Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/vpnzE36sGjGpThv2cGB-8JWt7A4.roa
File: vpnzE36sGjGpThv2cGB-8JWt7A4.roa (raw, json)
Hash identifier: QD7ZgcH/2KUBCt+7GKIhMXGxia9FaAN7lUMkf7xzXUQ=
Subject key identifier: BE:99:F3:13:7E:AC:1A:31:A9:4E:1B:F6:70:60:7E:F0:95:AD:EC:0E
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0194266B80663783DD93F56526A4BCD29818
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/vpnzE36sGjGpThv2cGB-8JWt7A4.roa
Signing time: Thu 02 Jan 2025 09:49:26 +0000
ROA not before: Thu 02 Jan 2025 09:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59993
IP address blocks: 109.197.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:80:66:37:83:dd:93:f5:65:26:a4:bc:d2:98:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 09:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be99f3137eac1a31a94e1bf670607ef095adec0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:d6:14:38:d7:1d:f9:b3:63:39:3a:d4:10:
24:d7:aa:45:90:c8:8c:72:9a:93:50:cd:cf:e0:c0:
70:7f:eb:46:48:af:35:68:83:92:b9:1e:80:50:f7:
39:0a:03:65:25:75:d8:28:2c:d9:e5:29:45:11:de:
2c:16:b7:5d:ee:04:b4:ce:86:22:ad:db:dd:8b:83:
83:22:51:f0:29:86:5f:04:20:48:7f:1b:b3:f3:00:
e8:91:9a:c6:1a:26:09:b1:90:35:ab:b1:52:aa:61:
f6:bb:a8:2f:af:eb:cb:84:c8:33:8e:ce:79:17:82:
4a:85:cb:99:18:e8:f3:1f:66:f1:67:a5:77:ba:46:
3f:20:bb:63:81:25:9c:4e:cb:1d:32:7e:c6:b6:65:
d0:9f:54:b7:c7:15:83:5b:c9:6c:d8:42:19:cb:28:
9d:9c:11:58:51:62:43:3e:e6:32:21:71:b8:d0:52:
7c:ee:78:1c:af:f5:b8:b1:98:1d:c8:cb:bf:99:d2:
67:3c:dc:80:42:37:15:85:e5:5e:a3:58:69:de:d9:
9e:20:27:87:24:e4:8e:d2:4d:2a:64:a1:e2:25:16:
fd:89:3e:1d:a5:93:98:b6:af:aa:de:59:74:a1:f5:
88:c5:3f:80:02:63:ef:11:5b:9b:ed:75:1e:b4:0a:
db:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:99:F3:13:7E:AC:1A:31:A9:4E:1B:F6:70:60:7E:F0:95:AD:EC:0E
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/vpnzE36sGjGpThv2cGB-8JWt7A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.209.0/24
Signature Algorithm: sha256WithRSAEncryption
48:c3:d8:1f:9d:a5:92:ce:54:76:4f:b4:f5:82:68:4c:a6:87:
e4:d9:07:61:cb:01:5e:bd:6b:b2:13:2b:0a:45:ff:a4:80:98:
a4:88:6b:c7:1a:07:6e:df:f7:cb:12:65:e0:7d:57:b5:91:0e:
70:25:75:01:6a:00:18:c2:50:ba:ba:0b:b5:b8:b5:14:04:44:
90:1f:f4:a5:28:46:70:2e:74:4a:64:68:02:09:b1:2e:83:5c:
d9:7a:6a:a7:b8:20:31:23:89:f9:aa:e4:e4:66:46:3c:7c:c4:
a5:ff:35:f8:76:24:8b:3b:ad:62:f1:27:31:58:28:c4:4c:a4:
96:6c:30:88:ec:56:01:97:7a:1c:75:22:8b:fc:5a:be:05:30:
c7:dd:3e:e7:15:a2:bf:b8:b1:9f:ea:c6:2e:19:83:43:d6:03:
6d:c5:5d:fd:3c:26:75:60:c3:2b:76:bd:26:f5:c0:ec:27:8b:
3e:62:7c:0c:2e:cb:57:6d:e7:03:4f:1e:64:3c:0f:dc:a4:a9:
f6:eb:af:75:c6:08:24:eb:3f:12:76:06:cd:43:4c:b4:2c:3f:
6a:ad:d3:49:13:d4:21:49:a4:4a:29:e3:b1:88:5b:b5:b1:2e:
be:7a:2a:9f:14:e6:66:4e:d3:1f:7c:87:76:ec:ab:fc:a7:e1:
61:a6:1e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:22:52 2025 by rpki-client