Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/PBpipMkioK9lbLAbavULLSU90fI.roa
File: PBpipMkioK9lbLAbavULLSU90fI.roa (raw, json)
Hash identifier: szICVrzxNvkpdH2OEiIY1ewoQfKEIbqLhZPC2P529cI=
Subject key identifier: 3C:1A:62:A4:C9:22:A0:AF:65:6C:B0:1B:6A:F5:0B:2D:25:3D:D1:F2
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01846A857DE2206BF0ADDDEF96E0DAC43091
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/PBpipMkioK9lbLAbavULLSU90fI.roa
Signing time: Sat 12 Nov 2022 06:27:24 +0000
ROA not before: Sat 12 Nov 2022 06:27:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 109.111.48.0/22 maxlen: 24
109.111.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6a:85:7d:e2:20:6b:f0:ad:dd:ef:96:e0:da:c4:30:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Nov 12 06:27:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c1a62a4c922a0af656cb01b6af50b2d253dd1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:e2:85:f5:bc:4f:81:11:b7:34:17:55:a0:
1d:ae:51:bf:e2:fc:d4:02:f7:e1:e7:a6:11:75:4f:
4e:51:9a:79:f4:da:41:24:03:45:80:5a:6c:67:3b:
c4:bd:a3:30:29:47:b3:b2:b6:2f:3d:85:e2:d3:57:
eb:0b:90:16:02:12:50:02:c8:23:6e:c4:a8:e6:7b:
2d:92:27:93:5b:67:aa:df:33:ab:2c:ad:bf:cb:c6:
3d:f8:da:c5:05:7a:87:42:6f:84:74:88:cd:0e:84:
3d:ea:aa:a0:3f:b4:2c:ce:36:e7:e5:56:ce:ef:22:
92:e0:3a:80:74:e5:bf:ed:55:bd:aa:ac:4c:4a:f8:
aa:81:9f:47:00:4a:70:ea:42:bf:12:de:06:2f:30:
94:fa:5c:47:a0:d4:29:f7:44:68:da:a0:03:b9:15:
23:27:e5:d2:d9:5d:f7:d5:6e:35:71:a9:60:d7:71:
ac:d4:a6:2d:0d:ce:09:5d:a2:46:03:71:e6:ae:a4:
96:ea:8a:27:0e:2b:1c:0c:50:f2:5a:ed:50:cf:7e:
35:21:88:87:03:a1:1c:82:4e:56:5b:91:a1:d1:ee:
53:1a:31:fe:3e:f4:d5:ce:1b:01:a5:ca:67:6f:e0:
e0:fc:a6:88:04:16:d3:d1:09:07:04:11:ea:bb:5f:
37:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1A:62:A4:C9:22:A0:AF:65:6C:B0:1B:6A:F5:0B:2D:25:3D:D1:F2
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/PBpipMkioK9lbLAbavULLSU90fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.48.0/22
109.111.60.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:bc:48:9d:25:38:e3:f5:9a:ee:98:c5:e7:82:1b:d4:fc:c7:
d4:e2:60:ab:81:06:92:86:00:57:5a:bd:e7:07:71:b2:a9:7f:
14:55:54:26:89:cb:f8:84:59:33:98:9b:32:39:29:1d:78:5f:
13:61:f3:85:95:5d:83:de:1e:b3:44:29:cb:71:3e:70:3c:26:
d1:7c:0c:83:69:78:8a:4c:d5:49:56:d4:a9:c4:56:17:f8:6b:
c1:13:e6:76:02:36:91:06:9e:61:21:41:f4:3a:4f:1d:84:7e:
90:c6:26:e5:e9:fd:d0:0a:7b:92:25:f4:ab:97:42:97:d7:40:
a3:e1:33:04:b5:d9:82:92:31:ff:bb:52:eb:28:22:50:b3:3f:
6d:0b:c5:42:e8:cd:47:ac:ab:42:93:5c:52:8a:1c:da:d4:f8:
f8:05:ab:b7:00:6c:7c:01:55:50:0c:25:f9:a9:5e:86:09:21:
0e:05:06:a7:0a:3d:87:b9:39:e4:1a:7c:b7:52:00:fb:10:1e:
4b:df:dc:ba:e8:04:4e:51:71:36:24:3f:e2:55:ad:dd:a2:13:
39:86:35:f8:dd:d2:9e:86:55:20:32:4b:4a:0a:f4:c2:d8:36:
c9:33:83:e0:f7:b4:5b:ff:38:70:25:59:a5:8c:da:ec:10:3f:
81:4d:91:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:43 2025 by rpki-client