Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/wDv3HPwcvHfcTTRaZ1O4gsTavXk.roa
File: wDv3HPwcvHfcTTRaZ1O4gsTavXk.roa (raw, json)
Hash identifier: Y9GaInWk9YVCI1lH2KeBgQ0e9lnon/jVvzQhDZFCMCs=
Subject key identifier: C0:3B:F7:1C:FC:1C:BC:77:DC:4D:34:5A:67:53:B8:82:C4:DA:BD:79
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 019427482D0842DA7BC98AEA1AE86FB9E492
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/wDv3HPwcvHfcTTRaZ1O4gsTavXk.roa
Signing time: Thu 02 Jan 2025 13:50:29 +0000
ROA not before: Thu 02 Jan 2025 13:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216127
IP address blocks: 109.237.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2d:08:42:da:7b:c9:8a:ea:1a:e8:6f:b9:e4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Jan 2 13:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c03bf71cfc1cbc77dc4d345a6753b882c4dabd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:4a:85:55:93:35:1c:df:3c:91:30:9f:93:
f9:62:ee:ae:f1:5c:f1:23:e5:a9:4c:35:74:a4:33:
04:83:d2:f7:2f:53:e8:71:0f:4d:7a:ce:a1:b1:7d:
31:28:90:06:71:b8:6e:91:bf:e2:86:36:ba:53:bd:
8e:ff:a5:2f:98:d5:4d:1f:bc:24:42:67:87:1e:9e:
a4:c6:64:05:7a:fe:92:19:44:d9:20:1a:0c:ef:01:
4a:4d:cb:53:71:0b:5e:18:20:97:50:2f:d9:ac:e2:
f5:e2:cc:b5:73:be:ad:fe:93:86:67:ba:23:dd:2a:
d1:85:51:42:6c:5e:55:7c:4a:9a:2b:00:62:4b:32:
fb:2e:00:a5:a1:7d:03:99:cd:50:25:6a:27:cf:a5:
75:e0:63:ea:29:45:28:9c:d8:a3:73:e4:b4:0b:cd:
40:4f:07:d9:0a:88:b6:3f:67:96:6a:1d:2f:e2:1c:
3b:1a:e5:a3:1c:f7:7a:97:54:33:3f:a1:99:ce:b9:
90:6e:80:89:19:16:fb:f1:52:2e:59:82:b8:81:fd:
48:ac:aa:1a:46:67:91:76:2f:18:d2:a5:3b:57:97:
26:1a:74:60:0a:15:2f:b4:3b:99:b3:f2:7d:a3:17:
bd:54:0e:c9:7b:61:e6:3c:17:83:9f:8f:22:d0:07:
e7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3B:F7:1C:FC:1C:BC:77:DC:4D:34:5A:67:53:B8:82:C4:DA:BD:79
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/wDv3HPwcvHfcTTRaZ1O4gsTavXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.97.0/24
Signature Algorithm: sha256WithRSAEncryption
46:1d:af:36:6f:46:9e:3c:89:df:83:d9:af:76:1b:74:14:82:
68:44:13:da:73:b6:b3:5c:42:f8:4b:91:eb:e4:7c:5c:b1:ff:
b2:c9:c2:18:62:ee:a0:16:0c:55:70:f2:73:d5:e1:1c:0a:6e:
0d:74:c2:b6:98:14:1d:97:c3:17:33:fe:14:0c:09:98:e3:9e:
3c:8b:5b:da:aa:a2:f0:00:fc:b5:46:02:29:88:e1:19:27:8d:
3b:15:7a:84:39:1a:e1:c2:bf:e0:e6:58:6d:63:53:26:55:54:
1b:ad:be:33:70:7b:b9:f2:3a:3b:a8:cc:f7:d0:01:e3:01:2f:
b5:20:48:8d:a1:1c:28:e4:25:74:85:71:0f:ca:5a:99:e1:84:
20:99:2c:a2:0d:c4:82:fe:1f:f5:5f:b4:5f:d2:2d:b1:55:45:
10:2f:f0:00:1c:66:20:d6:11:76:5d:a5:89:70:f9:da:5d:8a:
53:23:d8:a0:74:ea:b0:27:fd:1c:15:91:36:27:7a:e8:7c:a6:
90:87:ff:06:aa:11:66:6e:95:0c:b9:c9:b9:58:f7:90:95:9a:
a1:d9:1d:be:9b:e9:eb:36:64:f0:f3:a6:76:f3:61:02:5e:27:
ad:a4:ca:b0:04:e7:54:f5:54:19:99:c2:e8:ec:97:87:d0:9f:
9d:d0:ef:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:03 2025 by rpki-client