Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/WeH1WlhYDBMKUix1j52cA9uy8vg.roa
File: WeH1WlhYDBMKUix1j52cA9uy8vg.roa (raw, json)
Hash identifier: LDMrba3gzwSdDXVT+UZ/jMO8QMSCHSdMpFhiaPS/CDk=
Subject key identifier: 59:E1:F5:5A:58:58:0C:13:0A:52:2C:75:8F:9D:9C:03:DB:B2:F2:F8
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 019426D9965F6DE7BC9CD9B7D044A9718CF7
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/WeH1WlhYDBMKUix1j52cA9uy8vg.roa
Signing time: Thu 02 Jan 2025 11:49:41 +0000
ROA not before: Thu 02 Jan 2025 11:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 394201
IP address blocks: 109.235.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:96:5f:6d:e7:bc:9c:d9:b7:d0:44:a9:71:8c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Jan 2 11:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59e1f55a58580c130a522c758f9d9c03dbb2f2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6e:28:fe:a0:10:86:db:21:93:de:d3:14:36:
fe:50:3e:3d:e7:2f:94:41:ab:ca:89:1d:a7:8f:e7:
80:6e:59:8c:54:bb:3a:11:01:14:32:94:57:3e:ac:
f2:13:17:e5:26:07:f7:9b:a3:cb:87:5f:2e:60:d9:
fb:04:95:c7:79:b7:14:eb:26:56:f8:20:0b:ff:a4:
a6:7f:7e:d4:4d:8b:50:c4:87:49:64:e4:0b:c2:bb:
fe:ef:57:ed:d2:14:d2:aa:26:11:dc:c0:22:c7:8d:
37:71:8c:57:f6:45:c6:70:b2:84:40:7f:bd:77:26:
c2:8b:92:ac:8a:12:05:86:63:4e:66:82:4c:99:62:
e7:46:01:e8:59:93:b9:9f:7b:bb:61:c5:96:a6:a5:
4a:49:3e:85:08:26:80:7c:cd:8d:57:d2:ca:2f:7b:
c7:cf:a3:3a:1e:b1:75:92:ab:8d:8e:75:f1:6a:58:
d7:3d:89:30:83:0d:99:a6:11:b3:4a:63:f1:88:53:
9d:a5:53:ed:53:58:b0:d1:b4:e6:52:69:7d:40:5b:
cd:b0:79:7e:fb:51:70:ca:b3:53:bd:7b:cd:e3:f4:
3a:07:45:b5:11:c3:b3:47:87:9b:3e:35:96:52:4a:
70:70:19:f0:39:2e:7c:19:aa:1f:1c:fe:d1:83:78:
3b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E1:F5:5A:58:58:0C:13:0A:52:2C:75:8F:9D:9C:03:DB:B2:F2:F8
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/WeH1WlhYDBMKUix1j52cA9uy8vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.96.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a6:f8:62:58:61:5b:6d:44:c2:fc:8f:a0:83:2d:19:4b:33:
ce:39:6d:31:6e:f5:a5:ef:ed:df:8e:d0:32:84:b5:78:44:c5:
bb:06:eb:ce:43:6a:a3:a3:99:c7:6f:e5:65:de:a8:32:a5:d3:
52:78:f2:99:32:20:48:37:c8:8c:2b:15:5c:8a:45:88:71:a3:
9a:e1:6a:58:1d:9b:90:49:26:7d:11:bf:f2:1d:54:81:b0:45:
76:bf:8a:aa:b2:df:d1:39:98:cf:12:5d:4c:bc:aa:a9:59:5a:
97:b9:47:fe:32:89:e8:e8:7d:3c:be:38:03:22:2d:71:51:31:
39:43:3b:16:c3:43:96:73:99:6e:7e:1f:6d:d9:87:1a:9a:de:
3c:2d:fb:13:f5:1d:77:52:bc:74:7a:bb:7f:c4:71:ad:f5:b8:
70:4d:6d:d7:b1:83:28:6d:38:86:5e:c7:29:20:01:df:19:59:
e1:40:f5:e0:10:64:8a:5d:88:7b:e6:ce:77:fc:d3:2a:cd:a5:
e8:b9:fa:3a:9f:3f:87:46:e7:d4:69:69:f1:fb:c3:bc:2f:6a:
cc:94:ec:8e:ac:f2:d0:8f:ff:96:03:e9:b5:3d:d8:63:fb:3f:
59:fc:4a:a3:43:77:5a:7e:83:93:c6:98:ec:de:16:2c:a5:8d:
e8:d4:a0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:13 2025 by rpki-client