Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/1Lb19U5o3Efr0g-aib5PoZSt6go.roa
File: 1Lb19U5o3Efr0g-aib5PoZSt6go.roa (raw, json)
Hash identifier: Zr3brMPQHTZVZHpvpM8U6o3j2PDZ4Lwl5HPOHtjFKvY=
Subject key identifier: D4:B6:F5:F5:4E:68:DC:47:EB:D2:0F:9A:89:BE:4F:A1:94:AD:EA:0A
Certificate issuer: /CN=2cb288b872bb847455d71e1c0b313a63265ebfd4
Certificate serial: A00BEC
Authority key identifier: 2C:B2:88:B8:72:BB:84:74:55:D7:1E:1C:0B:31:3A:63:26:5E:BF:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLKIuHK7hHRV1x4cCzE6YyZev9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/1Lb19U5o3Efr0g-aib5PoZSt6go.roa
Signing time: Sat 01 Jan 2022 02:56:19 +0000
ROA not before: Sat 01 Jan 2022 02:56:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212850
IP address blocks: 109.107.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10488812 (0xa00bec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb288b872bb847455d71e1c0b313a63265ebfd4
Validity
Not Before: Jan 1 02:56:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4b6f5f54e68dc47ebd20f9a89be4fa194adea0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:53:8a:f3:8c:98:d7:52:3d:64:f7:99:73:
74:99:73:a3:95:52:aa:f4:95:42:9e:91:63:5c:8c:
6c:d7:82:45:64:7c:0d:f2:22:22:0b:f4:5d:3a:81:
9b:02:5a:5d:37:6e:83:59:2f:f9:8d:60:f5:b2:b7:
45:e0:a5:fc:c3:fd:6a:99:84:6a:18:28:e1:a7:7e:
ff:6d:5b:06:b9:a3:c7:71:ab:a6:c1:f8:88:0f:b4:
30:47:96:5a:3a:9e:9b:de:6f:5c:be:3c:b1:2e:55:
f4:71:7c:1b:30:0c:18:ef:37:c7:f2:e2:fe:d7:c2:
9d:8f:d8:32:52:e9:45:f4:e2:aa:03:29:24:0c:35:
c7:c8:9c:4a:cf:35:74:85:3d:1c:7b:ef:50:b0:eb:
7c:18:b0:9c:a2:51:c1:72:50:6f:60:7f:7d:17:7d:
89:2d:c6:8a:3a:b3:8f:6a:4a:d4:7b:b8:ec:e5:23:
ae:56:1d:90:7e:b6:08:62:ed:de:36:d0:1e:e9:b5:
1d:e3:4e:c4:b5:dc:3d:23:1e:81:b0:e5:29:fd:de:
a0:68:5a:82:a2:0f:04:59:55:1f:4a:7c:2f:48:12:
0c:07:0a:c3:8a:c7:8b:4d:fa:28:fe:77:37:36:3e:
5c:5e:6b:5d:89:68:f3:c5:b7:e4:35:aa:d7:87:10:
e6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B6:F5:F5:4E:68:DC:47:EB:D2:0F:9A:89:BE:4F:A1:94:AD:EA:0A
X509v3 Authority Key Identifier:
keyid:2C:B2:88:B8:72:BB:84:74:55:D7:1E:1C:0B:31:3A:63:26:5E:BF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLKIuHK7hHRV1x4cCzE6YyZev9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/1Lb19U5o3Efr0g-aib5PoZSt6go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/LLKIuHK7hHRV1x4cCzE6YyZev9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.155.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d8:cc:19:0b:7e:07:69:7c:23:9a:4b:b6:1e:66:47:29:85:
1d:65:09:42:8b:1c:5b:08:99:96:f5:43:b5:c7:48:b4:d6:94:
45:3d:11:74:9a:a0:5e:fe:41:ea:e8:d2:a6:ed:3c:99:bd:60:
f9:31:b7:46:ca:5a:7c:47:36:c4:51:48:22:91:f8:4f:f8:ec:
6d:58:15:eb:4e:87:34:5a:ef:b9:c4:69:02:ac:59:de:b8:c0:
71:28:36:07:89:3c:0b:3a:fa:b9:79:f0:da:d6:7a:21:98:58:
fe:27:eb:a1:bf:ba:ef:b2:80:e9:79:39:4d:fb:e1:15:97:e2:
38:f7:fb:94:fd:a3:45:96:1a:31:0a:0d:6b:b8:de:62:31:41:
1e:53:d6:cb:39:30:bd:3a:0b:f9:ad:2f:b0:1d:27:a4:64:40:
bd:d0:d1:58:7c:bd:ce:2a:a6:66:f8:cc:9b:62:4a:94:b3:11:
06:ef:22:be:02:ab:b9:9e:d0:e7:c8:a5:1b:de:11:e2:d1:5d:
50:3d:fd:8b:0b:35:94:25:d5:28:31:04:f8:e0:f2:6e:ca:f8:
ef:fd:5d:63:7a:17:11:0b:01:44:b6:ca:33:b4:14:01:aa:96:
c6:75:70:b2:8e:cf:bc:37:96:e3:28:7e:0b:b1:79:ed:70:16:
b0:97:4a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:31 2025 by rpki-client