Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/moar5P9-vHm1h7dW1fwgc72NFhw.roa
File: moar5P9-vHm1h7dW1fwgc72NFhw.roa (raw, json)
Hash identifier: JbVrT9GvQCxgYaVUxgeC2lZytQA7NzFvIW4W5mDjY3A=
Subject key identifier: 9A:86:AB:E4:FF:7E:BC:79:B5:87:B7:56:D5:FC:20:73:BD:8D:16:1C
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 019423691699057135335C80F303449ED34F
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/moar5P9-vHm1h7dW1fwgc72NFhw.roa
Signing time: Wed 01 Jan 2025 19:47:57 +0000
ROA not before: Wed 01 Jan 2025 19:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34529
IP address blocks: 109.205.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:16:99:05:71:35:33:5c:80:f3:03:44:9e:d3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Jan 1 19:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a86abe4ff7ebc79b587b756d5fc2073bd8d161c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:32:93:3d:2a:1d:66:df:c1:f5:a3:90:6d:
14:47:b3:ed:0e:82:e1:ce:23:11:86:6b:37:97:9e:
33:34:7f:36:4d:74:c3:9e:35:72:b5:d6:d3:ba:72:
8c:0c:73:32:34:e0:52:3b:19:9e:37:d8:23:84:0c:
31:ac:87:19:ca:1d:08:49:4e:01:06:4e:57:96:0a:
4b:06:5a:8e:7b:4d:bf:f6:bb:f2:78:e9:7b:a5:b5:
9c:b3:a8:6b:ea:29:f5:e1:f5:18:df:ce:dd:42:85:
d9:3e:de:11:a3:bc:4b:da:8d:8a:93:ef:a7:57:cd:
b9:cf:7f:7d:7e:fd:c6:86:b1:2c:f6:99:38:08:e8:
6b:b5:3f:ab:41:79:16:61:9c:97:9e:8e:d3:c8:2a:
d4:67:27:d0:01:37:42:5e:65:8e:d7:a1:7d:aa:b5:
d5:26:2f:4a:b7:db:9f:1b:80:9e:ff:75:93:a8:d7:
a2:80:3d:e4:10:ec:d4:c8:4c:08:04:1b:2e:56:f2:
61:8a:0f:e9:4b:30:74:93:24:d6:a8:ab:1c:b9:fc:
ad:cf:fc:01:3d:98:92:d1:59:e3:7d:ce:6a:c4:de:
41:63:89:f6:ef:e7:e2:f0:dd:53:41:04:b3:34:07:
21:83:01:de:84:36:4e:65:0d:0e:af:79:08:2d:b9:
3f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:86:AB:E4:FF:7E:BC:79:B5:87:B7:56:D5:FC:20:73:BD:8D:16:1C
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/moar5P9-vHm1h7dW1fwgc72NFhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.191.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:a8:10:f0:e6:8b:26:a1:ca:b6:9b:23:07:2d:c2:59:71:26:
74:dd:b8:6a:1e:29:06:85:e4:01:ce:96:c3:69:70:d4:88:5e:
83:54:a8:b9:cb:79:ce:f3:2f:c5:28:6a:39:2a:7a:b0:5b:4c:
a5:d0:92:07:26:c9:a8:87:37:74:ec:36:eb:d9:a9:ae:f5:fe:
c5:1c:28:4e:06:83:c8:67:eb:7c:9a:cd:c8:b6:a8:e3:04:15:
f0:4a:96:f4:0c:8d:6e:f5:d7:3f:78:40:59:4a:51:b7:71:af:
d6:ae:2c:f9:b3:3f:e2:53:f9:04:75:b9:13:99:f4:28:f9:ed:
95:8a:a3:99:63:1c:7b:11:89:ac:1b:61:39:bb:1d:d2:bc:e6:
f2:77:33:93:88:36:92:1f:2a:f9:bf:c7:8d:88:49:5e:5f:67:
bd:78:f3:56:26:f7:f7:0e:35:b3:ac:66:ef:32:c7:42:4e:75:
9b:5b:48:2e:87:f7:12:54:06:34:04:06:69:65:fe:c2:fa:00:
5a:89:88:e3:93:d2:c6:49:a5:08:f1:1d:33:16:bf:6f:f3:e9:
db:ba:a1:7f:83:ff:21:b6:ec:2f:18:b1:eb:34:f6:0a:05:c0:
cd:3f:c9:6b:31:e9:41:ff:c8:86:a9:86:85:8f:0b:a9:1a:c7:
7b:61:c9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:31 2025 by rpki-client