Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jjcK3Ro-CVW603OPjaQaXV3bpV8.roa
File: jjcK3Ro-CVW603OPjaQaXV3bpV8.roa (raw, json)
Hash identifier: H7rFUD/nZg2rrMaDQENQBNvBpC32hp1uDMhs4Tuh7w8=
Subject key identifier: 8E:37:0A:DD:1A:3E:09:55:BA:D3:73:8F:8D:A4:1A:5D:5D:DB:A5:5F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195AA286AA9530A7C94D3DCE3B9C17340EC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jjcK3Ro-CVW603OPjaQaXV3bpV8.roa
Signing time: Tue 18 Mar 2025 16:48:50 +0000
ROA not before: Tue 18 Mar 2025 16:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33842
IP address blocks: 109.61.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:aa:28:6a:a9:53:0a:7c:94:d3:dc:e3:b9:c1:73:40:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 18 16:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e370add1a3e0955bad3738f8da41a5d5ddba55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:04:16:5e:82:d2:2f:42:e0:3a:33:c7:58:
e4:ba:0f:a1:b4:8b:28:8d:a2:f2:39:2c:c3:94:c4:
e5:c3:33:c6:24:c9:71:d8:e9:98:72:ff:94:3b:5d:
79:bf:6d:f5:ae:8e:c1:ee:e0:31:e4:df:5e:71:ef:
4c:5e:f2:90:a3:4a:f4:2f:7e:d6:89:ad:4f:86:d4:
c5:5c:3e:aa:1b:8d:7a:02:93:f2:c7:af:df:62:3f:
7d:1f:e6:2e:dc:0a:08:b8:9f:15:6a:39:85:f4:f2:
48:69:49:bd:f1:8e:73:e9:23:0f:20:3a:fb:e0:78:
05:55:7f:5c:c3:10:47:ea:74:67:a7:e1:0d:a4:79:
a7:fd:9f:2d:08:92:74:f2:9c:74:66:15:3e:e1:86:
d3:76:23:48:8f:74:df:7c:b7:48:cb:fd:68:9e:95:
1c:c0:96:47:42:69:52:f4:d4:be:0d:b4:6d:62:3b:
c0:c0:27:cf:23:69:2e:2c:6f:6f:ed:1c:d5:36:d9:
c7:e7:fc:80:49:7a:37:92:cc:fb:0f:a4:1f:0a:52:
58:a3:fe:3a:f5:4f:90:d2:c7:16:2f:ee:7c:ca:3d:
60:e3:23:80:f8:1d:72:41:39:91:78:9d:98:c0:c6:
d7:a9:fe:16:88:36:32:84:7e:47:27:2d:22:20:0e:
b0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:37:0A:DD:1A:3E:09:55:BA:D3:73:8F:8D:A4:1A:5D:5D:DB:A5:5F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jjcK3Ro-CVW603OPjaQaXV3bpV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.61.108.0/24
Signature Algorithm: sha256WithRSAEncryption
89:32:24:ec:7e:33:22:44:a1:b1:d5:0b:59:8a:42:ce:4d:0f:
36:b4:82:ac:18:1a:56:c0:f3:60:d1:fb:28:b2:01:79:a9:4b:
ac:0f:c7:b7:57:a1:a5:bb:ab:e7:d6:e7:85:20:13:ca:20:55:
73:68:56:81:48:b9:35:f0:27:c0:a3:3b:db:68:83:08:a7:e3:
cf:0d:89:d6:87:a2:db:fb:88:e8:2a:1e:bf:e5:ff:b5:d5:17:
1f:eb:ba:6a:64:70:e2:3b:dc:9f:77:61:df:33:be:1f:f7:6b:
a4:41:29:c0:b5:46:c1:f4:32:ec:06:1d:cc:8e:81:d1:3f:61:
cd:a9:aa:74:4d:33:5b:2d:dd:7e:90:d8:ee:95:0d:58:05:f0:
ef:26:a1:d2:f3:9d:26:6e:e5:26:7a:20:33:0a:92:14:23:94:
58:d6:53:af:ec:d8:78:e9:ca:6a:0d:90:80:92:b1:8d:e3:8a:
9d:99:4d:8f:4f:ec:bc:92:48:30:c5:a5:be:c5:31:46:c5:1b:
35:6c:e1:74:d8:78:25:d4:ad:f8:c2:75:d6:fe:cb:78:00:83:
50:d8:6a:ad:d7:28:52:a9:7b:a0:8d:35:08:84:f2:1c:0d:2b:
92:5d:7c:a6:6d:73:76:6c:86:c9:e7:b9:1d:7a:05:95:1d:d7:
e5:0e:5c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:38:26 2025 by rpki-client