Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/akHFRDOvxeyUA-lIXkDCobvzewg.roa
File: akHFRDOvxeyUA-lIXkDCobvzewg.roa (raw, json)
Hash identifier: C3dsjYhJ/a2fsWr+GjQS01rTDuPPTnWrbKjPdCxDOYk=
Subject key identifier: 6A:41:C5:44:33:AF:C5:EC:94:03:E9:48:5E:40:C2:A1:BB:F3:7B:08
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018AE4EFE02441537AE851AE2A62FE388AA5
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/akHFRDOvxeyUA-lIXkDCobvzewg.roa
Signing time: Sat 30 Sep 2023 07:14:00 +0000
ROA not before: Sat 30 Sep 2023 07:14:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 109.111.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e4:ef:e0:24:41:53:7a:e8:51:ae:2a:62:fe:38:8a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Sep 30 07:14:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a41c54433afc5ec9403e9485e40c2a1bbf37b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:96:29:13:49:f4:97:0d:3c:c3:4c:01:19:6b:
51:75:b1:3c:5a:99:64:b7:28:24:11:6c:94:06:dd:
60:be:f3:2d:25:26:10:27:6c:45:7a:eb:53:a0:86:
29:72:5f:cd:5c:28:68:32:d5:ca:58:de:bd:20:d9:
b1:73:60:29:14:99:37:09:cb:42:a4:f8:0a:9d:c5:
9e:1e:15:4e:fe:70:bb:36:63:9b:30:63:f6:d8:e2:
fa:fc:fa:84:99:13:e2:09:30:49:99:b1:93:d0:2e:
85:90:89:13:fe:4a:ed:e3:db:76:47:fc:8e:ae:ba:
3a:2f:dc:49:40:02:82:1c:b2:0e:6d:86:ad:ab:75:
72:15:9f:c3:f3:0f:52:fb:27:3a:fb:98:2f:a7:58:
2b:fd:f9:74:29:63:f6:99:35:0b:ff:95:5b:19:ae:
1d:7a:3a:dd:6f:91:8a:1f:2b:36:94:a2:5e:42:58:
0c:a7:5c:6f:bd:b5:84:58:6b:6c:18:70:f4:29:7d:
31:ff:72:5d:6c:d0:bf:42:25:9c:90:56:05:9a:43:
6c:01:56:7c:b5:91:ab:d3:72:a8:c4:c5:5d:b7:ce:
4c:62:8c:b0:fe:c4:15:03:f3:3e:4b:ed:ca:e8:74:
2d:a0:18:bb:7e:29:35:a2:bf:af:5b:98:36:30:20:
56:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:41:C5:44:33:AF:C5:EC:94:03:E9:48:5E:40:C2:A1:BB:F3:7B:08
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/akHFRDOvxeyUA-lIXkDCobvzewg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.56.0/22
Signature Algorithm: sha256WithRSAEncryption
31:3f:8e:54:6f:16:06:76:8f:29:28:77:35:fe:30:4c:87:0a:
7b:76:7a:fd:09:1d:b8:9a:97:f7:b5:68:65:5a:f1:cb:80:20:
63:3d:fe:f1:07:e6:7e:0a:a6:e3:d5:84:d5:15:5a:e7:87:bd:
8b:fd:fb:6c:ac:2d:cc:cb:5d:3e:14:9e:f2:7a:c7:12:fb:7b:
f1:84:e1:d9:9f:f5:8b:1c:84:50:85:ac:a6:2c:ea:a6:ac:bf:
e1:59:d1:c6:f0:2c:e7:56:01:12:e5:a5:77:ca:63:0b:30:ee:
91:a1:58:c6:d7:89:40:c0:b3:b7:d8:d7:e3:84:45:d0:7e:dd:
e0:55:de:7e:94:fd:90:08:06:33:c1:87:22:4b:05:5b:c6:47:
d0:dd:d2:8a:4a:9e:7a:e7:bf:e5:3d:71:49:62:0a:4c:f5:77:
6c:48:8a:f3:f5:eb:5f:75:53:80:1b:78:44:7c:28:36:9d:84:
63:26:da:7e:e1:6c:ad:e0:c4:fd:0f:6c:96:97:61:01:d5:6d:
1e:bd:e7:ee:f5:49:a3:3f:11:11:94:8f:9b:4b:35:5f:a1:09:
15:47:eb:20:11:7f:e9:48:80:b4:82:c8:24:c4:7b:84:88:a1:
f8:99:9c:ef:a9:e6:15:76:6a:9d:73:a8:52:14:55:23:1f:02:
90:95:3a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:13 2025 by rpki-client