Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/zNANJS2SOg4mEMYsA0mzzh-NTVc.roa
File: zNANJS2SOg4mEMYsA0mzzh-NTVc.roa (raw, json)
Hash identifier: Sk8uqP/wy5dRQMxkrppiKmjHGEFGiOvtOFEPkVOkZjU=
Subject key identifier: CC:D0:0D:25:2D:92:3A:0E:26:10:C6:2C:03:49:B3:CE:1F:8D:4D:57
Certificate issuer: /CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Certificate serial: 01857227CDBF8F6EEF766A9EC7C5528F8F26
Authority key identifier: C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/zNANJS2SOg4mEMYsA0mzzh-NTVc.roa
Signing time: Mon 02 Jan 2023 11:04:49 +0000
ROA not before: Mon 02 Jan 2023 11:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201515
IP address blocks: 109.167.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:cd:bf:8f:6e:ef:76:6a:9e:c7:c5:52:8f:8f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Validity
Not Before: Jan 2 11:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccd00d252d923a0e2610c62c0349b3ce1f8d4d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:cf:87:d8:57:f4:2d:a3:26:a6:11:2d:b4:
37:a1:15:3c:6e:02:50:20:da:0f:31:de:fc:a8:e9:
7b:f3:59:90:3d:3a:7f:2f:08:9d:9e:81:cc:0a:de:
b8:76:7a:1a:1c:f4:81:90:57:20:09:bb:7e:90:62:
a2:46:38:21:63:f9:17:99:f2:74:af:03:37:28:9c:
ff:ee:4c:61:12:28:ba:e0:81:4a:d0:a7:2f:ec:0b:
be:8c:5e:f4:3a:ee:b7:4b:93:f0:70:e2:ee:4c:0f:
19:5c:c9:84:64:9b:1a:1f:44:64:c2:bf:ad:82:ed:
65:02:22:fd:ca:a0:ec:91:0c:a5:94:ca:88:fe:5a:
34:0d:ac:8f:20:d7:00:eb:a4:4b:04:5e:57:0b:b9:
5a:d2:99:02:dd:d5:88:40:87:21:c8:d4:e7:6d:a6:
03:0f:3d:e4:9a:d9:a4:ba:49:df:af:36:63:24:12:
71:35:87:20:74:74:55:ba:b7:aa:d0:8c:d9:f6:2a:
03:9c:78:f4:2e:9a:1b:08:61:c3:93:89:44:56:1d:
cb:4c:1a:59:07:82:c5:07:6d:93:4f:95:18:83:19:
ba:a3:5b:35:91:d8:ef:42:76:a1:d6:aa:86:84:ea:
13:01:77:14:49:2f:97:17:8e:a6:a0:91:15:6c:5b:
42:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D0:0D:25:2D:92:3A:0E:26:10:C6:2C:03:49:B3:CE:1F:8D:4D:57
X509v3 Authority Key Identifier:
keyid:C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/zNANJS2SOg4mEMYsA0mzzh-NTVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.167.251.0/24
Signature Algorithm: sha256WithRSAEncryption
39:43:47:36:6a:b6:af:44:ad:49:2f:0c:1d:33:61:71:6a:2a:
19:61:e8:80:ba:50:70:a5:1e:84:48:42:54:28:d1:ba:5b:79:
d4:4f:c1:e9:62:76:f7:55:84:c2:ca:80:2a:a3:e7:73:3a:ea:
51:34:0d:be:bc:44:ef:46:3f:65:ab:70:5d:76:46:34:c7:0a:
77:bf:13:c7:74:b8:48:0b:9a:84:24:7f:1e:87:ff:d0:8b:de:
df:df:7b:07:4a:90:c9:3f:c7:a8:d6:6f:6d:1a:66:1b:f2:4e:
7a:f1:cb:15:c2:37:52:23:a8:33:37:ac:35:89:39:aa:06:49:
bc:7f:ae:bf:32:40:40:05:cd:82:b7:c6:90:16:26:a0:2b:94:
ec:e5:3a:f2:b4:aa:f5:99:72:eb:a9:32:ab:0d:53:81:53:ec:
69:22:71:66:4f:07:ff:a5:91:d2:60:04:80:e5:0c:08:c6:93:
4b:dd:bf:14:ba:36:50:f7:6d:0e:b4:74:ab:cd:87:d9:80:f0:
11:a6:30:a6:ce:8a:7f:a1:02:86:69:ef:11:4c:6b:85:10:62:
c8:bd:f8:61:50:da:e5:6a:ed:9a:10:f2:3c:a7:94:a1:08:db:
fd:b1:c1:ce:39:df:16:59:b4:b6:85:15:68:9d:ae:66:0a:ca:
fd:d2:a4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:30:21 2025 by rpki-client