
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/OGWZzPnBX47md91p87P2W1a_ytA.roa
File: OGWZzPnBX47md91p87P2W1a_ytA.roa (raw, json)
Hash identifier: 7HcnGUyrPGSHKJTvRq2QJzXTemtoUjcGSGSmkchcnJ8=
Subject key identifier: 38:65:99:CC:F9:C1:5F:8E:E6:77:DD:69:F3:B3:F6:5B:56:BF:CA:D0
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018601EA27D897025C16D425B70A5FC77061
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/OGWZzPnBX47md91p87P2W1a_ytA.roa
Signing time: Mon 30 Jan 2023 09:02:48 +0000
ROA not before: Mon 30 Jan 2023 09:02:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211584
IP address blocks: 109.111.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:01:ea:27:d8:97:02:5c:16:d4:25:b7:0a:5f:c7:70:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 30 09:02:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=386599ccf9c15f8ee677dd69f3b3f65b56bfcad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cd:d1:39:fd:7c:d6:ec:1f:6b:2e:d4:86:eb:
c0:27:60:c6:c7:70:f3:5f:b9:4c:14:94:6b:1c:fe:
e3:55:fd:5b:08:98:1c:d1:c4:f7:b8:7a:b1:86:97:
37:60:b1:ad:50:ec:e9:e1:c2:be:6f:46:3b:c8:5c:
aa:c1:6e:56:5d:6d:3c:18:79:91:0a:65:09:00:4c:
08:5f:f1:7c:53:99:ba:d7:de:78:d8:05:06:9e:df:
d3:cb:c3:1c:f3:32:a0:6d:fc:b8:68:de:7f:59:fb:
86:0c:3d:fe:d3:08:73:76:6b:84:9b:22:92:f8:7f:
89:27:65:67:44:47:88:af:91:d0:5e:5a:58:5e:7c:
f1:fd:51:10:75:47:4b:f7:33:28:72:c6:67:9c:9c:
8d:71:e0:67:8e:3a:99:09:48:b8:8a:f6:15:2b:9f:
54:d2:8e:b3:64:51:41:69:68:28:88:2f:31:e7:c4:
94:81:f9:b1:97:46:6a:64:bd:d9:b6:53:c5:ca:ba:
70:b9:8f:ed:e5:d4:82:e5:63:31:3e:04:62:0f:a5:
ce:3c:a1:89:c6:21:88:e0:c8:5d:b1:1f:a9:eb:25:
ac:35:26:d9:39:59:08:4a:61:3d:5a:37:40:cd:28:
b6:14:fd:64:d4:53:05:fd:91:3d:03:15:e6:49:93:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:65:99:CC:F9:C1:5F:8E:E6:77:DD:69:F3:B3:F6:5B:56:BF:CA:D0
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/OGWZzPnBX47md91p87P2W1a_ytA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.60.0/22
Signature Algorithm: sha256WithRSAEncryption
46:f6:23:83:62:97:cd:59:ca:e1:39:0b:f9:3c:2d:54:61:a3:
de:10:b6:b9:f8:83:6c:8a:3e:dd:80:59:01:5e:f4:38:05:1c:
97:72:16:01:5b:15:f9:36:6d:50:7e:58:8c:07:c7:b4:65:88:
6f:8a:66:bc:89:62:aa:46:f4:28:ab:55:ca:93:ab:b5:71:38:
df:2b:de:32:b9:d2:9d:6c:f6:74:62:17:3a:01:b0:18:75:cb:
a7:11:76:0c:88:e6:48:e9:9b:49:bd:7e:f5:b1:18:68:81:5a:
7a:6d:b5:a6:55:f4:32:3d:dc:fc:bd:b9:c3:6b:16:7e:b3:e0:
65:a0:c4:f6:1e:6f:bb:21:28:4a:f4:26:0a:b2:e1:d5:14:aa:
d5:95:38:92:ba:22:02:7b:b3:57:8b:5b:60:bf:38:8f:1f:f5:
77:21:77:31:c5:5c:61:67:7a:4d:d5:82:fd:94:47:7a:06:67:
f8:bb:b0:fa:43:51:78:0d:f5:73:c7:14:fa:c7:10:12:4b:df:
0c:2f:08:82:c0:32:34:a5:66:ec:49:18:f2:59:42:8c:c6:40:
94:ca:fb:64:99:73:c6:00:fb:cf:61:3a:c1:5b:b4:96:38:dc:
f2:5a:8c:61:9f:b1:b4:82:32:d4:cf:d0:ef:bc:6a:c5:e9:03:
81:6c:45:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:21 2025 by rpki-client