Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4_HbiQJQ6kt8Cc5qkeLDtd4s16w.roa
File: 4_HbiQJQ6kt8Cc5qkeLDtd4s16w.roa (raw, json)
Hash identifier: bkV9VV3MX+an6gVi1AaXLUuwFQnOesb4uVhrR6gWKrk=
Subject key identifier: E3:F1:DB:89:02:50:EA:4B:7C:09:CE:6A:91:E2:C3:B5:DE:2C:D7:AC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01957FCF3330085DE01F000D6DA2BD4666C9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4_HbiQJQ6kt8Cc5qkeLDtd4s16w.roa
Signing time: Mon 10 Mar 2025 11:27:20 +0000
ROA not before: Mon 10 Mar 2025 11:27:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198178
IP address blocks: 109.61.110.0/24 maxlen: 24
185.238.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:cf:33:30:08:5d:e0:1f:00:0d:6d:a2:bd:46:66:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 10 11:27:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3f1db890250ea4b7c09ce6a91e2c3b5de2cd7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e3:16:c4:4d:a2:04:8a:e0:2c:66:3c:ca:30:
1d:bb:a4:84:ba:29:f1:32:3d:ab:0a:60:a9:27:07:
2d:c4:8d:5b:fb:74:b7:4f:56:54:e5:a8:af:d6:c6:
18:37:e2:53:ff:2e:2b:13:4b:f2:2f:3f:d3:12:07:
a5:15:b4:1c:0e:13:61:b9:cf:96:1d:b8:8c:96:9b:
f0:f1:2c:9f:16:31:0f:cb:15:a0:46:79:86:82:39:
3c:3f:81:7c:3c:fb:82:50:d6:96:37:ff:fd:b3:d2:
b0:29:76:32:6c:09:f3:02:0c:4f:5b:e6:fe:fb:24:
05:a1:2a:1f:73:b3:af:36:5c:6f:35:57:4e:16:9c:
d2:dd:56:c9:0c:cb:b3:56:8c:95:7f:da:d9:54:ce:
23:75:d9:34:dd:a5:56:f6:ca:44:1d:9e:e0:83:f4:
5b:0a:5f:d2:91:9c:83:11:7b:62:d2:46:ba:29:75:
68:34:4d:9a:37:5c:a1:75:bb:0d:2a:e9:32:bb:36:
86:95:e0:db:3a:08:a8:9c:2b:54:f8:e9:42:ae:cb:
3c:d7:a9:15:1f:5f:43:29:a4:ce:24:29:5d:1b:b8:
37:71:40:4a:f3:c4:0e:29:65:7b:0e:5c:9c:d0:6f:
b7:4f:a1:e4:12:e8:33:51:e3:95:fe:e2:3a:9a:09:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F1:DB:89:02:50:EA:4B:7C:09:CE:6A:91:E2:C3:B5:DE:2C:D7:AC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4_HbiQJQ6kt8Cc5qkeLDtd4s16w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.61.110.0/24
185.238.190.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:0a:23:f0:5a:26:e0:71:77:f0:c1:b7:9d:ae:d6:89:6e:12:
55:e5:11:62:77:bc:2b:66:55:f4:62:49:78:95:ee:bb:1e:81:
a5:88:14:e2:2a:e5:af:6d:7d:62:be:f3:a5:ba:5f:bb:fc:f8:
30:88:29:69:76:0d:5c:7f:8b:65:d5:36:73:f9:e4:62:0d:be:
5a:2d:1b:a7:b1:42:68:5a:1a:50:e7:34:64:62:64:f0:85:ab:
6d:59:99:00:8b:b6:d8:66:fd:a8:0a:be:54:05:81:8d:85:f7:
2d:33:ef:e9:c7:13:ff:14:37:5d:5a:3f:69:f1:54:d0:02:c7:
14:bd:73:50:ae:34:c8:e0:71:ee:2e:37:3a:9d:24:53:5d:79:
49:41:ed:81:4c:b1:46:43:47:e6:87:0a:82:8c:5a:3f:2d:3c:
ce:7d:84:50:3c:88:01:a6:69:48:cb:2c:f6:84:1d:fb:fe:5c:
89:a2:f0:3a:6b:c6:f7:65:18:3a:af:73:b0:74:fc:11:38:80:
44:9a:dd:bc:34:ed:df:91:43:e1:24:be:83:1b:dc:ba:fb:b3:
cd:73:f5:7d:07:f1:de:ce:18:ef:4d:dd:66:a2:63:3b:0a:bc:
b6:84:a1:41:bc:06:6c:db:af:0d:20:f5:d1:af:0b:fc:43:c7:
f0:92:53:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:45:31 2025 by rpki-client