Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/nGeEqYunO99qewbF4K2mWpbf9-M.roa
File: nGeEqYunO99qewbF4K2mWpbf9-M.roa (raw, json)
Hash identifier: 3/iXzQaV5YT2Hzv/LLgXQpBfWpHW2jRliL+i2Jc83DM=
Subject key identifier: 9C:67:84:A9:8B:A7:3B:DF:6A:7B:06:C5:E0:AD:A6:5A:96:DF:F7:E3
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747C81B16A4618ABA9A8A0A42C06309
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/nGeEqYunO99qewbF4K2mWpbf9-M.roa
Signing time: Thu 02 Jan 2025 13:50:03 +0000
ROA not before: Thu 02 Jan 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56631
IP address blocks: 109.248.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c8:1b:16:a4:61:8a:ba:9a:8a:0a:42:c0:63:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c6784a98ba73bdf6a7b06c5e0ada65a96dff7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:2d:32:bb:42:13:0b:3d:6a:3a:75:cc:07:
07:1e:8d:3e:05:ca:62:fc:01:94:72:ee:40:26:6e:
72:e7:34:65:c3:5b:8d:06:f9:0c:b7:af:8c:8f:a8:
b9:a2:7e:ee:5c:40:43:40:3a:12:b5:0a:fe:9b:88:
bc:d2:12:31:b2:8a:0b:bb:41:92:f5:92:9d:d7:ea:
e5:11:08:82:f9:f1:5b:30:9c:dd:8c:a9:a5:a8:ad:
83:a4:56:55:ee:42:c4:85:d6:dc:2e:f1:85:e9:0f:
5d:9b:b5:ba:81:01:d7:32:17:fb:97:99:6a:0c:da:
7c:f2:97:9c:1a:87:4c:7f:ad:8f:be:8b:bb:af:39:
07:ac:af:f4:da:77:a9:04:cb:19:79:78:01:2f:90:
d5:94:31:7f:b7:bb:48:56:8e:a8:3d:34:9d:76:19:
2b:5c:f8:fc:71:c3:2a:67:1b:04:5b:00:95:b1:b4:
2d:2f:76:9d:d6:c3:3c:c8:17:de:2b:5f:1c:44:80:
b5:95:19:1a:6e:87:71:0d:db:12:8b:3c:1e:aa:66:
f7:2c:55:aa:5c:7e:6f:54:a1:06:3e:cf:15:8d:c3:
a0:b3:02:37:68:3a:c0:c0:a8:80:6f:74:1d:11:d5:
0a:96:1d:02:39:2a:03:f8:28:1c:7d:a4:c5:2b:50:
f0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:67:84:A9:8B:A7:3B:DF:6A:7B:06:C5:E0:AD:A6:5A:96:DF:F7:E3
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/nGeEqYunO99qewbF4K2mWpbf9-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.197.0/24
Signature Algorithm: sha256WithRSAEncryption
07:32:08:1d:a8:71:9f:98:da:ef:d8:0b:05:ed:75:f6:d2:bd:
f5:d1:8c:3b:d5:63:85:07:40:3f:41:7d:8f:3a:4e:62:00:b7:
4c:10:7a:93:58:85:61:01:17:1c:a8:dc:35:b9:83:71:ce:1d:
80:4e:f1:2a:a0:16:28:77:04:22:9e:de:cc:2b:8a:0d:b6:8c:
6e:05:24:77:13:c9:6b:c4:48:6f:3b:8b:65:6a:33:b8:74:64:
87:67:5a:36:74:6a:06:a4:70:e5:c1:c9:bc:81:dd:0b:33:44:
fe:99:1e:f6:ff:87:47:a8:48:29:53:e6:36:df:4c:26:da:10:
85:c8:0e:ad:aa:c2:65:6e:bb:ea:41:0b:14:2a:6a:12:a3:86:
7c:5e:be:ef:21:cb:e6:9b:8a:cd:da:7b:8f:c8:34:00:74:00:
0e:1c:15:6e:df:cd:c6:49:c6:33:27:85:28:ce:fc:c4:2f:e1:
7e:d2:fd:17:79:9f:64:45:10:f7:72:58:4f:5d:21:8f:b8:95:
8d:58:06:d2:90:5f:4f:f9:06:b5:29:e5:c2:5f:4c:27:df:50:
7e:a8:ef:f2:81:ba:4a:58:0c:65:5b:66:4b:cf:07:1c:f1:24:
26:6f:f0:76:ee:11:e1:5e:4a:0b:ee:26:0a:42:ab:45:76:62:
3d:67:6d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:15:47 2025 by rpki-client