Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/Dz4yG6yMz1DOB9anOl-EBPWNUtY.roa
File: Dz4yG6yMz1DOB9anOl-EBPWNUtY.roa (raw, json)
Hash identifier: N6/LyN5X254imVh3TtMGhXhycad8JajeAu0LS4la9aA=
Subject key identifier: 0F:3E:32:1B:AC:8C:CF:50:CE:07:D6:A7:3A:5F:84:04:F5:8D:52:D6
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 01958EEF6AC27BA39B198A6638E2B8EBE90B
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/Dz4yG6yMz1DOB9anOl-EBPWNUtY.roa
Signing time: Thu 13 Mar 2025 09:56:49 +0000
ROA not before: Thu 13 Mar 2025 09:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20712
IP address blocks: 109.205.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:ef:6a:c2:7b:a3:9b:19:8a:66:38:e2:b8:eb:e9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: Mar 13 09:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f3e321bac8ccf50ce07d6a73a5f8404f58d52d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:12:cc:e8:de:3f:49:bb:df:e7:ba:19:7d:d5:
4f:97:27:03:64:15:ab:45:e0:68:70:a1:92:6b:03:
4a:e4:2a:41:e0:8c:94:73:11:6f:7d:12:60:16:d5:
6c:3a:35:26:ab:1e:c4:19:9d:a2:ea:3c:cf:b9:b7:
54:76:40:e8:13:85:9d:dc:9b:dc:3e:f1:d1:a0:00:
99:a8:70:e5:ce:67:ec:0e:4d:1e:7f:68:f4:53:b1:
64:e6:7c:bc:44:2d:44:f2:14:25:f3:dd:a0:3a:2e:
03:7a:da:57:4d:42:2f:78:f2:a9:4b:2a:ea:4e:5e:
e5:90:e7:ec:55:15:2a:a5:50:b6:22:a5:56:96:9e:
ab:4d:3b:a4:11:7b:04:ed:2f:5c:8d:56:90:c0:67:
a4:34:37:41:be:d2:5d:a7:b5:0f:76:de:44:6b:b7:
9c:82:3d:ed:57:e3:8d:c0:6b:ec:e4:9d:9f:62:df:
10:da:db:82:46:c8:97:e8:45:86:db:e2:d6:83:21:
fe:6c:6b:03:47:43:78:39:95:4d:5a:c9:90:65:b8:
61:eb:e0:14:2b:d7:04:ab:9f:ef:81:c4:10:9d:86:
69:d6:06:33:84:02:5a:4c:aa:aa:ff:3d:7e:8e:cf:
d2:fd:27:32:17:db:fd:16:1e:d1:6f:9a:33:ce:a6:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3E:32:1B:AC:8C:CF:50:CE:07:D6:A7:3A:5F:84:04:F5:8D:52:D6
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/Dz4yG6yMz1DOB9anOl-EBPWNUtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.156.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:37:86:59:40:fc:d2:c0:99:97:f4:43:e7:c3:af:d1:e2:95:
ca:ac:8c:04:31:53:11:3a:18:b5:f1:fe:7f:c8:2a:4b:11:3f:
4d:47:ba:d2:f0:b9:3a:01:6a:c8:2e:34:e7:2c:ad:bc:26:12:
bb:88:5f:90:17:aa:fb:fa:3b:ff:2b:1a:6e:88:a7:68:f7:8a:
a3:eb:b1:c5:b0:f3:eb:2e:62:d9:5e:c9:52:83:bd:c9:a8:ec:
88:0a:92:28:da:23:ed:38:14:6c:2a:34:59:9a:14:4a:c1:65:
29:39:f3:8e:7f:15:64:f0:70:2d:8d:2a:64:1f:78:f2:a3:88:
65:ca:0b:5f:f2:14:05:c6:ba:19:1b:2d:9b:a6:1b:48:c3:68:
f0:8d:ff:c5:14:00:03:76:70:52:22:34:c7:d6:e0:91:a8:53:
be:7d:c7:24:8d:e3:10:fa:1d:35:4a:80:4d:24:4f:43:60:35:
71:0c:b5:e7:04:8e:e4:d4:e5:48:2d:26:7a:d9:81:d9:df:2e:
6a:9c:b7:30:5f:f0:e3:69:15:52:93:89:39:09:8a:f5:b5:be:
60:ca:4a:84:d1:9b:0e:98:ec:88:1f:ef:d5:ad:06:54:c5:5a:
45:05:1c:20:6a:21:f0:7a:2e:47:a1:fb:73:4f:b2:ba:a7:ec:
c9:1f:f4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:10 2025 by rpki-client