Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/rvL1x1q3Kw8HVwE0wYz67prBCjM.roa
File: rvL1x1q3Kw8HVwE0wYz67prBCjM.roa (raw, json)
Hash identifier: xKsPUtdxwZbXXjuTE9smvx5gzGdvh7hHWO8VVJWBSZ0=
Subject key identifier: AE:F2:F5:C7:5A:B7:2B:0F:07:57:01:34:C1:8C:FA:EE:9A:C1:0A:33
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01941FFA88B85BE6510D12CFDFA1180E0867
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/rvL1x1q3Kw8HVwE0wYz67prBCjM.roa
Signing time: Wed 01 Jan 2025 03:48:20 +0000
ROA not before: Wed 01 Jan 2025 03:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46450
IP address blocks: 109.111.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:88:b8:5b:e6:51:0d:12:cf:df:a1:18:0e:08:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 03:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aef2f5c75ab72b0f07570134c18cfaee9ac10a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:86:e3:a2:c5:11:39:8b:f8:eb:24:43:38:2b:
0f:66:27:c4:ed:b5:8d:91:a8:1f:95:dc:03:98:04:
df:2a:b6:38:92:1b:46:50:20:8f:e2:01:c2:b2:58:
f2:1a:f4:71:a3:a5:bd:2d:ef:87:da:50:54:0e:ef:
b3:d1:f1:73:f4:6e:f4:27:a4:d6:ea:42:5a:18:79:
1b:2f:4b:5c:10:2b:20:79:98:a6:42:6a:0e:f7:ac:
03:02:1a:23:8d:9f:fa:15:5e:af:29:77:19:2b:9f:
fd:a2:32:37:fc:a6:d8:c6:9e:52:79:8f:c4:25:ce:
85:c2:39:38:8e:13:50:97:85:f4:1a:e6:e6:2f:8f:
54:f1:1d:f4:a0:5f:37:04:16:99:77:82:75:73:45:
c1:b3:74:79:69:6c:31:ab:07:88:48:ae:79:8f:a3:
d3:54:1b:18:56:97:0d:d2:16:66:98:1a:69:67:9c:
22:90:42:aa:54:14:58:da:5d:c3:b1:08:4b:a7:dc:
e5:ab:40:99:2a:4c:80:ef:33:fb:1f:c3:4e:8f:b3:
47:1e:aa:cb:84:1a:e9:91:51:92:2f:56:b6:ee:eb:
40:db:60:a5:a5:84:ba:04:90:a6:e8:b8:f9:0c:36:
fc:0d:88:a7:c9:2b:38:5f:9e:e3:c3:92:90:1b:32:
11:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F2:F5:C7:5A:B7:2B:0F:07:57:01:34:C1:8C:FA:EE:9A:C1:0A:33
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/rvL1x1q3Kw8HVwE0wYz67prBCjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.48.0/22
Signature Algorithm: sha256WithRSAEncryption
83:ef:d5:67:05:4e:42:0e:69:a9:42:09:28:8b:4d:af:05:56:
e7:63:d3:08:ba:62:05:b4:ad:61:82:b9:d4:63:8e:4b:7e:34:
bf:33:aa:6d:1b:b7:35:9f:3c:44:07:34:51:d4:03:26:fa:dc:
8c:d2:de:84:98:27:0c:17:06:c2:64:87:14:f6:87:65:bb:e2:
61:27:97:3f:86:fd:bd:cf:c2:00:a6:9b:bb:96:78:2c:24:7f:
47:ba:62:da:44:6e:12:ff:39:9a:c9:3a:e2:95:9f:82:07:04:
0f:97:88:86:c8:a7:a7:24:c7:06:c2:63:0d:4d:18:e1:1a:6b:
10:d1:87:79:c7:95:91:17:49:a7:2b:a7:77:01:ce:27:7c:c9:
3c:bd:5a:70:2b:ec:1e:99:48:6f:3b:5d:8a:ab:78:16:f6:72:
f1:f1:2c:36:a6:70:20:95:3d:87:d8:b0:98:c9:fe:8d:7b:00:
a8:6a:c8:a4:49:3a:0d:cb:f4:0b:a4:9c:39:c3:f5:33:1b:c6:
f4:00:e7:76:40:99:37:3b:38:09:c3:61:5b:e9:48:d2:ab:b9:
39:0b:16:e0:0b:4f:cd:dd:f6:92:ae:a1:cc:2f:32:33:cd:a6:
0b:04:4b:bc:a9:56:e0:3d:e8:00:09:c5:06:03:ab:3d:be:c7:
ab:61:55:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:13 2025 by rpki-client