Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/mAyHHUhXsea-pRuM7jPd7iKnE08.roa
File: mAyHHUhXsea-pRuM7jPd7iKnE08.roa (raw, json)
Hash identifier: D0gsdRF1doBynhatWxrZvYhiFd6cdw7p0xxQ+KpmX1U=
Subject key identifier: 98:0C:87:1D:48:57:B1:E6:BE:A5:1B:8C:EE:33:DD:EE:22:A7:13:4F
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747C5C60D255F5E9A6B7A34E4B3E0DC
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/mAyHHUhXsea-pRuM7jPd7iKnE08.roa
Signing time: Thu 02 Jan 2025 13:50:02 +0000
ROA not before: Thu 02 Jan 2025 13:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50025
IP address blocks: 109.248.220.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c5:c6:0d:25:5f:5e:9a:6b:7a:34:e4:b3:e0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=980c871d4857b1e6bea51b8cee33ddee22a7134f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:5e:4c:1f:2d:96:f5:28:93:8d:50:d3:ed:
8e:91:62:d9:64:03:20:b7:03:86:84:ac:0a:77:4c:
fe:ce:1a:2c:24:bd:b2:20:e8:9f:c7:a2:9f:3b:47:
48:04:f6:88:ff:e8:61:33:a0:5d:03:bc:7b:a3:5f:
96:48:0b:1e:0f:3c:b7:a7:44:64:c0:18:29:b4:ae:
80:e9:f1:7a:00:42:84:d4:5c:aa:51:0b:13:83:8d:
8f:5b:cc:f5:ee:89:6a:0d:b3:5b:c1:1b:81:d7:bb:
80:91:b3:6d:80:33:ae:69:58:d9:0e:f3:87:fc:80:
dd:1e:98:80:19:3e:e3:2e:17:df:ed:53:6f:28:6b:
37:5d:68:e5:30:64:4c:93:56:99:50:c2:04:9d:44:
16:00:6e:54:e4:01:0d:e2:12:18:d1:09:fb:0d:89:
2a:3f:cc:05:78:f2:a7:20:bb:95:00:7a:68:1f:78:
f3:25:3b:24:08:23:18:70:b2:e6:ad:c9:50:18:42:
55:02:7c:66:05:e8:c6:ef:d2:eb:a2:60:00:76:f8:
8c:25:8b:c1:38:cc:46:20:33:76:14:bb:27:90:87:
b9:3f:ff:9c:2f:4b:8a:0e:75:c1:07:43:dd:d5:d5:
0d:8e:44:27:1a:9f:42:cc:82:88:dc:8d:58:f8:53:
d5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0C:87:1D:48:57:B1:E6:BE:A5:1B:8C:EE:33:DD:EE:22:A7:13:4F
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/mAyHHUhXsea-pRuM7jPd7iKnE08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.220.0/23
Signature Algorithm: sha256WithRSAEncryption
92:4d:8c:07:72:b9:44:a3:7f:3c:a3:90:2c:92:f5:b8:66:b8:
d6:96:73:51:aa:08:c4:e8:6d:f5:28:84:b4:35:32:d3:06:d8:
91:37:7b:a2:13:68:21:0c:84:16:a8:fb:d8:dd:83:b0:e6:ba:
87:c5:90:be:71:64:05:4e:73:f2:c6:b2:02:e7:3c:da:aa:00:
0b:cb:8f:09:d4:50:70:7b:06:c0:d0:11:1f:02:c1:06:5b:46:
fd:62:ba:6e:d2:7d:d1:96:68:9d:2e:18:a7:94:fb:2d:d4:c1:
ea:f6:dd:9e:85:65:a6:7f:2b:09:d5:d7:ef:19:c2:e4:ff:12:
c7:2d:43:e8:63:59:fd:e4:63:b9:09:39:3c:cf:a9:76:78:2a:
bd:f2:56:bb:e9:aa:c2:96:37:e8:24:21:10:33:26:a8:b2:57:
ee:09:03:4a:59:f9:fd:a6:1b:24:da:b0:4c:2f:bf:2d:73:d6:
35:4d:89:b0:eb:93:12:d1:13:a7:b8:27:4b:55:ba:95:3a:a5:
e7:4f:ec:7c:5c:4a:94:12:43:27:fd:e5:15:4d:1d:c1:ea:0d:
3b:10:94:b2:55:5b:d4:04:d7:7d:1f:cd:29:46:6c:36:cb:be:
54:28:e4:09:1f:b8:94:04:b2:88:31:c3:96:28:3c:62:78:d5:
f3:e0:f8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:12:56 2025 by rpki-client