Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/B-ScYRmcnBDoASPmmS_M4uqiY40.roa
File: B-ScYRmcnBDoASPmmS_M4uqiY40.roa (raw, json)
Hash identifier: aFvWMRE2g0CoT5a0uDTkHb2ZdeEqa7Hw50mfSTMQTJs=
Subject key identifier: 07:E4:9C:61:19:9C:9C:10:E8:01:23:E6:99:2F:CC:E2:EA:A2:63:8D
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01941FFA823C398B91DB5DF43EC31FBD2941
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/B-ScYRmcnBDoASPmmS_M4uqiY40.roa
Signing time: Wed 01 Jan 2025 03:48:18 +0000
ROA not before: Wed 01 Jan 2025 03:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4648
IP address blocks: 109.111.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:82:3c:39:8b:91:db:5d:f4:3e:c3:1f:bd:29:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 03:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07e49c61199c9c10e80123e6992fcce2eaa2638d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:56:e2:99:c9:cb:45:4f:26:bb:6a:53:b7:87:
b2:03:8a:43:53:86:21:ee:17:98:59:2b:d2:14:2f:
f4:36:fe:25:8d:35:c6:f7:56:b1:94:7f:f5:46:fb:
40:c1:51:d2:66:c8:3d:8c:73:b0:8e:4c:68:84:3a:
2b:c3:99:7e:aa:f7:5a:ad:eb:3b:c4:c3:86:f0:1d:
23:a9:e6:08:fb:72:a4:90:36:c5:6a:9c:ce:20:46:
ea:37:6c:b9:37:4f:05:e2:2d:d6:0b:97:d0:81:49:
70:08:28:b2:f6:83:c7:e6:5a:f2:cf:2a:3c:da:2c:
d4:63:4c:8a:e0:74:b8:80:1c:79:d6:5d:1a:22:45:
f6:64:eb:08:59:d5:37:6a:63:00:d2:16:ad:da:6b:
ba:ee:fd:3b:14:3c:a9:fd:0b:07:f8:0e:eb:6e:9e:
75:a3:9c:c3:5a:af:21:d8:95:d0:9e:72:9b:e2:eb:
92:54:b0:ae:a1:2c:9e:81:8e:9e:6b:f6:28:fd:82:
c0:54:7b:51:29:cf:10:a9:79:21:0f:ed:1e:f7:6f:
f0:ae:65:32:89:3e:64:c7:0d:a6:90:61:b5:3d:1f:
1f:bb:bc:82:13:2a:c8:f3:b7:8e:a4:6d:f0:0c:46:
a9:aa:83:10:f3:96:e7:67:dd:6e:09:0f:e3:3e:fa:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E4:9C:61:19:9C:9C:10:E8:01:23:E6:99:2F:CC:E2:EA:A2:63:8D
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/B-ScYRmcnBDoASPmmS_M4uqiY40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.44.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:c9:a2:b9:cc:72:af:bd:b9:3f:07:56:7a:af:43:a6:77:0b:
1e:65:e9:07:39:25:31:84:09:e4:67:bb:b0:8f:f5:c0:f9:17:
61:bb:05:bb:a0:5e:16:2f:38:76:30:89:c8:52:3e:a8:eb:48:
36:f5:93:b5:c0:bb:a9:52:98:12:de:14:1f:75:cf:ed:51:5d:
84:7b:84:73:6f:ae:da:c2:37:7d:e8:e2:f5:e5:e8:71:f1:5f:
f9:a3:97:b4:93:f1:06:9b:d4:a9:13:93:e0:a8:cc:f4:01:90:
55:14:fd:a7:bb:f7:38:37:5b:4a:26:c2:07:2f:a3:64:5d:2d:
c8:74:54:4a:99:b5:78:95:88:93:92:23:c5:ae:a5:11:04:63:
39:43:f8:73:70:b4:b1:b3:6a:64:da:82:e2:1a:0e:95:47:61:
2c:ab:7b:7d:69:35:57:7e:3b:88:ab:f3:30:ff:e2:39:78:99:
20:e0:29:29:12:d1:8c:51:37:38:1e:11:68:25:b1:ae:2a:68:
d0:d6:66:37:c6:19:0a:22:f6:9c:a9:bf:ff:2c:58:ba:21:d6:
9d:44:28:b2:42:56:b9:a4:77:76:07:7a:a1:ab:91:39:38:4c:
72:1d:8e:b1:58:44:89:ac:00:2a:87:48:19:17:d9:9e:91:5c:
21:65:11:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:21 2025 by rpki-client