Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/Pspki4LydH4NruOl1Q_yMCzj56c.roa
File: Pspki4LydH4NruOl1Q_yMCzj56c.roa (raw, json)
Hash identifier: E7NJ5EYGEhFQT/ZDvZ62TPHx2bJW43FmC+HgUsVYO6E=
Subject key identifier: 3E:CA:64:8B:82:F2:74:7E:0D:AE:E3:A5:D5:0F:F2:30:2C:E3:E7:A7
Certificate issuer: /CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Certificate serial: 03DDF3DE
Authority key identifier: C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/Pspki4LydH4NruOl1Q_yMCzj56c.roa
Signing time: Sat 01 Jan 2022 00:57:09 +0000
ROA not before: Sat 01 Jan 2022 00:57:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48201
IP address blocks: 109.167.212.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64877534 (0x3ddf3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Validity
Not Before: Jan 1 00:57:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3eca648b82f2747e0daee3a5d50ff2302ce3e7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:c0:8f:3d:1d:f4:22:b1:65:e6:c9:06:78:
6c:28:14:c0:fd:4a:12:79:da:bb:61:d5:ec:b6:a8:
38:00:cd:87:c8:da:bd:08:71:bb:2b:77:6d:fc:33:
b6:eb:81:1a:43:57:ab:db:0e:20:96:db:c5:24:ca:
79:e5:25:ac:c9:ef:8b:26:b7:98:c6:d3:1c:2a:f7:
e8:a9:01:77:6b:0b:9d:f0:93:cd:92:aa:f9:e5:d8:
cd:7e:dc:ce:59:78:01:b7:3f:e7:d1:24:37:c7:91:
45:55:c4:91:22:6a:e0:cc:4a:fb:7a:03:cf:e6:14:
20:85:a6:a8:79:03:44:66:fd:71:b8:e4:ad:ca:36:
0e:9d:0c:0f:3e:26:4f:47:2a:bc:b9:ab:d7:f1:9f:
d4:b4:c1:13:c9:d2:7b:a3:d3:4a:80:97:49:1b:68:
21:79:9e:ad:73:3a:9c:12:45:64:d0:e9:a6:48:68:
54:4a:77:e4:45:c2:4d:53:d9:6c:6d:4a:ff:bf:87:
37:e9:b2:dc:40:f4:82:17:a1:56:8f:73:fd:7c:ca:
df:d8:30:b4:aa:96:14:03:3d:99:76:be:b6:aa:3a:
44:82:8e:ea:73:61:aa:4a:b8:19:c6:45:0d:b6:83:
04:57:cc:a3:c9:72:e7:c0:c6:2f:71:92:a7:c4:aa:
c6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CA:64:8B:82:F2:74:7E:0D:AE:E3:A5:D5:0F:F2:30:2C:E3:E7:A7
X509v3 Authority Key Identifier:
keyid:C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/Pspki4LydH4NruOl1Q_yMCzj56c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.167.212.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:ec:f4:20:e2:fd:48:ad:68:21:c7:9a:43:cd:7f:db:0e:53:
08:a0:5d:ce:ba:e3:44:38:c0:61:68:83:07:9a:20:fa:8d:cc:
4b:9c:44:da:10:75:3f:4e:e9:18:70:9a:1b:4d:2f:9e:a7:b9:
c4:7e:de:92:40:24:56:ad:b3:07:c4:d0:d5:b5:5a:8b:cd:25:
63:a1:f1:b7:2d:cf:03:7d:e8:13:69:18:60:25:21:d4:9a:da:
f1:c7:3f:a4:52:65:7e:31:ca:f5:e4:86:5d:bf:a3:6d:af:e7:
fb:4f:22:11:e9:9a:e1:3f:b1:e3:be:25:4b:bc:eb:2d:c0:3c:
d2:ef:62:22:8f:c1:e0:da:fd:e5:3e:33:0e:fa:34:a3:60:94:
1a:15:a8:d5:8a:17:82:5b:93:f7:56:1e:3d:2f:0f:2e:7e:e3:
cc:ee:37:3e:09:0f:62:ad:d3:17:13:c2:d9:96:96:44:c1:fc:
c0:be:a8:e1:57:99:b8:82:e0:eb:18:c5:59:0f:54:c6:66:62:
57:82:c6:56:48:3d:e8:4e:2f:cb:1a:62:eb:0b:ec:46:4f:22:
68:4e:f5:97:b3:fa:43:08:7f:7e:f8:4e:ca:b7:cd:3c:49:8c:
26:ff:46:3b:61:37:69:b8:a7:d7:ad:29:f9:73:14:89:1e:37:
d3:28:69:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:12:54 2025 by rpki-client