Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/loBaMvSz4JAFQ9czkRiAO0IrbmE.roa
File: loBaMvSz4JAFQ9czkRiAO0IrbmE.roa (raw, json)
Hash identifier: Low0XZ0tlR3GeJZBRxPXwxRdk5WyjOyoSgNarwynxZI=
Subject key identifier: 96:80:5A:32:F4:B3:E0:90:05:43:D7:33:91:18:80:3B:42:2B:6E:61
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01910467EB3D43262661CE260B9BC0214B40
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/loBaMvSz4JAFQ9czkRiAO0IrbmE.roa
Signing time: Tue 30 Jul 2024 16:10:04 +0000
ROA not before: Tue 30 Jul 2024 16:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 109.111.34.0/23 maxlen: 23
109.111.42.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:04:67:eb:3d:43:26:26:61:ce:26:0b:9b:c0:21:4b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jul 30 16:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96805a32f4b3e0900543d7339118803b422b6e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:52:29:1e:6e:7a:8e:d9:44:ea:ae:f4:13:
dd:db:43:b5:04:bc:2f:59:dd:54:fa:b3:79:a6:56:
91:02:49:eb:79:a2:5d:29:f1:ac:41:31:c8:dd:41:
82:01:39:0d:51:87:f5:3e:77:83:05:38:b8:fa:f9:
28:64:0f:ff:5f:29:82:1e:8a:21:8b:5b:ef:83:de:
03:f6:19:97:50:d0:e5:8c:e8:96:22:99:eb:e2:08:
f1:7e:07:9c:91:e6:6b:28:b5:7c:9b:27:dd:18:53:
60:31:94:2e:3c:39:f7:a7:73:56:85:1f:63:2c:a0:
a7:9a:12:cb:d7:6b:2a:97:d3:f9:bc:32:e5:52:a8:
0e:ec:30:ae:ae:fe:af:66:00:08:76:46:c4:0c:5b:
bf:97:71:ed:38:94:e4:7e:2b:d0:80:83:b9:13:7f:
79:e3:bd:92:eb:a8:a4:2b:eb:25:29:1a:ba:41:c2:
50:7b:c7:1e:cc:d2:06:9f:38:cf:26:b8:72:10:26:
ca:9d:79:49:8b:0b:f6:04:f7:77:64:bd:1b:41:0a:
23:c1:d8:e5:e3:5c:3c:bd:fa:f1:88:ee:0a:50:5b:
19:6e:7f:96:b1:59:7a:dd:35:de:fc:26:c8:d5:1c:
94:fa:e7:b3:3e:40:6d:96:75:dd:3b:1f:78:88:6a:
d8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:80:5A:32:F4:B3:E0:90:05:43:D7:33:91:18:80:3B:42:2B:6E:61
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/loBaMvSz4JAFQ9czkRiAO0IrbmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.34.0/23
109.111.42.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:e6:8c:26:87:85:14:b4:1a:1d:6a:fa:98:41:fb:06:b5:fc:
24:df:52:60:09:e7:55:6b:28:db:6b:cf:30:69:30:f0:8a:97:
73:62:42:16:bd:77:eb:01:1f:30:da:ec:d6:fc:88:5d:54:5a:
cb:d6:6b:88:a0:69:d2:95:04:6d:2f:9e:47:1a:84:42:2d:55:
08:da:fe:b9:d6:01:86:1f:29:12:b4:00:ac:3b:91:70:cb:ab:
07:8c:41:12:d5:f5:68:8b:f8:31:be:e8:20:d1:96:8c:bc:73:
c3:eb:f2:78:29:fd:63:34:1d:7e:2d:14:66:48:e4:58:52:fd:
de:17:bf:27:56:ce:c5:d0:4e:8c:58:a8:41:27:0e:7a:c8:54:
da:09:45:5d:9b:19:5f:3d:ab:f8:2e:d0:aa:5e:6e:df:1c:3a:
7f:ad:a4:3b:a0:e5:d8:ae:2a:3d:6d:cd:6c:1a:bd:3d:fc:8e:
1b:97:0c:89:44:4e:60:bf:f0:ee:e7:f8:40:a4:e2:0e:6d:81:
ad:47:cc:63:af:0b:f0:90:1d:55:ef:af:59:5d:32:e1:ef:65:
cd:15:32:aa:8b:97:14:39:14:17:1a:c4:7e:fc:38:97:8f:30:
ae:96:05:10:64:ee:7e:66:2e:e2:5c:3f:10:22:53:69:fc:4d:
db:22:48:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:29 2025 by rpki-client