Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/Ak9XK5YFlXI4AoNUomQD5SJWMTQ.roa
File: Ak9XK5YFlXI4AoNUomQD5SJWMTQ.roa (raw, json)
Hash identifier: 8frbczP/WVHp6KYWn7u+vpW6oUS+dkfZt+1mfqWJkiA=
Subject key identifier: 02:4F:57:2B:96:05:95:72:38:02:83:54:A2:64:03:E5:22:56:31:34
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 0194221FE82B8EE019F09EB35583F1980877
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/Ak9XK5YFlXI4AoNUomQD5SJWMTQ.roa
Signing time: Wed 01 Jan 2025 13:48:23 +0000
ROA not before: Wed 01 Jan 2025 13:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216346
IP address blocks: 109.230.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e8:2b:8e:e0:19:f0:9e:b3:55:83:f1:98:08:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Jan 1 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=024f572b9605957238028354a26403e522563134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:77:96:c8:e5:1b:86:16:45:e2:54:ca:02:
28:5e:c5:de:be:c8:df:66:99:54:d3:fa:2c:a2:f6:
a2:ea:04:30:0b:01:7a:02:f1:75:db:2f:9d:55:f3:
b5:11:53:2d:b2:3e:3b:c9:be:8f:75:4e:5d:3f:92:
de:40:38:f4:bb:ce:29:0b:91:83:22:18:68:1b:e4:
dd:03:32:b1:be:24:e9:62:b8:60:56:17:08:f3:f8:
75:b7:a8:15:de:d1:c5:b7:d5:10:b1:1b:b7:56:57:
7b:25:09:64:37:ec:aa:20:15:f4:4e:99:ff:f9:ac:
0d:f0:75:78:f7:6f:da:bd:3a:6d:ac:24:16:e8:74:
9c:54:bc:19:7b:59:13:1f:1e:07:77:ae:a2:bd:af:
3d:56:f7:82:2f:56:b2:ae:3f:e7:bc:db:f7:40:25:
82:33:a2:9b:52:3d:a1:ef:10:38:f1:db:64:c5:cc:
58:24:1a:31:80:63:c8:2d:b4:3f:06:eb:7f:e6:1d:
dd:e3:36:ef:3a:b9:20:c0:78:b1:7b:e2:b6:a7:83:
ef:08:b6:34:b2:85:2a:85:f3:5f:f2:0b:cd:85:c4:
05:ff:b4:87:f9:1b:9e:4c:4c:15:71:d6:1a:b9:ab:
4d:99:20:dd:25:ca:ab:c7:cf:10:20:e8:78:62:30:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4F:57:2B:96:05:95:72:38:02:83:54:A2:64:03:E5:22:56:31:34
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/Ak9XK5YFlXI4AoNUomQD5SJWMTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.230.113.0/24
Signature Algorithm: sha256WithRSAEncryption
72:7e:95:9c:f6:2d:63:2a:1b:2f:81:36:72:1b:25:69:50:f3:
a8:83:49:30:5c:6a:72:30:46:99:7a:58:03:5f:a1:90:a9:18:
56:7a:a1:3a:91:37:f3:4e:a8:08:6a:b2:33:07:b6:99:3c:05:
70:c9:fe:af:ac:96:84:34:f0:83:65:58:63:78:e0:cc:c1:64:
ba:4f:96:38:d0:1e:1d:b4:6b:88:7a:41:b2:26:8a:9e:3b:43:
13:1b:a6:09:e2:c7:af:5a:5f:64:be:ee:1c:a5:40:70:37:7e:
61:70:0a:03:68:25:7b:b1:9d:5d:fa:f0:73:dc:a5:9c:7a:4d:
d5:a3:d4:e5:20:8f:9d:44:af:43:d4:22:41:a0:02:e9:c1:08:
d2:07:f9:d4:db:9f:55:ed:a8:2e:16:f6:9d:42:b6:56:3e:78:
65:00:a2:35:33:09:d6:70:27:21:f5:79:d0:d3:2a:0d:62:2b:
40:16:84:c5:54:14:b5:71:40:c5:ef:25:78:28:96:48:f0:c0:
d6:62:50:fe:6f:1e:d9:66:a7:be:64:8e:a9:ad:f1:bb:50:e9:
e8:ba:ce:f7:7a:90:54:b2:e0:72:d2:f9:96:37:a2:c3:14:d2:
a9:f2:d1:ad:ae:e2:af:35:13:17:e6:27:c9:84:a7:5a:dc:44:
f2:1b:b4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:35:17 2025 by rpki-client