Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/woG8jTtTLYfsotzY-F5Jym2G88Y.roa
File: woG8jTtTLYfsotzY-F5Jym2G88Y.roa (raw, json)
Hash identifier: THSTKLzrLTlOC6V/LkFYjUrIriXANSVWZWzDtd8xsTE=
Subject key identifier: C2:81:BC:8D:3B:53:2D:87:EC:A2:DC:D8:F8:5E:49:CA:6D:86:F3:C6
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0194A7F898950F2198674B5E13960D25183D
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/woG8jTtTLYfsotzY-F5Jym2G88Y.roa
Signing time: Mon 27 Jan 2025 13:34:34 +0000
ROA not before: Mon 27 Jan 2025 13:34:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 109.111.52.0/22 maxlen: 24
176.221.20.0/23 maxlen: 24
176.221.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:f8:98:95:0f:21:98:67:4b:5e:13:96:0d:25:18:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 27 13:34:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c281bc8d3b532d87eca2dcd8f85e49ca6d86f3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:56:4d:af:ab:7e:42:e5:36:d3:05:e0:7f:
00:f2:c7:c9:31:34:c5:2b:e2:98:fa:8a:b8:d2:cc:
6d:51:1e:7c:63:85:66:90:95:17:48:89:4d:ce:04:
27:fd:1d:ed:de:56:b8:9a:63:9a:7e:c4:1f:8d:63:
8e:ed:48:bc:75:85:3c:c4:cd:81:af:9b:1e:54:1f:
71:99:95:d6:bd:03:9d:57:0c:1b:ce:c9:7e:17:f1:
8c:48:02:9e:88:d1:22:d9:10:5d:63:ec:6c:03:04:
e0:f6:28:04:f1:9d:6f:44:49:46:87:8e:3b:38:c3:
31:8a:5d:2e:4f:b4:c8:d5:f8:67:ac:50:c2:31:a1:
2e:3d:27:5c:6b:eb:0e:2a:fe:69:3d:0c:bc:e4:46:
be:84:b0:4e:92:7f:1c:66:ca:bc:c6:3f:f8:63:53:
c6:ba:7b:3c:39:05:70:17:47:5f:ac:63:8f:2a:74:
81:dc:ac:e0:13:6b:22:5e:77:54:b7:95:df:c4:74:
54:cd:15:f1:b3:42:7c:15:c0:d3:10:8b:58:3f:ed:
f7:3c:17:fc:08:db:e6:12:ec:cb:0e:47:90:48:20:
4b:4c:4e:24:02:b7:ec:e1:52:0b:f5:d5:15:f3:db:
8f:12:71:7d:84:ed:fb:96:64:1e:42:be:25:9b:0c:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:81:BC:8D:3B:53:2D:87:EC:A2:DC:D8:F8:5E:49:CA:6D:86:F3:C6
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/woG8jTtTLYfsotzY-F5Jym2G88Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.52.0/22
176.221.20.0/22
Signature Algorithm: sha256WithRSAEncryption
74:dc:f1:3c:3a:c1:81:3a:90:ab:52:ef:f3:15:24:86:66:f5:
42:d6:37:c6:98:e6:7f:5d:8f:af:f6:66:40:ab:e4:58:20:ab:
d4:9d:71:4a:e9:45:70:4e:69:27:c0:ea:cc:73:59:e8:86:20:
09:a5:23:80:80:7b:cc:bd:d0:28:ad:82:94:58:ae:a4:cb:3e:
57:7c:90:25:57:49:41:18:69:5f:7b:0f:68:c7:93:28:dc:16:
c8:f2:bc:63:49:8e:1c:03:fc:f9:2e:cd:2c:a7:38:36:71:9a:
11:98:c4:9d:d3:00:b4:3c:e1:55:28:6e:01:4d:9a:ad:6c:84:
1e:e1:b3:e1:ce:a1:72:43:0a:c4:b9:53:bc:8c:6c:c6:b3:3c:
ac:5e:83:e9:c3:e4:2c:d3:24:5b:fc:14:34:c8:0d:d8:18:40:
32:d9:b5:11:6a:25:11:ad:98:9e:e4:d1:3f:86:be:1b:31:8f:
f6:04:d2:13:1e:de:13:f4:11:41:4e:2b:0d:f6:4e:74:b3:b8:
a3:b2:95:0e:ae:61:c6:9a:89:6f:d6:74:e1:c7:df:09:5d:e0:
2e:91:86:e4:cd:83:5a:b9:5b:93:83:ab:a4:04:ea:29:23:91:
8f:ae:a1:d0:e7:53:e1:aa:d6:61:81:19:04:0d:1b:2d:42:eb:
f4:5e:6c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:57 2025 by rpki-client