Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/nGyqSCLbYB2LlqkMPhnDoGkKZ78.roa
File: nGyqSCLbYB2LlqkMPhnDoGkKZ78.roa (raw, json)
Hash identifier: 8Zlhrs/YyWQgjK24M6Q59ocQTGRBq4JHpQsNZok5X1I=
Subject key identifier: 9C:6C:AA:48:22:DB:60:1D:8B:96:A9:0C:3E:19:C3:A0:69:0A:67:BF
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747CE7AADA4E60568A88719B9343B20
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/nGyqSCLbYB2LlqkMPhnDoGkKZ78.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200734
IP address blocks: 109.248.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ce:7a:ad:a4:e6:05:68:a8:87:19:b9:34:3b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c6caa4822db601d8b96a90c3e19c3a0690a67bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:78:7c:5f:e2:76:3c:24:c1:09:54:0e:17:33:
b4:fb:52:59:a6:6d:49:2c:46:e2:97:5e:b0:79:60:
93:1a:cf:cc:04:71:92:f4:48:c5:0c:92:3e:af:bb:
a4:94:26:51:20:ff:d9:ca:52:ab:7f:bc:8b:00:d8:
09:c4:f2:38:40:bb:71:e0:a2:bd:81:d2:dc:d3:73:
bf:1d:d0:12:9a:13:89:75:86:ec:83:e8:00:e8:d3:
6a:05:59:a2:de:10:82:34:57:1d:f6:d6:ea:c5:c7:
e7:f7:04:de:8a:65:de:aa:81:7e:62:42:da:47:2b:
93:9d:8c:c4:4a:1b:1d:71:e9:b6:d9:8c:f0:77:fe:
db:81:c8:f9:7f:54:24:80:9b:9a:20:7c:a2:57:b0:
f5:d0:d8:05:5b:a8:46:6b:83:99:8b:df:30:b8:0c:
a4:bc:bc:e1:c6:ce:87:95:ce:87:ad:d6:76:f0:39:
96:fb:31:c4:81:48:92:12:e0:a8:78:39:b9:f7:c7:
71:82:af:e4:66:71:19:fb:b9:de:82:02:e7:17:bf:
2a:82:5f:c6:d6:ef:a8:85:20:e6:54:bf:b3:e6:59:
01:f2:b3:0e:c9:d5:76:fa:f2:22:55:18:00:7c:d8:
9e:43:5f:d7:3b:30:6e:ae:6b:61:fe:c4:e0:69:35:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6C:AA:48:22:DB:60:1D:8B:96:A9:0C:3E:19:C3:A0:69:0A:67:BF
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/nGyqSCLbYB2LlqkMPhnDoGkKZ78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.246.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:81:c9:02:83:48:f7:6e:8a:10:7f:6e:48:cc:60:8b:2b:27:
fb:3d:eb:8a:00:bb:ae:cc:5c:9e:7d:e3:15:9b:a3:69:c4:74:
49:52:10:0d:31:5a:a9:78:01:b8:10:57:9a:44:71:10:68:c4:
70:a8:cb:dc:78:a9:f2:58:a8:f8:d9:8a:15:34:3a:dc:bb:47:
5d:53:18:f9:f6:93:cc:a9:b8:6c:05:c4:73:1b:0e:ce:5f:7c:
1e:b6:22:06:22:4f:b0:e3:8b:2a:90:ee:41:2e:05:a0:42:cb:
79:56:23:c9:0d:2e:3e:e1:e9:b3:c2:3f:ce:9e:bc:dc:e4:0c:
cf:48:c5:f8:35:d5:03:b6:81:e8:96:c2:f2:ed:02:39:97:92:
71:8e:a7:cf:94:d8:cf:93:0b:af:70:bd:60:b2:b2:4b:95:d5:
17:26:ba:d5:e5:b9:0d:2c:12:ed:83:e9:11:47:7f:8a:ee:37:
ea:8b:4b:ae:4d:f9:a4:f6:d6:a8:76:cb:ca:fa:a2:86:8f:48:
c5:a5:cd:28:55:84:79:e6:53:8f:41:89:e8:1d:64:e4:9e:a5:
be:21:e1:62:58:f7:11:a4:0b:50:70:1e:cb:63:eb:cc:f6:d4:
2c:49:f0:02:5e:86:c4:8d:4b:07:3c:01:84:11:91:59:37:a3:
30:bc:c5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:09:39 2025 by rpki-client