Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/P5yvTlRn3nqtjVnpfU05g1KZ4SE.roa
File: P5yvTlRn3nqtjVnpfU05g1KZ4SE.roa (raw, json)
Hash identifier: TtEBbehebL7C33E6kOhCGp+uzMob1O84PbfERw5o2mc=
Subject key identifier: 3F:9C:AF:4E:54:67:DE:7A:AD:8D:59:E9:7D:4D:39:83:52:99:E1:21
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01C198
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/P5yvTlRn3nqtjVnpfU05g1KZ4SE.roa
Signing time: Tue 10 May 2022 11:14:02 +0000
ROA not before: Tue 10 May 2022 11:14:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51775
IP address blocks: 109.111.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115096 (0x1c198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: May 10 11:14:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f9caf4e5467de7aad8d59e97d4d39835299e121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:d2:8d:56:8b:46:b8:38:1f:4a:df:90:9e:
b9:1b:e3:9a:3b:44:88:fc:de:77:47:04:eb:75:56:
7b:0c:ff:04:0a:6e:bb:6f:de:08:23:c9:f3:22:da:
15:f5:72:aa:b1:21:46:35:dd:b5:2a:42:13:27:53:
dc:7c:9e:f3:d4:2c:79:ac:dc:d2:4e:25:81:c2:d7:
fd:08:b5:5e:f6:a6:45:5b:bf:dc:c8:eb:9e:fb:e6:
7a:67:1f:77:eb:9b:db:7f:8a:5e:2d:b3:f1:36:95:
eb:3b:ba:9b:a7:1d:79:91:80:14:e7:6a:2c:12:65:
11:95:d9:14:2e:56:fe:89:9a:a5:65:d7:75:65:e8:
cd:f2:05:9f:f4:08:79:b4:af:e9:29:67:83:b8:07:
42:2e:58:23:9b:24:39:07:7a:a6:20:5e:22:72:5c:
67:e2:a8:4a:43:ae:84:70:a5:28:87:03:4f:2c:f4:
f3:94:88:00:b6:81:25:c6:cb:9a:c3:19:47:2e:98:
86:68:2d:77:44:24:8b:5d:01:e8:32:02:e8:81:fd:
68:81:a3:45:ba:5d:66:6d:1d:8f:c3:45:26:4b:61:
1b:cd:01:4b:8c:95:bf:05:48:c7:08:2e:f8:e5:a8:
41:cf:f7:e2:8d:79:4a:ba:22:8e:d0:ea:1b:08:51:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9C:AF:4E:54:67:DE:7A:AD:8D:59:E9:7D:4D:39:83:52:99:E1:21
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/P5yvTlRn3nqtjVnpfU05g1KZ4SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.32.0/19
Signature Algorithm: sha256WithRSAEncryption
92:a9:02:65:77:4c:d4:26:2f:70:29:ab:17:66:73:12:b6:11:
be:78:69:97:ad:31:1e:90:9f:54:6a:e3:c4:87:58:5a:e4:24:
7a:7a:c7:01:14:f1:65:9a:e2:ce:78:45:92:7e:95:6e:cf:de:
3a:f4:58:ef:99:b5:91:a2:9b:92:80:ed:89:f3:30:1b:1e:95:
02:9a:be:8e:9e:71:28:6b:a5:44:2c:72:db:41:d7:af:de:5b:
01:1b:96:a7:8d:6a:4c:b6:93:33:ea:21:dc:dd:8b:b2:02:11:
5d:32:1e:52:e2:a1:6e:0a:f1:c4:a1:5c:c1:08:ef:ce:3c:42:
09:0c:c6:da:1a:c9:fd:6a:60:20:92:5b:7c:6a:b1:b8:13:cd:
71:0c:10:3e:64:0d:3b:ef:bc:de:cf:da:40:b0:93:c3:38:9b:
df:44:bd:66:e7:50:b0:cf:ec:c9:55:cd:29:7a:ea:63:99:2e:
13:9b:ed:66:7f:bf:c5:85:62:0c:87:36:88:64:1a:0a:a8:89:
a0:3a:95:8f:26:64:da:35:89:cf:dd:b8:ad:04:05:74:20:78:
9d:c1:d6:f6:89:3b:85:8c:96:2d:9e:f8:b4:f5:aa:5b:fe:83:
49:30:f0:a6:b2:86:2b:db:eb:6e:10:a0:32:62:9a:b8:93:9d:
72:aa:63:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:10 2025 by rpki-client