Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/994w7Ps6yLdENDbR_8TiwyRz6jg.roa
File: 994w7Ps6yLdENDbR_8TiwyRz6jg.roa (raw, json)
Hash identifier: gE0SkZJEaNbqZInlSDLNuhvu6Kh13Ztlz/f/abStzHE=
Subject key identifier: F7:DE:30:EC:FB:3A:C8:B7:44:34:36:D1:FF:C4:E2:C3:24:73:EA:38
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 019426D86283765EF7F3EFC5219860AC9BF0
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/994w7Ps6yLdENDbR_8TiwyRz6jg.roa
Signing time: Thu 02 Jan 2025 11:48:22 +0000
ROA not before: Thu 02 Jan 2025 11:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 109.203.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:62:83:76:5e:f7:f3:ef:c5:21:98:60:ac:9b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 2 11:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7de30ecfb3ac8b7443436d1ffc4e2c32473ea38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:82:4f:d4:f2:ec:54:35:61:21:36:cf:e3:
d2:0a:a5:15:7c:c4:09:c0:cb:4a:f9:c1:2c:01:5c:
cc:7a:c2:19:90:0a:eb:fa:2b:35:ab:1f:ea:4b:29:
16:03:fe:fc:b2:17:d9:fa:d0:04:94:0f:fb:12:79:
28:ff:74:74:4d:44:ec:a1:66:77:1a:c3:d9:11:be:
20:55:ed:36:f1:ad:ec:03:06:42:0b:28:3f:02:e9:
5b:0e:ce:16:0c:5c:1b:33:e1:69:36:e4:24:2e:c9:
33:3b:af:59:7a:a7:24:a8:ba:68:be:7b:68:18:ea:
b0:00:13:07:d2:69:3d:65:af:e2:e0:14:d5:82:68:
ea:a5:df:2b:48:b6:61:b5:e9:ad:ce:12:e5:fd:14:
f2:80:db:54:aa:00:07:33:90:67:f7:41:be:80:26:
ed:2d:88:62:71:64:d3:20:16:8f:b4:ef:20:51:be:
a6:63:aa:b8:45:76:46:e8:a6:aa:31:a1:30:50:5c:
c6:0d:a8:d4:58:03:a6:79:ad:b6:b8:91:f6:dc:c7:
ed:7c:95:04:74:6d:a4:56:ad:dc:52:39:7c:e5:a4:
aa:38:b8:d6:13:e5:7f:35:e5:bf:bf:33:05:0f:52:
ac:4b:c6:94:ad:98:c7:64:81:7c:77:a5:a1:07:f0:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DE:30:EC:FB:3A:C8:B7:44:34:36:D1:FF:C4:E2:C3:24:73:EA:38
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/994w7Ps6yLdENDbR_8TiwyRz6jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.203.176.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:b6:2b:42:5a:4c:cd:19:fb:02:d1:5e:8a:27:24:89:a4:a8:
8b:bb:bc:51:d7:30:35:25:e1:49:ab:42:8a:f0:83:97:06:66:
91:c2:8e:6d:98:45:5c:d1:28:89:05:b0:d0:f6:37:02:90:f6:
a0:16:8a:c5:e2:64:d5:e9:58:3b:0f:81:e6:1d:fb:f0:6d:d1:
79:e8:b6:26:30:d5:cc:d3:da:a7:9e:1e:ef:bc:b5:b4:d6:0c:
b5:80:d9:8f:5d:84:c1:2f:fa:f1:4d:68:f0:c0:74:0d:b6:ff:
74:48:67:e7:53:e1:20:63:8d:cd:02:61:b8:91:ab:7a:a8:a8:
a8:4a:dc:69:43:51:35:a0:bb:9d:6f:2e:83:94:04:2f:8f:ac:
f1:ef:63:d3:90:d6:02:6d:7d:8f:17:e6:77:d4:b0:76:31:5f:
52:96:f7:e7:0d:0e:24:01:b6:07:bc:29:4b:da:57:4d:dc:94:
ea:64:67:be:eb:6e:87:4a:44:12:de:74:a0:1f:9c:6e:ac:7d:
2b:80:a8:a5:25:e0:7f:79:b1:7e:2c:17:85:27:cc:fd:a8:13:
6d:49:34:b5:ab:67:51:7a:3d:74:97:ba:2f:07:62:57:c7:ea:
08:30:64:1d:e0:0f:e6:e4:c9:89:6c:fb:8e:f2:bb:d8:2a:dd:
65:b6:7e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:38 2025 by rpki-client