4a:f2:68:74:91:
52:06:61:48:56:28:c3:62:22:dd:be:d3:db:47:5f:1a:3b:8e:
e9:42:6d:a4:57:f6:da:33:71:9c:59:1a:49:5c:4c:83:5f:f7:
c6:a6:96:84:c6:75:3b:1b:42:99:2a:8e:9c:9f:72:8c:d1:2b:
84:0e:be:cc:07:3f:a2:e5:45:a7:62:17:42:f5:eb:de:8c:f5:
a2:d4:c0:e3:94:ed:69:86:c2:21:20:e8:a6:0b:4f:74:0f:f2:
21:5d:e5:27:8f:e9:11:38:f4:1c:f4:29:d7:d0:1b:77:f3:29:
2f:08:3c:08:f4:73:2c:d5:2e:85:84:90:76:72:c8:0f:1d:dc:
19:58:df:59:d7:52:8f:f3:a9:7d:f0:9e:f9:cc:0c:68:a7:6b:
5d:07:cf:36:42:c2:11:6e:c4:09:70:04:14:c9:0e:27:bb:07:
a8:2d:48:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:00:38 2025 by rpki-client