Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/aJzExeYHcOdXBJ-A1U_Lb5QA2iQ.roa
File: aJzExeYHcOdXBJ-A1U_Lb5QA2iQ.roa (raw, json)
Hash identifier: lm4SCbYvrM6DmEv/vIkSgh/7EvC2SFH3q0jD8aVS3bU=
Subject key identifier: 68:9C:C4:C5:E6:07:70:E7:57:04:9F:80:D5:4F:CB:6F:94:00:DA:24
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 02A3C3BC
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/aJzExeYHcOdXBJ-A1U_Lb5QA2iQ.roa
Signing time: Sat 01 Jan 2022 02:53:18 +0000
ROA not before: Sat 01 Jan 2022 02:53:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 192.109.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44286908 (0x2a3c3bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jan 1 02:53:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=689cc4c5e60770e757049f80d54fcb6f9400da24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:74:f4:01:1e:43:55:29:29:36:6b:4d:d7:02:
d7:ac:8c:ef:e0:c4:a4:c8:7c:ee:4f:48:6a:84:ad:
7c:44:a6:77:f6:d3:ca:72:86:84:f2:f4:62:7c:d6:
4a:0a:32:0e:0d:c9:7f:44:2f:ec:34:88:0b:fc:0e:
8c:d3:f9:40:03:8f:16:b1:d5:e6:8a:c0:35:fc:e2:
81:02:07:df:b8:4b:ad:38:3d:ac:c8:7a:7a:fe:e2:
83:3a:6e:2e:23:71:d9:f6:0d:8c:6e:5c:17:8b:be:
ff:ff:de:63:3a:4c:4d:46:62:3d:5e:b5:94:4d:12:
a0:3c:40:3b:37:af:50:d2:d5:d7:61:92:37:cf:6c:
b0:34:40:50:dd:ea:8e:ce:f6:c7:94:34:d1:e3:56:
46:89:9f:09:8a:ac:4e:07:81:49:4b:f7:82:0f:51:
19:fd:46:89:ce:8f:6b:12:80:d9:78:1a:ed:a4:80:
ef:ce:29:60:1d:6d:84:2f:f8:9a:7f:62:52:91:83:
bc:e8:a8:19:70:d1:aa:6d:ad:43:58:75:29:2a:9e:
70:d0:22:62:d0:c2:e0:8a:cf:0f:c5:09:5b:6b:0b:
87:2f:a5:12:1f:db:d7:23:31:08:87:ae:a7:e7:a5:
9b:f5:67:10:48:ac:e5:f1:36:2b:a2:f6:fe:87:35:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9C:C4:C5:E6:07:70:E7:57:04:9F:80:D5:4F:CB:6F:94:00:DA:24
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/aJzExeYHcOdXBJ-A1U_Lb5QA2iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.205.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:c1:0f:ad:de:e8:ab:9b:f1:74:ec:35:f6:60:e5:0c:72:57:
59:c0:02:a7:8c:5e:22:9f:c3:35:ae:1a:cb:0a:88:05:26:fd:
72:34:54:de:4e:72:76:6b:e6:4f:aa:f9:2d:a1:a5:4c:15:8f:
26:fe:42:cc:59:ff:eb:e2:1f:67:61:98:43:9a:a3:e7:5a:19:
bf:db:d8:10:50:dd:10:61:f9:13:7f:55:87:09:1e:fb:8a:a9:
a1:52:64:3d:d5:61:8b:f5:76:93:fc:82:0f:ba:bb:ea:ff:6c:
70:6c:f5:a5:1f:96:f0:be:e1:55:17:83:69:00:e4:e2:5a:3b:
01:d3:d4:60:fc:6f:5a:45:4c:85:26:0a:34:60:df:64:e1:91:
3b:90:d3:14:f1:2f:dd:a0:f2:62:b5:0e:11:f6:1a:c5:59:91:
8f:ac:a9:3a:4f:31:14:02:02:f0:54:43:18:09:f8:a7:60:07:
2c:c8:a6:1b:83:24:ab:e4:9e:46:c1:bb:d1:da:8b:1d:ed:23:
09:4a:f0:6c:fe:63:24:c8:87:2a:db:34:02:9f:7c:31:2f:88:
fa:3a:3f:81:29:8b:e3:2a:8a:98:bb:ab:89:c3:22:73:ba:de:
9e:f9:a1:e3:df:1a:7c:be:1e:4c:bc:27:d7:52:cb:a0:f8:18:
28:0c:97:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:57:48 2025 by rpki-client