Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/895662-a417-435c-8365-1ad5e9c52318/1/r2sDoeJN5Z2P0fT_uR7GSz4yDOQ.roa
File: r2sDoeJN5Z2P0fT_uR7GSz4yDOQ.roa (raw, json)
Hash identifier: JU6bN+w+bQh5p2sicJF1r0LsqpR8E7rWb4mLbPf/EMQ=
Subject key identifier: AF:6B:03:A1:E2:4D:E5:9D:8F:D1:F4:FF:B9:1E:C6:4B:3E:32:0C:E4
Certificate issuer: /CN=432ccf681e1720f3ce39e73001fee16c2e3ec217
Certificate serial: A1A2D7
Authority key identifier: 43:2C:CF:68:1E:17:20:F3:CE:39:E7:30:01:FE:E1:6C:2E:3E:C2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyzPaB4XIPPOOecwAf7hbC4-whc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/895662-a417-435c-8365-1ad5e9c52318/1/r2sDoeJN5Z2P0fT_uR7GSz4yDOQ.roa
Signing time: Sat 01 Jan 2022 01:56:45 +0000
ROA not before: Sat 01 Jan 2022 01:56:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48031
IP address blocks: 109.107.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10592983 (0xa1a2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432ccf681e1720f3ce39e73001fee16c2e3ec217
Validity
Not Before: Jan 1 01:56:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af6b03a1e24de59d8fd1f4ffb91ec64b3e320ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cc:19:b7:d4:9f:08:db:b5:48:6e:04:cd:44:
91:66:1e:0e:4c:bc:52:5d:4a:7e:97:85:bd:24:7c:
15:05:05:f8:39:61:96:57:27:91:46:5f:81:bb:e0:
dc:ec:d7:b8:26:54:3f:51:2f:e5:d2:72:28:bd:05:
70:7e:a6:7a:e8:82:e8:3e:2c:31:db:c0:82:70:6d:
2a:1e:c1:12:11:74:66:c5:25:1d:66:e0:b3:2d:25:
b4:ec:31:ef:22:82:66:72:f7:f5:a0:53:34:ca:d4:
0f:25:8e:b0:62:89:08:1a:b6:bc:d7:a6:22:ad:70:
03:b8:e2:76:de:50:36:03:97:59:34:a9:92:a1:9c:
70:f3:ba:09:a1:ed:3b:03:7a:b3:77:ca:87:96:9d:
3f:e5:8e:a7:83:a5:60:b6:5f:4f:ee:98:9c:7a:6b:
40:27:3f:15:62:9a:5b:b7:9f:33:89:fa:b9:b2:58:
4d:9d:32:6e:52:09:e7:06:bf:b9:9d:60:d9:b2:a1:
5e:f3:17:7f:ee:72:7f:11:24:6c:dd:41:79:03:2b:
d0:a2:14:83:8e:29:2e:f5:8f:e3:01:f2:b7:82:91:
e8:d5:7b:0c:92:c4:a0:9f:96:7f:aa:3e:6c:ce:33:
59:90:d4:5c:a5:67:1b:df:9a:79:15:b8:f1:54:1e:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6B:03:A1:E2:4D:E5:9D:8F:D1:F4:FF:B9:1E:C6:4B:3E:32:0C:E4
X509v3 Authority Key Identifier:
keyid:43:2C:CF:68:1E:17:20:F3:CE:39:E7:30:01:FE:E1:6C:2E:3E:C2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyzPaB4XIPPOOecwAf7hbC4-whc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895662-a417-435c-8365-1ad5e9c52318/1/r2sDoeJN5Z2P0fT_uR7GSz4yDOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895662-a417-435c-8365-1ad5e9c52318/1/QyzPaB4XIPPOOecwAf7hbC4-whc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.141.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:e5:d5:73:92:4b:4d:fc:a3:51:d9:80:7e:82:bd:d2:70:5d:
4a:a7:1d:20:2c:2c:74:47:6a:5e:e8:55:2b:96:71:a0:06:25:
72:c7:19:ca:20:b8:32:88:d1:88:d8:96:d6:0e:97:22:6e:a7:
a1:3c:a9:a8:34:37:4e:f4:9d:4c:1a:e9:ce:17:87:f5:70:22:
60:e4:28:0f:01:a7:32:4e:0b:18:87:b9:fd:83:82:64:8c:bc:
eb:d4:2a:22:6f:db:57:07:25:b0:e9:16:e4:86:ca:12:06:d8:
fb:08:fa:a1:9e:03:38:b1:3c:fa:d1:8f:3e:9c:ed:ac:33:2b:
0a:59:82:03:21:ca:f6:fa:4b:d3:41:bc:6e:77:f3:28:60:ee:
32:d7:81:52:7f:d4:7e:28:83:38:05:6b:50:9b:91:45:90:8e:
27:c2:b9:d1:6f:91:5e:91:d7:e2:20:a7:cf:91:17:bd:20:3f:
82:c4:b0:9d:22:2e:b2:e8:44:5e:76:15:37:d9:45:2c:0a:a8:
ff:d7:46:0d:40:a7:1d:a6:1d:1c:77:69:65:c9:d9:57:0a:93:
2b:93:94:8a:e2:ac:41:16:02:6d:a2:15:24:96:2f:ce:24:db:
d2:f2:12:53:39:2f:1c:90:24:7c:41:17:da:ad:20:2f:4b:8f:
55:8a:a9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:12:45 2025 by rpki-client