Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/mId092quyOB83VO8NTOLuLTrwCU.roa
File: mId092quyOB83VO8NTOLuLTrwCU.roa (raw, json)
Hash identifier: 4ZYjaMOtkO7JVCo9djGezfRPkTYQYlB89pHbn+Vlkh4=
Subject key identifier: 98:87:74:F7:6A:AE:C8:E0:7C:DD:53:BC:35:33:8B:B8:B4:EB:C0:25
Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial: 019421B16EDA0E7BCFCD39B8692C518A2D4B
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/mId092quyOB83VO8NTOLuLTrwCU.roa
Signing time: Wed 01 Jan 2025 11:47:43 +0000
ROA not before: Wed 01 Jan 2025 11:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10429
IP address blocks: 192.109.147.0/24 maxlen: 24
2a07:8143::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:6e:da:0e:7b:cf:cd:39:b8:69:2c:51:8a:2d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Validity
Not Before: Jan 1 11:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=988774f76aaec8e07cdd53bc35338bb8b4ebc025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:20:7d:21:d4:f7:ea:35:03:d3:8f:2d:30:
00:8a:0a:89:65:75:bb:78:f2:7d:c0:5b:46:b4:98:
30:74:38:57:f5:63:8d:80:23:dd:f0:77:14:51:4b:
3f:1f:c2:25:e4:93:98:f3:66:7e:6f:47:21:9a:d6:
ad:dc:86:65:d7:cf:eb:1e:dc:a5:71:b7:a3:d3:71:
2a:cb:9d:60:b1:16:85:38:c3:08:19:a4:a6:1c:ad:
7e:b1:0b:c3:7f:d5:7c:62:73:eb:66:cd:11:83:97:
d9:6c:29:94:2e:83:d8:2b:b8:ee:34:ad:8b:04:ae:
7f:95:09:ec:5b:1e:48:f9:22:47:3d:83:b9:3c:ac:
c5:de:7b:27:05:aa:69:40:e1:6b:a5:7f:7e:5e:be:
17:3d:b0:dc:a5:2e:14:7a:3e:41:22:63:a8:f2:b4:
7c:09:30:e1:b6:00:9a:db:71:16:31:35:82:a7:f6:
1d:1f:39:21:eb:a7:1d:58:56:e0:06:89:3b:1d:04:
14:89:bc:1e:2d:19:67:bf:89:19:49:c9:1f:c1:02:
43:06:c1:c5:9c:2f:7c:b2:09:2f:c6:b3:b7:12:f0:
fd:1a:bd:1c:dd:73:c6:cc:04:a6:80:00:32:e3:6d:
ec:d8:af:e7:40:32:81:e3:54:46:be:96:23:e9:8d:
e4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:87:74:F7:6A:AE:C8:E0:7C:DD:53:BC:35:33:8B:B8:B4:EB:C0:25
X509v3 Authority Key Identifier:
keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/mId092quyOB83VO8NTOLuLTrwCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.147.0/24
IPv6:
2a07:8143::/36
Signature Algorithm: sha256WithRSAEncryption
51:6b:ba:88:09:77:cf:25:2b:a0:86:17:1e:77:80:3f:8e:06:
93:ee:cf:b5:20:58:9d:37:f5:eb:73:fc:22:09:42:d0:1e:3c:
c4:9c:0d:d2:b2:04:0d:5b:a8:68:f6:80:e3:6d:68:13:ec:4b:
8b:6b:62:71:03:07:f3:cc:2f:69:2b:db:cb:f6:02:8c:bd:82:
36:97:97:45:5c:33:08:5e:b2:92:71:6d:12:ab:93:38:30:e2:
ba:39:05:64:7d:68:f5:1d:a7:6d:1d:57:6a:d3:d0:ef:ed:cc:
38:7a:0d:f8:cf:0a:d6:b6:88:54:5f:49:16:75:c3:e6:3c:bc:
2e:c3:60:a3:d1:99:f4:a2:c2:78:9c:88:03:b1:2a:62:e2:f0:
9e:9b:89:4f:f9:15:52:b6:aa:01:a5:10:0c:b4:93:47:f3:46:
10:75:17:9e:86:91:bc:a7:33:b2:3f:8f:1f:fc:55:00:d2:58:
a0:5c:59:64:f9:f8:16:d3:ac:f5:01:70:84:96:19:60:4e:b3:
ba:bc:b9:23:76:73:e2:d6:57:0d:b4:df:d8:02:6a:91:25:ae:
6c:1b:f6:3f:cc:6e:d1:bd:2f:2b:e4:51:3c:91:7f:c5:4b:77:
32:e4:7b:a5:81:4b:e0:5c:ef:9c:cf:3e:f6:ca:ed:c8:85:b1:
b8:64:d3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:05:03 2025 by rpki-client