Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/rS554DqYgNK00lANZV007fZTVkM.roa
File: rS554DqYgNK00lANZV007fZTVkM.roa (raw, json)
Hash identifier: 3SSYULxYvCw8XOXXkyZRjzf+FifSR5lE3jD5NyjPQ0I=
Subject key identifier: AD:2E:79:E0:3A:98:80:D2:B4:D2:50:0D:65:5D:34:ED:F6:53:56:43
Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456
Certificate serial: 0194221F8B09FC0FBD3349463A6581C91987
Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/rS554DqYgNK00lANZV007fZTVkM.roa
Signing time: Wed 01 Jan 2025 13:47:59 +0000
ROA not before: Wed 01 Jan 2025 13:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216246
IP address blocks: 109.107.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8b:09:fc:0f:bd:33:49:46:3a:65:81:c9:19:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456
Validity
Not Before: Jan 1 13:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad2e79e03a9880d2b4d2500d655d34edf6535643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:24:f7:9e:5e:22:ff:81:9a:32:61:30:e4:
3e:35:e5:8c:3d:d9:56:db:4d:b7:65:68:5d:68:a1:
5c:d8:5a:6f:78:c0:26:2d:22:70:95:0e:49:e8:21:
3e:02:6c:6e:e7:00:cf:64:16:a7:bc:a7:51:28:52:
22:67:6d:58:3c:f9:1c:c2:f7:b8:3f:01:1b:c3:46:
0c:1c:9a:8a:e9:d9:31:9a:94:02:58:f3:1a:f4:6d:
ed:b4:45:cd:0c:ec:f6:9d:0d:59:38:73:d8:f3:b9:
86:ee:9e:79:65:18:58:85:e6:6f:7c:59:42:11:dd:
d3:98:68:f4:bf:29:e8:90:f9:7d:46:06:05:f7:ad:
41:7f:a6:34:04:21:b5:5e:40:c9:c4:95:dd:51:5e:
fb:b3:a2:82:bc:05:e6:dc:30:79:f2:2c:8c:ae:b2:
2f:2e:27:a8:2b:ab:8e:42:8b:88:87:ab:65:79:62:
ac:cf:1b:b3:ee:64:c3:35:dd:47:e1:f4:61:cf:7a:
fa:30:66:b2:24:95:c7:09:d2:f6:52:80:12:8b:98:
3a:f3:c3:68:25:c7:fe:49:b0:8e:25:87:af:10:1c:
94:ed:56:2e:3a:e0:da:b8:ef:9d:8b:5d:cf:c0:9f:
59:c5:39:a6:86:8e:7d:bb:05:fe:ac:b9:55:07:fd:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2E:79:E0:3A:98:80:D2:B4:D2:50:0D:65:5D:34:ED:F6:53:56:43
X509v3 Authority Key Identifier:
keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/rS554DqYgNK00lANZV007fZTVkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.189.0/24
Signature Algorithm: sha256WithRSAEncryption
60:0c:9a:e5:f3:2a:ad:ec:0c:32:70:fc:78:1b:ee:d2:1e:90:
b8:3c:d9:6d:6c:39:94:f1:de:a8:4a:63:ee:6b:ac:ae:6a:a3:
1c:d4:16:29:60:38:bb:55:78:85:a0:e1:e9:30:cb:f7:64:c0:
1f:1b:0e:d4:b5:d9:6c:37:e1:46:ad:1b:de:60:5d:98:68:b9:
16:27:f1:5c:89:1a:49:fe:1b:0a:25:f4:12:8f:76:b0:6c:88:
60:e7:3a:9a:f4:bf:4e:08:52:f9:92:e1:0d:55:f9:18:28:ae:
1b:0c:1c:05:0f:bc:42:b4:66:47:2c:f6:e2:f2:41:9d:8e:72:
f0:7c:06:de:df:3a:39:40:6f:70:34:92:6c:d7:1f:df:07:b2:
f0:ed:63:62:da:c4:4d:0b:f8:d0:6e:5d:c0:7e:8d:6a:c6:cd:
3f:ad:5c:c2:92:d7:d8:0b:96:12:eb:4f:6b:8f:35:83:5e:4a:
bc:14:a7:05:55:5c:e1:20:ce:36:2e:0f:c5:3d:db:05:3e:48:
68:dd:4a:51:75:9b:eb:eb:f8:e5:7e:07:07:09:7b:d5:e5:54:
43:d1:52:aa:df:54:24:5f:0f:e9:c9:0a:fe:95:1f:f6:5e:92:
a0:eb:c4:8e:f0:df:e4:56:cd:6b:57:5b:18:aa:7b:60:44:f2:
6c:4e:b6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:23:18 2025 by rpki-client