Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/foM10PwLyaHwLhfbaJzkwnbAE_w.roa
File: foM10PwLyaHwLhfbaJzkwnbAE_w.roa (raw, json)
Hash identifier: DIaKJkxL7f9BTL5/9GbSSi0rXtJN9gz1NV5M8HRodzE=
Subject key identifier: 7E:83:35:D0:FC:0B:C9:A1:F0:2E:17:DB:68:9C:E4:C2:76:C0:13:FC
Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456
Certificate serial: 0194221F8A317D2AA4E671083CEA5346157E
Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/foM10PwLyaHwLhfbaJzkwnbAE_w.roa
Signing time: Wed 01 Jan 2025 13:47:59 +0000
ROA not before: Wed 01 Jan 2025 13:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216218
IP address blocks: 109.107.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8a:31:7d:2a:a4:e6:71:08:3c:ea:53:46:15:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456
Validity
Not Before: Jan 1 13:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e8335d0fc0bc9a1f02e17db689ce4c276c013fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:21:40:0f:21:e9:18:c7:70:ba:02:d2:57:
61:13:b4:60:14:88:6f:ef:ca:cc:d1:bb:31:0e:90:
7c:e5:ee:45:52:e4:f0:58:fa:00:24:7b:b9:2e:a9:
1d:87:2c:75:b7:0d:85:fc:2f:9b:be:5f:17:b6:54:
a8:ef:90:f9:86:2a:78:93:78:94:40:ad:e7:28:2c:
29:ea:c8:57:c6:c4:2b:de:64:ad:63:45:d1:dc:c5:
d6:8f:29:66:f2:af:aa:8f:86:75:6b:55:c1:2a:bb:
ad:bc:bd:e4:9a:52:f6:c7:45:09:bc:5c:e7:e0:68:
4e:60:50:08:08:b4:a3:e3:05:ca:29:1e:69:8d:e5:
40:2a:15:4a:0a:96:a6:dd:ba:67:9f:16:67:2a:3a:
b2:ff:a1:2d:62:81:e6:44:34:54:bc:bf:f3:21:fd:
0f:56:12:c9:f3:9d:e7:52:0d:1b:db:99:fc:41:7c:
bb:28:3b:fe:95:14:6e:f1:c7:9e:0e:53:2c:ff:26:
d8:59:fb:16:07:d0:80:88:1e:50:14:dc:0b:19:ac:
c7:2a:f8:d0:9a:7d:53:7e:8f:5b:08:47:92:df:2b:
23:31:31:ca:40:8b:d2:f2:6d:eb:82:1c:7e:e4:55:
2d:7b:f7:f0:51:05:62:f6:45:57:37:a5:b0:a9:89:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:83:35:D0:FC:0B:C9:A1:F0:2E:17:DB:68:9C:E4:C2:76:C0:13:FC
X509v3 Authority Key Identifier:
keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/foM10PwLyaHwLhfbaJzkwnbAE_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.188.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:1f:8d:4d:6b:f8:fd:40:f8:03:83:e3:54:e3:a3:3a:c4:1d:
d9:f1:8e:62:f0:ad:b6:77:b4:8a:cd:13:ed:36:07:8f:0c:98:
b7:20:65:e1:34:20:1b:a3:f5:9f:54:63:4a:8e:22:6c:d4:01:
06:d1:9b:45:1e:8c:37:5e:d0:3a:76:9f:7f:46:4d:bf:1d:1a:
28:a4:8b:88:59:a6:29:d1:0e:fc:28:a3:b6:e0:60:4c:a7:62:
c0:f5:88:a6:4f:f1:c4:f8:98:32:0c:d3:53:c7:1a:9e:20:63:
b1:63:a5:ee:ca:73:f7:83:44:bf:82:1b:b2:1d:0a:dd:34:04:
b7:5f:ed:a4:43:d7:6b:c0:3f:a7:ce:18:47:e7:c1:b1:d3:1d:
5b:d3:73:cc:02:ef:10:55:b1:94:9e:14:ea:50:31:b0:b3:0a:
63:9b:eb:3b:7e:6c:22:e0:6f:fb:fc:ef:f5:71:d4:55:07:37:
e4:84:d1:e9:e0:ac:dc:53:8d:f6:3e:44:49:1e:c8:26:96:6e:
05:32:90:c8:f2:29:b7:5d:22:14:e8:99:2d:36:e3:a6:45:12:
7c:ad:f6:79:33:1d:9e:f7:9d:64:43:12:a2:19:65:58:de:22:
d9:00:76:a3:c2:95:2c:7f:3a:a5:a4:54:d1:e0:f9:4c:89:55:
34:28:39:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:20:46 2025 by rpki-client