Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/IX3lkF_Oc6fu1eTkE0EJiXPtFgs.roa
File: IX3lkF_Oc6fu1eTkE0EJiXPtFgs.roa (raw, json)
Hash identifier: qSwnG2x7fAVO9pUsbPLRh7gYvoQNKA6/RG+u8Xsk024=
Subject key identifier: 21:7D:E5:90:5F:CE:73:A7:EE:D5:E4:E4:13:41:09:89:73:ED:16:0B
Certificate issuer: /CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Certificate serial: 03E03BD2
Authority key identifier: C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/IX3lkF_Oc6fu1eTkE0EJiXPtFgs.roa
Signing time: Sat 01 Jan 2022 00:57:10 +0000
ROA not before: Sat 01 Jan 2022 00:57:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60913
IP address blocks: 109.167.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65027026 (0x3e03bd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Validity
Not Before: Jan 1 00:57:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=217de5905fce73a7eed5e4e41341098973ed160b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ad:91:04:78:6e:cf:77:28:4e:f6:d7:81:de:
7a:81:40:a0:04:4a:b0:d3:c0:d1:ea:04:ef:7f:60:
7e:73:bc:11:33:14:ae:75:43:17:6b:c7:40:dd:d3:
b3:df:8d:29:c5:fe:c8:88:d7:ab:08:02:87:95:b3:
d3:67:c4:8e:1f:d9:89:a8:20:d1:f8:be:a4:1c:bf:
1f:01:5f:1a:7f:4b:91:87:f2:a9:73:f2:c2:8d:6e:
9e:f6:ef:90:d5:c6:b5:3a:cc:e5:0e:48:60:46:09:
26:38:1e:ec:36:8b:13:8d:76:12:51:03:b2:36:c5:
df:5d:b1:c9:5a:1d:10:bc:1e:b1:0f:e3:5c:d4:fb:
b9:f1:d1:0a:d3:32:3b:f1:bd:d2:91:01:56:b1:1a:
00:8d:bc:e6:a5:f9:3b:d9:b8:41:b1:de:7f:c3:8f:
c5:d7:0d:d2:77:8f:c4:d0:c6:4c:d9:6a:3c:92:b3:
78:f3:31:62:00:41:0f:f3:9f:ad:d7:99:1c:60:c0:
cd:f2:d2:dd:15:6d:c5:5d:08:dd:f1:54:98:65:63:
a0:6d:82:16:50:37:f8:e1:90:f7:e2:53:84:98:77:
9d:a8:f6:8c:80:9d:dd:10:aa:9f:b9:44:d0:e2:7f:
d4:4d:b5:f7:91:c5:25:78:8c:7b:dc:07:c6:b4:d6:
7a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7D:E5:90:5F:CE:73:A7:EE:D5:E4:E4:13:41:09:89:73:ED:16:0B
X509v3 Authority Key Identifier:
keyid:C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/IX3lkF_Oc6fu1eTkE0EJiXPtFgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.167.252.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d5:5e:5a:9b:a0:60:b2:87:e4:de:22:d9:86:eb:75:04:d1:
bf:f2:f5:77:10:e1:73:69:fd:39:84:17:05:6b:ee:de:ba:90:
64:d8:e5:f3:6c:12:ad:8c:15:22:94:2b:27:0d:c0:2b:db:c4:
b3:ec:3b:ae:99:f1:09:49:6f:d9:a9:02:e3:5c:a3:af:61:54:
23:11:95:35:e9:f7:9d:9d:05:b1:95:21:de:d4:e4:5f:47:24:
79:10:dd:75:24:77:cd:4f:1e:73:4a:7d:89:2f:6c:05:03:1c:
0b:a9:f8:35:13:03:f2:72:cb:a2:98:78:5b:7c:d3:29:ff:8c:
38:10:0e:19:d1:9d:7b:3a:3c:f3:c0:35:5b:93:94:8f:8c:8e:
e9:79:25:fd:49:9e:74:c2:36:d3:57:66:0a:7a:22:38:38:d2:
14:bf:81:80:dd:50:57:14:01:9f:ba:51:d8:2c:27:f9:42:50:
69:e5:60:f2:11:1b:61:ff:66:eb:ea:4c:bd:0c:79:52:df:b6:
38:19:bb:01:e9:26:b4:ae:2f:a7:cb:4c:c8:29:de:15:5a:66:
65:08:95:78:ac:32:40:2e:2c:e5:f7:1c:7e:e0:b0:98:18:2f:
02:53:f9:c9:26:d6:36:ef:c8:7b:04:9e:e1:06:ab:ce:f7:1e:
b8:e8:e0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:44:24 2025 by rpki-client