Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/yRlATHfw4VPtk07WpZ6YJCL0ujk.roa
File: yRlATHfw4VPtk07WpZ6YJCL0ujk.roa (raw, json)
Hash identifier: qFhl3+M+zqPL0w/p5+UX5EFi+fLod6eaZpO9ZGTbXcw=
Subject key identifier: C9:19:40:4C:77:F0:E1:53:ED:93:4E:D6:A5:9E:98:24:22:F4:BA:39
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0194228E29355B1A1EFC37EAEE0978259E95
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/yRlATHfw4VPtk07WpZ6YJCL0ujk.roa
Signing time: Wed 01 Jan 2025 15:48:49 +0000
ROA not before: Wed 01 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 109.105.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:29:35:5b:1a:1e:fc:37:ea:ee:09:78:25:9e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c919404c77f0e153ed934ed6a59e982422f4ba39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:89:93:6c:ad:1c:60:b7:95:45:87:b7:92:
4d:27:fa:8f:3b:b1:a9:d1:2f:f3:ff:55:61:98:8d:
11:ae:00:2f:9e:35:43:12:5b:f5:7c:b3:0d:9a:e0:
cb:08:b6:34:93:50:8b:fe:d1:85:a1:2b:e3:1c:29:
8d:a7:ca:47:9d:55:1a:07:d2:38:ed:89:12:65:34:
a7:95:9b:90:7a:12:f5:f3:95:0e:bc:74:e6:b1:23:
00:d2:a4:05:fc:f9:35:8a:59:d6:4c:7d:72:3b:fe:
c0:45:23:a2:97:5c:7a:02:6c:82:0e:79:22:2f:14:
35:b6:6e:c4:f8:b4:12:13:9f:c9:a0:4d:de:32:13:
cb:7d:99:0a:f7:8a:35:9f:d8:e4:54:b6:34:8c:92:
1e:f9:ab:7b:67:91:06:5a:ba:58:17:14:61:a4:97:
ea:88:44:d2:55:d1:2e:d4:60:8a:38:82:9f:bf:bc:
86:f2:f9:bf:6c:2a:fe:98:87:e1:9c:a6:51:fb:aa:
f2:23:02:28:81:4c:fa:f3:d3:0f:51:c3:c9:20:e9:
cb:7a:e8:3a:a0:d9:4f:72:cc:47:b1:ea:53:17:ef:
a5:f0:c0:55:00:0a:ba:8c:85:7f:44:b7:e2:33:32:
ed:1b:05:5f:8c:9f:dd:ee:f7:20:4d:82:97:c4:60:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:19:40:4C:77:F0:E1:53:ED:93:4E:D6:A5:9E:98:24:22:F4:BA:39
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/yRlATHfw4VPtk07WpZ6YJCL0ujk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.197.0/24
Signature Algorithm: sha256WithRSAEncryption
78:fd:5e:24:91:ce:23:7a:92:f4:34:6d:7c:98:1d:44:ce:cf:
38:67:b9:a4:1e:1f:bf:a0:9c:f0:ed:8d:09:9d:bd:cd:09:44:
16:49:6d:14:b4:83:0a:02:a4:aa:a5:c5:ce:18:99:ad:e1:e2:
c8:87:07:cb:7c:7e:fd:48:fa:71:11:69:ff:cb:95:7c:50:8c:
67:a6:c6:a2:51:a8:d7:50:c9:55:30:7f:09:b9:22:ba:b7:8d:
6f:3d:c3:a7:25:74:b8:04:9a:1d:fb:cb:7f:fb:7d:6b:c2:35:
96:d1:4d:f1:67:a0:f4:65:ad:01:6d:af:25:23:5f:e9:e3:d6:
52:08:07:ec:ec:65:9d:d2:6d:ed:16:71:c9:5e:65:36:46:b2:
2e:b6:c5:f4:a7:0b:9d:94:31:20:82:d7:e9:3b:d1:48:a3:0f:
6a:bc:a1:2c:4b:ba:db:ae:98:e7:ca:b1:8a:af:1a:ef:ec:6f:
9b:eb:ff:06:e8:5a:ab:e8:68:53:df:fd:c2:b2:eb:05:a5:59:
9d:fc:1f:75:75:03:51:99:74:18:fe:86:4e:6f:24:83:5b:0c:
bd:4e:b1:2a:c8:bf:19:b8:63:f7:44:55:68:e2:19:8b:94:50:
d0:67:82:d3:5c:d2:c2:cd:2d:bc:b4:d3:f3:71:75:0d:9b:26:
dc:69:7b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:49:48 2025 by rpki-client