Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/PbBhRej558nP-vCP2i5bq2vF02I.roa
File: PbBhRej558nP-vCP2i5bq2vF02I.roa (raw, json)
Hash identifier: k4y0Lkz3mWSRjZ9l7iXnliVmD502EHJIpmvxtHIQNOU=
Subject key identifier: 3D:B0:61:45:E8:F9:E7:C9:CF:FA:F0:8F:DA:2E:5B:AB:6B:C5:D3:62
Certificate issuer: /CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
Certificate serial: 019426D8C7D101F5722C8AB17505C4355563
Authority key identifier: 9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/PbBhRej558nP-vCP2i5bq2vF02I.roa
Signing time: Thu 02 Jan 2025 11:48:48 +0000
ROA not before: Thu 02 Jan 2025 11:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43510
IP address blocks: 109.239.0.0/20 maxlen: 20
109.239.0.0/23 maxlen: 23
109.239.2.0/24 maxlen: 24
109.239.3.0/24 maxlen: 24
109.239.4.0/24 maxlen: 24
109.239.5.0/24 maxlen: 24
109.239.6.0/24 maxlen: 24
109.239.7.0/24 maxlen: 24
109.239.8.0/24 maxlen: 24
109.239.9.0/24 maxlen: 24
109.239.10.0/24 maxlen: 24
109.239.11.0/24 maxlen: 24
109.239.12.0/24 maxlen: 24
109.239.13.0/24 maxlen: 24
109.239.14.0/24 maxlen: 24
109.239.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:c7:d1:01:f5:72:2c:8a:b1:75:05:c4:35:55:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
Validity
Not Before: Jan 2 11:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3db06145e8f9e7c9cffaf08fda2e5bab6bc5d362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a5:33:03:e8:a6:f3:95:73:3b:61:ea:07:19:
84:90:b5:dd:40:2d:f4:1a:e6:0a:85:7a:07:02:04:
a9:96:a6:a2:d0:93:ce:5b:18:c2:c8:7f:ba:2c:61:
6f:42:72:82:f2:21:2b:1d:6e:b8:a7:db:b3:48:90:
39:97:f6:53:0e:b2:ed:e1:3a:4b:7a:dc:9b:bd:d6:
a1:8e:88:42:de:1f:70:f9:d3:99:e1:b5:48:b2:b2:
ba:7a:5e:ba:9b:60:a4:6e:e7:37:9f:ad:fd:f9:5c:
a1:44:bc:ce:7e:09:28:e8:b0:0f:d4:18:23:a0:f3:
1b:e8:27:e8:48:60:51:ce:7b:bc:f9:65:b9:39:5a:
a4:1f:6d:13:e2:16:ed:0c:3b:9e:17:b2:c9:9c:fb:
86:e4:3e:c3:76:6c:91:a8:a5:fb:d2:db:db:82:e8:
03:9d:e2:af:22:52:be:fe:ee:0b:60:25:78:2c:7b:
9d:d5:0a:b4:74:ea:87:9f:b6:fb:67:6d:67:47:b7:
21:4b:d3:46:c1:08:43:21:b7:46:4f:8c:e7:2c:52:
cc:ff:0f:c2:8b:24:f8:b1:51:0b:d8:00:e2:c1:b7:
f5:db:64:d5:bb:77:79:5d:5a:bf:ee:21:c5:46:9b:
d6:d0:b1:7f:ef:d5:27:28:90:0a:2b:90:a9:e1:1f:
aa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B0:61:45:E8:F9:E7:C9:CF:FA:F0:8F:DA:2E:5B:AB:6B:C5:D3:62
X509v3 Authority Key Identifier:
keyid:9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/PbBhRej558nP-vCP2i5bq2vF02I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.239.0.0/20
Signature Algorithm: sha256WithRSAEncryption
12:b9:ea:95:f0:66:52:10:ea:27:7d:7c:f9:3d:a0:97:76:e3:
91:35:45:64:c4:8b:ba:a5:c9:d9:a7:57:10:ff:4c:77:40:d9:
74:6e:3a:a3:46:79:6b:41:65:ef:4c:be:8d:d3:4e:19:87:b7:
f2:72:71:f0:87:bc:2e:07:1a:22:d4:37:03:ce:5e:67:03:a1:
ef:1b:e3:d5:3a:b3:f3:15:26:30:04:bb:2c:32:c8:15:e6:83:
60:e0:24:69:7b:0d:b7:3d:49:6a:14:88:90:3e:70:4a:87:34:
5a:bb:06:ff:ed:c3:45:b8:7a:a0:25:f2:80:f5:e9:5e:89:84:
fe:11:01:02:ca:df:1f:f5:4e:f7:cd:a9:d3:e5:5b:d0:66:f5:
14:56:ac:ba:d7:ec:4e:09:20:09:93:17:66:6b:07:ff:7d:17:
76:a8:5e:c3:17:f1:6c:cd:ae:21:9e:f6:38:09:55:1b:d3:28:
bb:10:b7:86:7d:4e:3b:20:d3:39:c2:2a:0e:38:bf:aa:16:cc:
e2:6c:8e:1d:5c:ff:e2:65:95:76:b6:8a:8b:b3:08:80:e1:8c:
a1:a3:f7:3c:c1:88:f5:31:34:c7:a7:1d:0a:32:65:9f:1b:07:
d4:f6:78:ff:bd:f3:e8:7e:aa:15:84:fc:a3:e0:0f:18:fe:71:
09:fb:19:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:47 2025 by rpki-client