Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/P7qRiEHTLc1Y7wPftPP1Jvp-2tI.roa
File: P7qRiEHTLc1Y7wPftPP1Jvp-2tI.roa (raw, json)
Hash identifier: wG8cQDm4q1TGO8kpq4QL98nM2lPgKDDodai0pYSEG5I=
Subject key identifier: 3F:BA:91:88:41:D3:2D:CD:58:EF:03:DF:B4:F3:F5:26:FA:7E:DA:D2
Certificate issuer: /CN=aecdd8bee24b342b039d610ce3c0c0c4719a3bf9
Certificate serial: 01856C0A290716D16C029510B98017D4F426
Authority key identifier: AE:CD:D8:BE:E2:4B:34:2B:03:9D:61:0C:E3:C0:C0:C4:71:9A:3B:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs3YvuJLNCsDnWEM48DAxHGaO_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/P7qRiEHTLc1Y7wPftPP1Jvp-2tI.roa
Signing time: Sun 01 Jan 2023 06:34:43 +0000
ROA not before: Sun 01 Jan 2023 06:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 109.107.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:29:07:16:d1:6c:02:95:10:b9:80:17:d4:f4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecdd8bee24b342b039d610ce3c0c0c4719a3bf9
Validity
Not Before: Jan 1 06:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fba918841d32dcd58ef03dfb4f3f526fa7edad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:2c:53:34:72:55:64:41:ab:d1:01:40:0b:
44:3e:bf:45:e6:b5:40:69:85:57:ee:b2:be:c9:66:
9d:19:72:8c:47:e6:f6:a4:9a:a4:ea:ad:ba:b9:79:
72:f3:a2:32:a6:19:3c:19:48:5e:58:09:d0:d3:e5:
d1:c6:39:b7:78:e6:30:65:4e:4c:1f:21:04:29:88:
0b:68:b4:bb:06:9a:9d:57:9a:36:f1:d3:e8:17:99:
b6:5d:fa:95:76:d3:3b:52:aa:99:13:5a:38:5a:9a:
6e:85:72:b3:7f:7f:ce:0e:60:ff:a3:56:be:cf:42:
35:c5:7e:06:c3:e4:50:62:47:92:28:a5:9d:99:62:
c9:21:55:1d:7e:d1:72:b6:e7:7a:cd:d5:15:51:2d:
df:36:fe:d2:1d:2e:9d:f3:43:2f:6e:84:92:7b:df:
9f:49:5a:82:ae:70:23:dd:00:25:ab:45:ff:b0:05:
ba:e2:88:9b:da:f2:8b:80:6b:c4:ef:7c:02:b5:32:
07:12:ac:09:4e:53:60:67:66:54:2b:46:c8:c9:3a:
12:bf:4a:cd:ae:b4:d0:ed:d2:0b:83:2c:b8:b4:73:
14:76:39:b8:3c:bd:b3:41:10:fa:ec:b5:47:21:af:
6f:6e:27:a4:92:f8:12:66:99:8c:8f:fa:13:1e:d4:
f7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BA:91:88:41:D3:2D:CD:58:EF:03:DF:B4:F3:F5:26:FA:7E:DA:D2
X509v3 Authority Key Identifier:
keyid:AE:CD:D8:BE:E2:4B:34:2B:03:9D:61:0C:E3:C0:C0:C4:71:9A:3B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs3YvuJLNCsDnWEM48DAxHGaO_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/P7qRiEHTLc1Y7wPftPP1Jvp-2tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/rs3YvuJLNCsDnWEM48DAxHGaO_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.135.0/24
Signature Algorithm: sha256WithRSAEncryption
04:9e:74:a5:5e:dc:02:d1:df:16:3d:da:0e:48:c0:15:84:29:
65:72:01:fa:3b:4d:4b:e8:4e:7b:8a:a7:9a:e8:45:20:94:21:
58:c8:24:f3:f4:4a:e3:0f:d8:22:15:a0:1b:c0:04:e6:10:27:
97:96:f3:0f:95:b2:4e:0d:3c:8d:87:9b:6a:57:00:33:96:19:
51:72:48:8f:df:12:91:83:69:7f:a7:f6:0b:ce:eb:03:9d:60:
ed:73:c1:5e:98:68:34:a5:b4:2a:3d:71:41:86:66:0c:5e:01:
a7:52:eb:d5:a1:d0:94:6c:4e:3f:9c:59:43:55:a0:b3:f6:5e:
14:36:dd:02:77:79:41:27:2a:99:f4:8f:56:8b:6a:62:d7:92:
e7:b5:d3:2e:d6:9b:dd:66:41:58:83:d7:7d:a6:e2:93:de:d0:
1a:a9:9f:1d:e5:03:2b:4c:7e:12:fc:6e:d1:04:a8:8d:14:7a:
e7:c1:c3:05:81:c4:6e:6e:c9:4e:04:b5:96:9f:d4:f6:32:9a:
03:64:50:dd:00:b8:c3:5a:b3:8d:65:22:47:be:b9:9d:18:67:
c0:ef:5f:f6:e5:5b:20:c1:11:51:9d:97:8f:6d:9a:3d:3d:12:
e4:2b:99:ec:3b:a9:1e:81:18:9b:fa:77:a5:f4:bc:16:06:6e:
38:9c:46:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:35 2025 by rpki-client