Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/jFc_wlQoiHbPyXbisyroWRENeu0.roa
File: jFc_wlQoiHbPyXbisyroWRENeu0.roa (raw, json)
Hash identifier: ITqThjHQNWEDIzaupfeF4coOz5rZPmtce8EoNUCuRBY=
Subject key identifier: 8C:57:3F:C2:54:28:88:76:CF:C9:76:E2:B3:2A:E8:59:11:0D:7A:ED
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 019483D9579FC55D79CE5C5D5D6CD210DB47
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/jFc_wlQoiHbPyXbisyroWRENeu0.roa
Signing time: Mon 20 Jan 2025 13:14:06 +0000
ROA not before: Mon 20 Jan 2025 13:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62371
IP address blocks: 109.224.244.0/24 maxlen: 24
109.224.245.0/24 maxlen: 24
109.224.246.0/24 maxlen: 24
109.224.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:d9:57:9f:c5:5d:79:ce:5c:5d:5d:6c:d2:10:db:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Jan 20 13:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c573fc254288876cfc976e2b32ae859110d7aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:26:23:40:68:f0:cc:1d:e8:31:f4:1f:04:
24:70:82:1c:b3:d3:99:b0:d3:ac:fc:c9:29:4f:0a:
15:94:b2:94:eb:f6:7d:ab:85:e5:0f:4d:a3:eb:01:
42:6b:ef:d6:d9:06:64:38:11:5a:c5:73:53:8d:ef:
8d:0e:21:04:11:ba:30:1f:a4:5b:56:c9:c7:24:1b:
36:d2:76:44:69:16:e0:38:df:de:5e:67:7e:34:af:
a3:61:5e:43:d5:0e:d4:b8:43:9a:51:f4:6e:a5:f6:
23:5f:54:e1:30:58:92:ae:55:d2:20:01:02:72:46:
9c:53:7c:52:04:42:76:b4:05:e7:90:7f:6d:ee:7a:
4a:c9:dc:2e:ca:45:5c:c7:89:9c:11:3b:51:3f:3a:
fe:13:f3:9b:83:6e:f6:42:98:3d:e3:fa:c2:4d:69:
cc:8d:a8:61:07:80:00:54:57:45:66:05:70:82:2c:
67:6c:1b:c2:de:a0:9b:4d:78:80:d5:36:ee:20:ab:
d8:a1:98:31:7c:5a:ab:02:af:27:05:5b:87:17:2b:
ef:fe:d6:92:3f:e3:28:96:57:0d:8e:9b:ad:e2:a3:
30:f5:9e:42:ee:32:c5:5a:56:4a:1b:a1:52:b3:18:
19:74:a8:ec:9f:3e:b8:86:66:a7:62:40:65:be:67:
43:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:57:3F:C2:54:28:88:76:CF:C9:76:E2:B3:2A:E8:59:11:0D:7A:ED
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/jFc_wlQoiHbPyXbisyroWRENeu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.244.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:6b:75:dc:67:08:e8:64:c9:8f:a5:2b:a3:75:91:ac:93:f3:
a5:51:21:d3:99:1b:39:6c:b6:6f:84:e2:61:38:dd:85:c2:15:
d6:8c:39:34:c5:9a:c5:ab:8d:55:fa:d5:9e:c9:6a:34:b8:c6:
e8:5e:d4:25:35:e7:57:29:64:03:64:a3:88:85:68:8e:ad:f1:
02:5d:d3:93:23:0b:3f:62:1c:e3:95:9f:6c:ee:46:3b:5a:2e:
51:f6:8c:0a:4c:ed:e0:25:d4:4d:7e:89:fa:00:24:0c:bc:2c:
e7:94:35:5f:fc:4a:c3:7f:cf:e7:cc:40:a6:86:06:88:be:34:
d8:7f:ea:5a:cb:ee:3c:38:b1:79:08:e0:b6:98:0e:26:50:7c:
48:67:aa:4a:7a:3e:3f:e8:16:8c:77:cb:57:ac:62:09:0c:ec:
1e:28:e2:9a:04:dc:e0:b4:b7:7b:72:d0:49:55:db:eb:c4:d5:
49:0c:aa:8f:ae:83:9f:a0:45:d6:70:3d:76:d4:55:de:63:c0:
a3:4e:75:1a:81:f2:16:b0:31:31:2f:c8:96:43:08:e2:97:f0:
4b:08:3e:86:f5:18:76:71:7e:e3:46:84:7f:4d:66:f4:7a:31:
5c:6e:20:74:49:98:2b:56:99:e6:63:fc:43:cb:b3:08:40:4e:
e4:36:ee:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:26 2025 by rpki-client