Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2ab0d0-8e44-4294-9030-145867e63c36/1/ioBU6fSZU-rK3sn-B7uPaN54H4I.roa
File: ioBU6fSZU-rK3sn-B7uPaN54H4I.roa (raw, json)
Hash identifier: 6qaRZoi9H7BSJSyB9kUQLc+ZhYL+yfyRwLhGOn+U1c8=
Subject key identifier: 8A:80:54:E9:F4:99:53:EA:CA:DE:C9:FE:07:BB:8F:68:DE:78:1F:82
Certificate issuer: /CN=2cb8016dbda57876e3c9c95f752e7566b25a184f
Certificate serial: 6CEE93
Authority key identifier: 2C:B8:01:6D:BD:A5:78:76:E3:C9:C9:5F:75:2E:75:66:B2:5A:18:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLgBbb2leHbjyclfdS51ZrJaGE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/2ab0d0-8e44-4294-9030-145867e63c36/1/ioBU6fSZU-rK3sn-B7uPaN54H4I.roa
Signing time: Sat 01 Jan 2022 00:57:16 +0000
ROA not before: Sat 01 Jan 2022 00:57:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51088
IP address blocks: 109.107.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7138963 (0x6cee93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb8016dbda57876e3c9c95f752e7566b25a184f
Validity
Not Before: Jan 1 00:57:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a8054e9f49953eacadec9fe07bb8f68de781f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:82:a7:e3:41:3d:72:d3:5a:0e:f1:2f:0c:
f8:03:ed:d2:3f:0b:59:ce:fb:b5:cb:4d:8b:e5:7a:
44:4b:f4:c6:07:56:37:ef:a3:d5:ce:c7:77:64:aa:
4d:71:5b:fc:6c:59:28:ad:e0:b1:73:a4:1d:b9:2d:
39:29:f6:51:2a:23:b0:18:45:15:db:c0:6c:72:b6:
a4:3e:28:dd:59:ff:ea:f0:a7:30:28:e4:f7:2e:70:
e2:ee:d7:b1:c0:51:09:09:ae:cb:f6:90:a1:35:ef:
46:3a:06:72:32:e8:58:dc:9e:9b:20:ec:24:6d:3d:
0c:0e:6a:97:52:a5:33:eb:4c:fb:f7:bf:c2:4b:57:
8d:15:0f:e2:dc:e5:e7:cd:ef:d9:80:51:fa:c5:00:
c6:94:2f:59:ae:4a:f5:d9:67:44:3d:b8:a8:d2:e3:
f8:76:e4:7e:81:bc:e9:30:7a:c1:71:b6:d6:9f:03:
30:c8:a2:32:3f:9e:2a:f4:b0:dd:3a:67:d8:80:c9:
db:19:13:78:aa:20:8d:3e:9a:59:1f:ac:b3:bc:8f:
f6:46:45:ab:8a:bf:35:5f:3a:cd:66:03:ef:3d:2d:
38:21:83:65:8b:8c:25:2a:52:75:43:84:47:17:32:
03:3a:f6:78:6a:17:8c:2e:f3:08:f5:61:27:3c:79:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:80:54:E9:F4:99:53:EA:CA:DE:C9:FE:07:BB:8F:68:DE:78:1F:82
X509v3 Authority Key Identifier:
keyid:2C:B8:01:6D:BD:A5:78:76:E3:C9:C9:5F:75:2E:75:66:B2:5A:18:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLgBbb2leHbjyclfdS51ZrJaGE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2ab0d0-8e44-4294-9030-145867e63c36/1/ioBU6fSZU-rK3sn-B7uPaN54H4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2ab0d0-8e44-4294-9030-145867e63c36/1/LLgBbb2leHbjyclfdS51ZrJaGE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.153.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:2a:6a:78:3b:a2:e2:73:48:78:8f:85:07:61:0d:79:79:ed:
c1:82:13:a1:23:a1:9e:34:3c:b7:82:e5:44:01:8c:c8:18:ff:
01:fe:7a:38:43:7c:e9:95:5e:e1:44:2b:0d:b4:01:ce:3e:54:
04:2f:55:c7:ba:01:95:b0:08:77:1d:67:08:60:b4:a6:52:ae:
bb:e4:c8:12:05:f2:61:ab:7b:3c:69:73:54:dc:8c:21:12:a5:
f6:91:6f:79:1c:77:0f:e0:ae:78:0b:43:f1:9c:57:a2:dc:2b:
0d:55:f4:32:bb:37:4c:77:7e:ac:20:b3:13:49:64:03:e6:ff:
f5:d8:1e:a5:f8:d3:24:07:f9:a9:06:6e:ad:7d:fa:55:56:22:
b5:c1:45:cc:f0:bd:56:98:1f:bf:f7:ff:b2:e9:20:4f:1b:3a:
6a:51:ba:1e:88:29:4a:51:67:78:6a:2c:90:39:bc:57:d2:55:
21:32:79:a0:35:45:45:90:17:d3:03:18:d4:c8:82:25:b9:4f:
75:05:06:0d:a7:0b:3d:06:c2:38:5b:5c:8d:0d:dd:06:19:e4:
92:30:9e:0b:b7:9e:8d:bb:1f:f1:bc:ac:12:f7:9e:9e:3a:46:
ac:75:f9:9a:5d:d4:dc:a3:29:9a:fe:25:06:e2:36:71:83:16:
b9:b8:7b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:07:03 2025 by rpki-client