Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/rnvWXs0XRLLD7EDP2ZjYwuCXalM.roa
File: rnvWXs0XRLLD7EDP2ZjYwuCXalM.roa (raw, json)
Hash identifier: VoZ0n204+9SGltv3ukR3bDapX4Bid4KvflOGHkPSlBk=
Subject key identifier: AE:7B:D6:5E:CD:17:44:B2:C3:EC:40:CF:D9:98:D8:C2:E0:97:6A:53
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018FD9BC008A07D71D1321474BF1582EF535
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/rnvWXs0XRLLD7EDP2ZjYwuCXalM.roa
Signing time: Sun 02 Jun 2024 16:15:27 +0000
ROA not before: Sun 02 Jun 2024 16:15:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16125
IP address blocks: 109.111.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d9:bc:00:8a:07:d7:1d:13:21:47:4b:f1:58:2e:f5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jun 2 16:15:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae7bd65ecd1744b2c3ec40cfd998d8c2e0976a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:c0:7d:a7:da:ff:a6:2d:72:18:86:83:ca:
87:f9:2a:a1:0a:66:fc:00:1a:1a:65:ad:30:c4:1a:
8a:fa:bb:71:74:9b:6c:c2:6f:6c:69:db:c3:17:0c:
49:c1:e1:5e:6a:d2:ee:2f:ae:e2:0f:45:33:5d:aa:
bb:d5:ef:b4:48:2f:5a:df:f0:c9:79:2e:6f:0c:c2:
1c:4d:3a:12:a3:d4:2a:43:f7:df:da:e2:80:80:58:
f5:91:ae:28:1f:b0:11:23:5a:f2:66:97:9e:ee:ae:
07:24:a3:cb:2e:13:d4:e8:63:36:98:47:80:3f:c6:
16:f7:56:af:c7:74:ff:b4:3b:02:d4:6e:32:0d:89:
71:69:0b:47:c5:c7:8d:b7:45:a0:e6:58:fb:86:99:
71:2b:20:f9:70:f6:3d:fc:71:95:b2:1b:6c:8f:87:
69:0c:a3:1a:cc:67:2f:1d:23:73:a3:76:6b:58:e4:
32:0d:1a:f7:ca:20:b2:02:0b:96:46:77:48:fb:d8:
95:e1:9c:9e:6a:a9:58:40:0d:52:e7:5c:0e:33:ae:
83:ab:f2:69:59:a5:4c:67:03:fb:eb:06:30:e6:b0:
07:b0:d5:cd:c6:ef:ec:48:f2:92:bc:27:47:60:de:
d6:8e:a4:f6:b4:7b:19:4e:85:07:9f:f4:b8:54:d3:
73:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7B:D6:5E:CD:17:44:B2:C3:EC:40:CF:D9:98:D8:C2:E0:97:6A:53
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/rnvWXs0XRLLD7EDP2ZjYwuCXalM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.34.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:81:8c:d9:ac:b8:0e:c6:01:42:d2:12:a4:89:dc:90:94:50:
7e:30:a0:43:3c:1c:2b:01:1d:1d:e8:b2:26:8a:fb:d1:cb:3e:
40:37:a6:d1:cb:1a:b0:93:2c:dd:6c:2b:e6:40:af:85:58:e3:
d8:ed:9a:81:b2:81:89:af:f3:62:ca:4c:39:41:ae:07:0b:fe:
b2:bc:79:04:86:ea:53:ca:1d:da:8d:fc:c3:7f:ba:b1:17:8f:
82:8c:e4:ae:b8:bb:28:96:78:2c:dc:a2:2b:25:cd:a5:e0:91:
68:57:26:b2:03:23:57:f3:61:af:8b:8e:91:03:44:8f:e4:0a:
7e:09:4f:aa:84:16:7d:97:8e:7e:e6:a1:ad:5c:01:4b:8e:fd:
31:08:d0:6a:dd:95:18:ae:2b:66:ec:72:71:c4:c5:a3:4b:c2:
de:d2:9c:f9:c4:51:77:d1:7c:dd:8d:13:c1:34:f9:e7:42:63:
7e:c5:50:fb:f3:6f:a6:c0:f7:07:2c:d4:fb:32:bc:46:e2:31:
4e:a5:74:34:77:5b:95:5b:bd:61:fd:5e:b2:f8:e9:d2:20:36:
9a:01:e6:68:f7:73:b4:bd:1b:57:a1:c2:a5:59:a9:28:39:c6:
d2:82:a7:45:3d:d8:55:59:1d:87:0d:bb:21:32:0f:bd:11:8d:
50:f5:96:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:41 2025 by rpki-client