Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/ZnFCz6rKLcZRx4oWRqGX1WP5row.roa
File: ZnFCz6rKLcZRx4oWRqGX1WP5row.roa (raw, json)
Hash identifier: Fg68tw9/QoQIkz8jU0UgngyMGnhnkYCZ0zRagw9xxDc=
Subject key identifier: 66:71:42:CF:AA:CA:2D:C6:51:C7:8A:16:46:A1:97:D5:63:F9:AE:8C
Certificate issuer: /CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Certificate serial: 019426D94F599B6F1F833430AACD370B662A
Authority key identifier: 0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/ZnFCz6rKLcZRx4oWRqGX1WP5row.roa
Signing time: Thu 02 Jan 2025 11:49:23 +0000
ROA not before: Thu 02 Jan 2025 11:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196740
IP address blocks: 109.207.112.0/20 maxlen: 20
109.207.112.0/24 maxlen: 24
109.207.113.0/24 maxlen: 24
109.207.114.0/24 maxlen: 24
109.207.115.0/24 maxlen: 24
109.207.116.0/24 maxlen: 24
109.207.117.0/24 maxlen: 24
109.207.118.0/24 maxlen: 24
109.207.119.0/24 maxlen: 24
109.207.120.0/24 maxlen: 24
109.207.121.0/24 maxlen: 24
109.207.122.0/24 maxlen: 24
109.207.123.0/24 maxlen: 24
109.207.124.0/24 maxlen: 24
109.207.125.0/24 maxlen: 24
109.207.126.0/24 maxlen: 24
109.207.127.0/24 maxlen: 24
193.53.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:4f:59:9b:6f:1f:83:34:30:aa:cd:37:0b:66:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Validity
Not Before: Jan 2 11:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=667142cfaaca2dc651c78a1646a197d563f9ae8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:37:30:ce:84:59:14:17:4d:90:e5:d6:d2:1f:
9c:8d:fb:cf:f5:18:da:90:86:c0:06:c8:c6:7a:8d:
db:a0:6e:c5:be:86:42:99:43:2d:cd:3a:7e:5f:e0:
63:d9:26:83:cf:83:0a:60:d4:68:94:4b:e4:47:f6:
4b:85:77:4d:b1:78:96:59:31:04:32:db:37:04:03:
7f:e6:bd:52:92:da:70:13:e7:f4:91:27:74:ab:b0:
57:37:9f:52:e5:b0:d6:e4:b5:17:e8:f5:7e:17:60:
1d:09:e3:d2:65:f1:b6:92:f6:34:be:bf:1f:bd:8c:
5e:e6:9e:ee:89:87:a0:f8:55:25:ce:30:bc:a9:50:
48:86:06:6a:61:44:a4:41:ce:30:bc:06:34:b2:d6:
ec:0e:c2:91:a6:cc:e8:78:74:96:2d:dc:0c:9a:83:
bc:73:07:25:bd:25:47:01:a1:1e:ea:a7:ab:b9:03:
e4:be:d0:27:7a:70:e0:f7:1e:87:a5:0b:b0:c7:db:
69:ae:d4:8a:2e:99:09:a9:1e:3d:98:b7:6d:70:0c:
2d:d0:fa:f3:f4:bc:00:6d:ba:37:ec:c5:5d:a4:d5:
c4:57:11:e1:6d:bf:79:5f:b7:ab:56:cd:d4:82:f4:
68:aa:e3:37:00:83:38:9b:d0:e0:f2:52:53:96:03:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:71:42:CF:AA:CA:2D:C6:51:C7:8A:16:46:A1:97:D5:63:F9:AE:8C
X509v3 Authority Key Identifier:
keyid:0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/ZnFCz6rKLcZRx4oWRqGX1WP5row.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.207.112.0/20
193.53.83.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b1:d3:e3:38:2e:6d:a3:3e:25:b5:c4:89:2f:cc:f1:1c:55:
81:9f:5f:66:1e:f5:45:1d:8e:a0:85:a3:a6:2c:30:18:0f:af:
21:cc:8e:78:c9:e0:26:7a:1b:c5:e1:45:63:08:9a:aa:b8:93:
2b:c1:8b:c2:02:97:60:04:0f:c6:be:e3:ec:b7:5e:ad:99:45:
db:0d:4b:91:98:ee:16:df:d3:73:8e:3f:6e:2b:0b:42:df:92:
6f:63:47:0a:3e:eb:e5:8c:10:93:6d:b4:94:98:05:c1:3e:1f:
2d:4f:8f:4e:94:b1:30:ba:e4:7c:62:a4:f3:45:c3:51:77:23:
47:95:3a:ed:e7:8d:39:8f:13:17:c0:7f:e4:6f:0d:da:a4:8a:
f6:26:81:ad:79:dd:66:6b:6c:9c:d3:fa:32:e7:96:53:e7:4d:
d5:43:76:d9:a0:61:0a:07:ea:22:0e:27:da:2e:35:c4:c3:e9:
b5:a7:bb:fc:b8:2a:af:3a:5b:80:c4:cb:7a:82:f3:b3:0b:5d:
66:44:9a:76:fc:f7:cd:4b:82:61:45:66:b3:71:99:62:01:19:
b8:fc:1f:17:a8:17:3b:a0:ff:6d:d8:a5:da:e2:a8:06:8d:c7:
0e:8a:94:13:84:b5:4b:dd:e7:52:21:73:0e:a0:45:f9:47:90:
a4:f2:bd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:53:43 2025 by rpki-client