Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/V-3XZqCs2B52hTBoKVo8yFxuQts.roa
File: V-3XZqCs2B52hTBoKVo8yFxuQts.roa (raw, json)
Hash identifier: l6GyUT6Tk/ZMVfPNJMEXdyh7EJxIvVCfP6BdoZ5A/YI=
Subject key identifier: 57:ED:D7:66:A0:AC:D8:1E:76:85:30:68:29:5A:3C:C8:5C:6E:42:DB
Certificate issuer: /CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Certificate serial: 01857227CC26CFEBEFBA74F0876570937003
Authority key identifier: C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/V-3XZqCs2B52hTBoKVo8yFxuQts.roa
Signing time: Mon 02 Jan 2023 11:04:48 +0000
ROA not before: Mon 02 Jan 2023 11:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60913
IP address blocks: 109.167.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:cc:26:cf:eb:ef:ba:74:f0:87:65:70:93:70:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Validity
Not Before: Jan 2 11:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57edd766a0acd81e76853068295a3cc85c6e42db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bb:bc:5c:6e:14:72:6f:04:bc:c8:24:b1:eb:
04:32:1d:b1:2c:41:4b:02:70:69:14:1c:75:8d:5b:
44:17:b8:5a:1c:38:4c:9f:00:4d:48:f7:62:fb:06:
9c:91:d3:52:2d:f5:65:c6:8e:ff:84:16:a0:49:79:
e0:75:b2:ad:77:ec:25:47:ce:d6:92:e9:13:71:0c:
6a:bf:1c:d3:9f:9a:49:13:54:ec:55:d4:e5:49:e5:
d7:f3:2f:9d:72:d4:84:c7:4c:1e:a6:6b:e8:1d:78:
4c:e7:dc:9a:a3:90:31:03:70:08:06:38:53:4a:5b:
7b:5c:63:a9:7a:aa:e2:d6:e0:ce:d9:9d:a7:2e:6f:
d5:d6:0d:23:73:de:0b:e4:62:a7:b3:0c:66:d4:34:
89:7c:13:7c:e5:25:ce:1b:f8:69:57:21:d1:64:d3:
ab:01:39:e4:fa:8c:7b:1f:e4:90:5f:b4:4d:78:bb:
f6:b4:e7:f5:8a:48:b2:cf:57:63:b5:e7:b7:9e:88:
42:0a:0d:1f:01:6c:c9:5b:54:a7:15:fd:ef:ec:d9:
cf:51:de:5b:d5:14:b1:5c:31:ec:e8:5b:aa:50:18:
25:4a:33:4f:4b:a0:62:c1:10:44:a3:f9:c2:57:1f:
c5:25:2e:aa:33:8f:6b:ea:f5:84:aa:9e:d3:b3:1d:
d0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:ED:D7:66:A0:AC:D8:1E:76:85:30:68:29:5A:3C:C8:5C:6E:42:DB
X509v3 Authority Key Identifier:
keyid:C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/V-3XZqCs2B52hTBoKVo8yFxuQts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.167.252.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:1e:3a:b3:d7:aa:e3:37:2f:7c:4b:af:d8:76:47:b9:0e:50:
90:f2:70:9c:47:80:96:0d:9c:31:58:83:44:8e:90:95:34:20:
ee:27:81:69:d6:65:3c:46:6f:23:a6:36:ef:0b:87:8e:85:3c:
ef:13:ea:bd:68:42:c4:8b:16:97:a4:ce:a0:76:99:e5:81:ed:
0e:a3:2e:f1:ec:4c:90:60:49:db:5c:91:3c:09:d8:cc:79:63:
aa:54:d8:2a:2f:b3:45:a9:78:d6:ee:dd:3e:60:e9:44:23:15:
19:7d:7e:86:b4:dc:6e:b4:d8:c4:4b:66:9c:13:5f:56:12:4e:
a1:dc:7d:35:05:ef:b9:d2:67:55:81:8f:4e:be:c5:2c:bb:96:
b2:e2:f5:2a:63:dd:4e:a4:c4:5d:a0:cf:09:38:0f:86:50:71:
6e:9a:ec:b0:d0:cf:ad:0a:b7:f6:21:e6:a6:ff:e8:2e:25:b3:
be:8f:fd:2c:df:a2:93:4c:7b:34:49:4c:ed:0d:87:7f:1e:0b:
38:36:0d:4f:07:48:e8:8e:2f:a1:9b:65:0f:ff:e1:9d:1d:e9:
36:d9:64:c2:77:85:c7:77:6b:33:a8:1b:2a:f4:94:e9:6d:b7:
55:78:43:e8:45:d6:70:90:31:b1:d3:e2:b0:cb:b5:b9:70:5d:
6e:74:5a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:28:02 2025 by rpki-client