Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/A_x0lNCWfe35wqNn6JvNeRpzd_0.roa
File: A_x0lNCWfe35wqNn6JvNeRpzd_0.roa (raw, json)
Hash identifier: /J2aFcuVtqs0fxncL/uPU2qtngVaDUhWB5vaK8uf1CI=
Subject key identifier: 03:FC:74:94:D0:96:7D:ED:F9:C2:A3:67:E8:9B:CD:79:1A:73:77:FD
Certificate issuer: /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Certificate serial: 01942521C83DB1B0EA4CE71050991A39FDB0
Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/A_x0lNCWfe35wqNn6JvNeRpzd_0.roa
Signing time: Thu 02 Jan 2025 03:49:18 +0000
ROA not before: Thu 02 Jan 2025 03:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12312
IP address blocks: 192.109.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c8:3d:b1:b0:ea:4c:e7:10:50:99:1a:39:fd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Validity
Not Before: Jan 2 03:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03fc7494d0967dedf9c2a367e89bcd791a7377fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:75:56:14:0e:b7:e9:2e:1e:a0:8a:6a:41:3d:
33:94:1f:ce:7b:b6:d3:5d:14:b3:e6:62:86:18:eb:
06:94:a0:f6:78:c0:01:ae:2a:c8:0a:ce:b6:30:d4:
a0:da:5e:ef:fb:2e:36:d2:a3:0d:2f:11:c8:00:10:
60:b5:06:12:e7:f8:5b:09:c7:95:a2:ad:be:f1:df:
03:27:24:48:be:b7:9b:f0:db:2c:65:dd:5e:02:9a:
0d:df:22:bf:9a:f8:57:ae:3a:ed:a4:a5:73:fe:a1:
44:ae:43:21:62:45:5f:27:3a:6a:86:03:60:5f:26:
8a:63:0c:35:60:66:2f:9a:f2:d2:e7:40:1d:5f:44:
bf:13:01:9b:29:6c:3f:0c:27:b3:d8:da:50:3f:54:
0e:58:1a:48:ad:4c:86:cb:75:18:1d:b8:b8:64:35:
f0:e3:ff:70:f4:85:09:1e:4d:64:19:19:2b:19:83:
f1:a4:17:b0:7a:73:1b:95:16:6b:8e:f9:cf:7c:41:
14:9d:72:92:90:c5:4c:1c:cb:12:0a:55:67:14:53:
85:63:f6:13:92:8f:f3:55:57:df:4f:b2:a9:69:84:
af:68:b0:ac:c3:ca:ad:1c:30:e3:43:d3:37:fd:19:
66:5f:9b:5a:b9:db:9a:92:11:60:04:ce:cf:80:22:
8c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FC:74:94:D0:96:7D:ED:F9:C2:A3:67:E8:9B:CD:79:1A:73:77:FD
X509v3 Authority Key Identifier:
keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/A_x0lNCWfe35wqNn6JvNeRpzd_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.111.0/24
Signature Algorithm: sha256WithRSAEncryption
18:4e:dd:d3:e9:83:f8:ec:82:a6:6e:5a:32:7d:1a:ef:96:3e:
da:70:3e:ed:39:9b:ef:02:8f:01:24:95:9a:5d:9a:07:28:a6:
80:71:c3:5c:4a:7d:9b:91:e3:dd:11:e0:2f:fb:04:f9:c3:95:
13:8b:6a:d2:f5:86:65:9e:c4:86:0e:b8:b7:16:cb:51:9f:1a:
d0:d7:23:3d:95:79:a2:94:fd:95:96:5b:10:c8:eb:43:fa:e3:
91:2c:af:82:b6:77:32:13:5d:67:da:ec:3d:31:55:ca:00:ab:
cb:9f:4b:09:61:a9:5c:e2:a2:47:92:f8:f2:43:f5:13:c5:c5:
9b:02:9a:8a:44:06:8e:0b:7f:ff:46:0e:ed:7c:c2:5d:af:96:
0a:5a:3d:77:11:06:c7:4e:14:46:c9:a6:89:a5:0f:9b:f2:98:
c1:39:36:22:e1:e4:ba:1d:8a:71:2e:9f:d4:e4:3a:fc:9f:02:
8c:ff:bb:fd:d5:74:7d:3b:bc:36:2e:c1:ae:ff:c2:a9:09:0b:
87:0b:9d:8d:5a:a6:fa:5c:5c:02:eb:5d:ff:86:96:67:4a:b4:
d8:d7:3f:6e:49:c0:fb:ed:65:fa:7a:45:cf:3d:31:4a:c4:0e:
46:81:06:70:ac:21:83:9d:f8:3d:6a:f6:4c:cc:0f:45:21:73:
9d:ea:63:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:51:04 2025 by rpki-client