Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/UmoMMcgLYQ1NME06W-RaoSwOLvs.roa
File: UmoMMcgLYQ1NME06W-RaoSwOLvs.roa (raw, json)
Hash identifier: DXndsPFPDd7x23rCZc6g3GNT4ZixvQ1GmrG9rBzETuc=
Subject key identifier: 52:6A:0C:31:C8:0B:61:0D:4D:30:4D:3A:5B:E4:5A:A1:2C:0E:2E:FB
Certificate issuer: /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Certificate serial: 0194244505BC90E9EE0E4F48FFD2474E0A43
Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/UmoMMcgLYQ1NME06W-RaoSwOLvs.roa
Signing time: Wed 01 Jan 2025 23:48:10 +0000
ROA not before: Wed 01 Jan 2025 23:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5408
IP address blocks: 109.107.139.0/24 maxlen: 24
2a11:cfc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:05:bc:90:e9:ee:0e:4f:48:ff:d2:47:4e:0a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Validity
Not Before: Jan 1 23:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=526a0c31c80b610d4d304d3a5be45aa12c0e2efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:31:a0:f1:1a:b1:bf:e0:f6:46:28:55:f0:
94:21:03:b8:f1:e3:37:f4:59:70:7f:db:48:42:5c:
61:88:68:4f:84:2b:4e:73:3a:86:ad:a2:e4:60:9e:
98:cc:b8:67:4a:df:02:60:98:4d:f7:83:47:ee:12:
93:06:f5:b1:2f:cf:b5:9b:e1:ca:c7:10:60:a3:1a:
73:db:5b:94:b7:80:7a:f8:b5:6c:87:36:f4:e7:e4:
65:eb:87:a9:62:83:fb:92:04:48:7c:28:cd:be:7b:
36:14:1c:90:27:6d:11:7e:fc:28:d4:79:a9:49:08:
9f:ed:86:25:ae:33:91:0b:29:20:8e:e3:27:c1:71:
c7:c9:10:d4:f1:e0:2d:da:18:8f:a0:79:c4:0a:42:
ed:92:4a:bf:6f:80:f0:ac:51:4e:25:7d:95:ae:ee:
79:db:26:98:0d:12:5b:da:56:2b:4e:19:5e:91:7c:
66:ec:c7:87:56:eb:9a:77:98:64:16:ba:61:8b:a2:
17:8b:59:35:8f:5c:2f:2b:eb:0f:8c:51:0d:6f:94:
49:d7:df:67:73:47:e9:79:6d:66:90:0e:b6:fb:78:
38:6f:6a:0c:d9:13:82:37:9f:d4:b0:fa:56:15:47:
a8:03:8b:51:2d:51:df:69:e1:29:8f:1e:ef:2d:2d:
fa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6A:0C:31:C8:0B:61:0D:4D:30:4D:3A:5B:E4:5A:A1:2C:0E:2E:FB
X509v3 Authority Key Identifier:
keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/UmoMMcgLYQ1NME06W-RaoSwOLvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.139.0/24
IPv6:
2a11:cfc0::/32
Signature Algorithm: sha256WithRSAEncryption
29:68:bc:10:09:4e:4e:97:22:ed:60:94:4d:0b:5f:d1:97:8e:
46:9f:40:4a:f9:d1:85:c4:b0:b3:6d:e8:99:07:79:73:b3:57:
3a:a2:1d:6a:b6:16:bd:0a:ac:7f:44:83:6a:9f:1d:98:c5:fe:
d6:77:54:c1:ab:73:50:72:7f:99:72:9a:bb:fb:bb:05:21:9c:
29:93:b2:c6:bb:23:f8:7a:26:5d:5e:26:95:5c:98:8c:18:fc:
af:74:d0:c8:8d:c6:bf:91:43:a7:35:ee:dc:92:27:44:ad:aa:
91:5e:ac:af:a8:0d:16:c3:96:a7:21:b8:aa:64:88:40:d0:bf:
40:8b:68:14:73:72:df:ce:ba:b1:e2:07:95:30:1f:fb:b6:f8:
23:b4:40:b1:13:86:ba:ea:c5:a8:26:50:aa:ce:36:62:ac:7c:
c0:17:e7:ba:83:be:6d:93:99:14:0b:67:68:ca:d0:8b:34:ef:
86:1a:e5:dd:57:3e:60:41:62:13:8e:ea:fc:07:e8:4b:a0:21:
e4:a4:f2:3e:31:1f:6f:8b:94:26:6b:13:70:59:a3:f2:11:61:
7c:b2:ac:15:3a:c4:d9:86:5a:b6:15:2e:a2:02:22:20:f0:85:
a2:74:73:54:a7:04:f0:50:e3:24:2f:0b:5b:6b:54:fd:f0:6b:
27:27:dd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:11 2025 by rpki-client