Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/Ybcq71LggwVgyEjZGj3f3dEpdkk.roa
File: Ybcq71LggwVgyEjZGj3f3dEpdkk.roa (raw, json)
Hash identifier: f0t7i7gDS9zIIPu03BEE6WGbhFMn5Zbnq+bqTPfH+j8=
Subject key identifier: 61:B7:2A:EF:52:E0:83:05:60:C8:48:D9:1A:3D:DF:DD:D1:29:76:49
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 019423697C8559F2586711DCF0DBB37834E3
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/Ybcq71LggwVgyEjZGj3f3dEpdkk.roa
Signing time: Wed 01 Jan 2025 19:48:23 +0000
ROA not before: Wed 01 Jan 2025 19:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21317
IP address blocks: 109.205.92.0/24 maxlen: 24
109.205.93.0/24 maxlen: 24
109.205.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:7c:85:59:f2:58:67:11:dc:f0:db:b3:78:34:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Jan 1 19:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61b72aef52e0830560c848d91a3ddfddd1297649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:4f:b1:07:5a:ba:9e:9b:d0:50:cf:a9:73:
44:b8:0f:86:87:fd:8b:f0:ed:93:1a:7c:35:a8:53:
28:60:c4:ee:dc:cf:5b:4b:f2:58:75:e1:77:de:cb:
3b:7d:a5:1d:7a:00:0b:3d:97:ff:f8:25:34:04:0f:
c4:0e:80:a3:f5:46:27:7c:c2:60:32:11:ff:02:e0:
d9:5b:35:ff:9a:25:43:b0:f1:3c:f3:7a:6e:b5:ae:
1c:d2:56:fe:59:d7:f2:26:ca:d7:fc:56:47:c8:24:
7d:a2:b2:98:3f:08:99:df:f3:de:64:5c:9f:b0:dc:
28:ac:9e:2e:92:e0:90:aa:5e:04:7e:86:50:3b:93:
17:81:b3:f5:87:46:8b:30:1f:3b:f9:e8:7f:93:a4:
74:17:4f:5d:40:8a:dd:45:e4:e0:a6:71:a7:92:27:
03:0a:c5:d0:98:86:7f:e7:9c:a8:fe:bb:5e:2e:06:
ad:02:55:a4:25:3c:22:b0:a2:53:60:33:ac:ac:08:
38:31:6d:9d:cd:f9:b6:d8:e6:f6:8e:bb:69:71:58:
57:5b:96:ca:e2:82:8b:a8:d7:65:2d:44:ab:67:e0:
64:da:a3:88:38:30:38:5a:f7:24:40:c1:14:ce:ae:
6f:c9:62:dc:75:af:79:cf:75:9c:8a:e7:2d:16:e3:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B7:2A:EF:52:E0:83:05:60:C8:48:D9:1A:3D:DF:DD:D1:29:76:49
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/Ybcq71LggwVgyEjZGj3f3dEpdkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.92.0-109.205.94.255
Signature Algorithm: sha256WithRSAEncryption
1b:f0:8b:0d:77:36:53:26:0f:da:bc:1d:7e:c9:75:34:f0:b7:
72:45:22:b2:1e:40:75:82:7d:9c:f1:09:bf:a0:02:bf:47:4c:
58:96:ca:0d:89:b6:41:be:6b:77:38:ce:6f:35:7f:94:a8:35:
17:53:aa:3b:ff:48:e5:79:7d:a7:33:e2:98:d6:25:6c:dd:dd:
e2:6c:95:d9:c0:58:a5:0f:dc:b1:2f:52:fa:a6:c5:b5:ed:31:
75:9d:b2:b2:47:3d:31:fc:85:d5:f3:87:52:0e:ac:fb:74:32:
31:ee:8a:5d:22:bc:78:92:75:03:c7:fe:13:f5:24:58:ff:54:
60:1d:04:5a:32:0a:0c:9b:ba:03:71:00:e1:a0:49:fa:9b:00:
24:97:53:35:e8:6e:b1:22:db:67:d9:c9:73:4f:79:9e:2b:12:
cb:e1:26:5b:45:f0:ef:ed:a1:13:09:86:83:8f:8d:d7:48:df:
80:da:fa:c7:d6:b5:49:2e:ee:50:8f:d1:d9:89:a6:a6:50:21:
40:ac:72:ff:24:74:41:0f:e2:aa:1e:b5:87:56:ec:83:7a:f9:
99:be:e1:cb:c3:49:51:a0:d0:b6:be:53:6e:c8:1a:fd:f8:35:
09:6e:e0:6c:0e:55:9c:d3:7f:dc:52:f6:4e:a9:ae:6c:66:3d:
a6:cd:b5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:21 2025 by rpki-client