Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/IWKUOQQSJDQNxplH89k0Bn0vBSQ.roa
File: IWKUOQQSJDQNxplH89k0Bn0vBSQ.roa (raw, json)
Hash identifier: 9PFOGglD2UsADwblZZQjaXo0dQPKGdvzs7gfPETHDZ4=
Subject key identifier: 21:62:94:39:04:12:24:34:0D:C6:99:47:F3:D9:34:06:7D:2F:05:24
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369B09CCB8BB4E614738A5FCB1D0A34
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/IWKUOQQSJDQNxplH89k0Bn0vBSQ.roa
Signing time: Wed 01 Jan 2025 19:48:36 +0000
ROA not before: Wed 01 Jan 2025 19:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61115
IP address blocks: 86.107.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:b0:9c:cb:8b:b4:e6:14:73:8a:5f:cb:1d:0a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21629439041224340dc69947f3d934067d2f0524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:99:7e:6c:a4:c1:ac:38:80:ad:97:fc:4c:
c8:b8:10:ec:7e:19:c5:b9:77:32:90:74:85:14:0d:
00:be:f7:cd:a6:d4:a7:6b:f5:ea:b2:45:15:af:58:
b8:bb:bd:71:8d:93:52:4b:33:1e:f4:a7:49:f5:d3:
68:8c:71:0e:94:ef:d4:23:6a:77:99:8b:bd:64:80:
2e:6f:c3:ed:c3:99:68:6a:1c:8d:52:9c:8e:a4:24:
94:f1:c8:3c:1d:90:4d:28:35:48:2b:c2:57:19:d2:
3e:db:ae:d2:5c:f3:d8:a5:2e:30:0f:bd:1a:a8:0e:
99:63:07:6b:34:6b:63:19:20:0c:af:33:bf:1c:60:
d2:89:b2:52:bd:c5:54:26:00:9e:70:53:de:b3:b6:
e0:48:05:55:2a:a2:20:30:fa:f2:52:03:07:24:5b:
04:46:da:74:40:5c:05:df:6e:42:6f:78:8a:0d:50:
5d:57:47:18:76:18:dd:7c:6e:71:ea:82:49:5a:a1:
8c:6c:35:07:b1:71:6e:b9:26:38:c6:57:33:0b:b9:
9a:96:96:80:0d:ad:0c:95:de:6f:91:af:4e:61:9c:
79:9a:9b:51:50:4b:ce:77:62:53:55:5b:da:ed:ab:
b6:95:f4:33:45:22:46:14:35:a4:75:10:88:74:7a:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:62:94:39:04:12:24:34:0D:C6:99:47:F3:D9:34:06:7D:2F:05:24
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/IWKUOQQSJDQNxplH89k0Bn0vBSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.106.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:cd:a9:fb:c1:cd:11:ac:a2:6c:65:f0:bb:9c:97:9f:ab:38:
8f:e5:ef:29:89:93:df:11:3e:88:05:2b:15:46:f9:6f:a0:69:
09:e8:14:5a:ed:44:42:c0:9b:d9:30:6c:ca:14:0a:03:bc:71:
13:e2:b0:30:6b:2d:0e:7a:f9:3d:78:97:07:4f:66:84:11:da:
75:aa:2b:ae:c0:2e:f8:54:f9:67:df:00:28:d0:f1:81:f6:62:
ff:3d:90:48:45:c4:f8:f2:a0:bb:52:25:d4:99:75:61:dc:67:
87:27:11:81:61:34:ef:db:71:00:35:e2:c9:f7:3c:f3:da:75:
45:53:b8:1e:5c:a4:88:f9:da:9f:8c:95:3e:82:8d:12:37:c1:
ed:a6:2a:8e:0a:16:d6:97:b6:9d:6a:55:ca:68:4a:b4:87:11:
e4:ce:a1:39:e7:75:1f:8b:7a:2c:1a:11:0f:d5:2b:fc:31:28:
c0:e1:25:18:d1:12:b3:1f:8a:81:65:89:b2:1a:fb:37:14:74:
18:8f:70:30:d9:73:b4:59:25:7e:28:99:c4:d9:a9:63:11:3b:
b2:37:e4:e2:26:8a:83:9d:93:94:5a:22:fa:61:81:04:5b:80:
49:57:a0:b0:96:52:ca:b6:71:00:da:1a:7c:ae:cd:e6:12:d4:
88:ae:5c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:15 2025 by rpki-client