Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ivasnnAmiLzSGrx0ZcIaDQiXt6E.roa
File: ivasnnAmiLzSGrx0ZcIaDQiXt6E.roa (raw, json)
Hash identifier: Qo+HIV9gOInFArtGE10wt1B2E1UNlcBYHdgkuGhBhiI=
Subject key identifier: 8A:F6:AC:9E:70:26:88:BC:D2:1A:BC:74:65:C2:1A:0D:08:97:B7:A1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC34946861136FE014968C6F90C14C620
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ivasnnAmiLzSGrx0ZcIaDQiXt6E.roa
Signing time: Mon 01 Jan 2024 04:30:08 +0000
ROA not before: Mon 01 Jan 2024 04:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 109.176.210.0/24 maxlen: 24
109.176.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:46:86:11:36:fe:01:49:68:c6:f9:0c:14:c6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8af6ac9e702688bcd21abc7465c21a0d0897b7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8a:33:ef:3d:d3:e4:3e:b3:7c:2f:c3:6f:b3:
95:78:1f:05:76:14:48:6c:24:b1:17:8d:10:11:0b:
b9:b4:8b:ce:79:f8:d1:43:6d:31:9f:75:97:76:60:
ce:bf:97:20:62:ee:fc:b4:f3:ef:20:bf:b9:c9:ba:
fe:8a:10:0d:b3:fd:36:d8:6f:83:29:a5:6d:6e:b1:
05:7c:24:18:b4:c8:c1:bf:14:f9:e5:cf:18:ba:1f:
96:83:00:cc:8f:56:9e:28:90:58:c9:0e:87:1e:6a:
22:99:71:72:4a:37:1a:d0:76:2b:9d:45:8a:84:97:
71:a5:6a:a6:1a:b9:b2:49:62:7c:8f:71:59:57:c3:
f9:75:10:ff:18:bb:60:d1:52:07:a1:76:cb:ae:5e:
22:ea:a1:62:d1:03:08:f5:6f:80:ab:87:82:de:cb:
5c:99:f0:d4:47:50:7d:3b:85:97:33:c3:37:40:f8:
6b:ef:b6:41:e9:24:32:26:44:8c:74:5f:62:94:5b:
9a:f6:a2:38:8a:63:85:64:92:9c:c0:1d:78:33:ac:
e7:e0:1a:07:15:46:12:d8:3c:b4:4b:c2:12:fa:be:
6b:ce:ed:77:19:88:10:ed:30:c1:01:4a:5e:74:e0:
22:b1:3b:70:8d:ba:75:1e:10:e0:be:a2:6b:d2:05:
91:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F6:AC:9E:70:26:88:BC:D2:1A:BC:74:65:C2:1A:0D:08:97:B7:A1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ivasnnAmiLzSGrx0ZcIaDQiXt6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.210.0/24
109.176.241.0/24
Signature Algorithm: sha256WithRSAEncryption
53:85:e9:90:ef:61:04:87:18:79:b0:2f:07:b8:85:35:d0:da:
a7:bf:35:7c:37:e7:1e:36:5a:e6:28:47:a0:b7:7d:7b:4b:6d:
0e:0f:39:88:9d:0f:b9:30:83:b7:85:bb:a7:c6:35:9d:48:31:
c0:35:0f:75:de:f9:81:40:c2:ca:12:54:43:43:ea:2f:e1:1d:
ca:af:67:77:0d:2f:fb:5f:7c:e4:40:33:78:eb:ad:91:98:ed:
59:2e:58:08:4a:78:8d:95:17:8f:c4:7b:9b:e7:e9:0e:b7:d2:
5d:6c:90:79:37:65:6a:cc:7b:d0:37:c4:09:1c:a8:5c:c8:b3:
91:b3:56:69:40:1c:ee:63:67:08:73:34:dd:79:ec:4b:53:f9:
e6:dd:49:d0:4b:06:f0:9d:20:78:9b:de:61:ec:22:d6:2b:46:
eb:da:18:97:3d:a2:5d:58:66:f4:d1:2e:db:5a:b0:69:da:d8:
5e:d3:fb:b9:d0:af:38:88:96:c9:90:d6:81:aa:12:29:04:f3:
d9:eb:59:23:9c:d3:ab:f7:23:db:88:10:c4:fa:cd:df:a5:e4:
e5:14:4b:d8:8e:92:21:49:db:ae:44:6f:b3:02:62:e2:9d:70:
d6:96:00:a0:0e:8d:b2:ef:9c:e6:fc:17:16:14:24:f5:96:c7:
83:74:7e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:36:47 2025 by rpki-client