Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/aTfvbQo1T0lG4nBWjF747XFPaAU.roa
File: aTfvbQo1T0lG4nBWjF747XFPaAU.roa (raw, json)
Hash identifier: qOA0QTNBur81MXRlvvCLR4P+zUxWSFaPVYxKaB+Yp5M=
Subject key identifier: 69:37:EF:6D:0A:35:4F:49:46:E2:70:56:8C:5E:F8:ED:71:4F:68:05
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D2F8115315DADE9D0F2EAAD07076B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/aTfvbQo1T0lG4nBWjF747XFPaAU.roa
Signing time: Wed 01 Jan 2025 15:47:45 +0000
ROA not before: Wed 01 Jan 2025 15:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50040
IP address blocks: 109.73.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:2f:81:15:31:5d:ad:e9:d0:f2:ea:ad:07:07:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6937ef6d0a354f4946e270568c5ef8ed714f6805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5f:02:da:fb:b4:ca:53:da:fc:33:1b:c6:3e:
81:02:c4:0f:fb:67:c8:8e:90:d2:75:13:d4:62:cb:
9c:e9:5c:03:c3:79:d5:62:ae:8e:dd:d8:e3:d7:4d:
bf:6c:22:a5:ed:48:3c:77:e0:79:ad:ef:d4:ad:e6:
6c:40:96:f9:6a:89:af:9d:d3:9a:35:33:51:9f:eb:
9f:49:57:a9:8c:73:be:83:b2:7d:00:11:ae:95:78:
32:1b:d1:14:cf:2e:a8:e6:2c:ac:ea:ed:d3:f9:5a:
ba:d2:4e:ca:c6:d4:9d:22:cb:79:2d:40:a0:22:cd:
76:33:41:a9:d9:48:4f:0e:ba:e9:85:a0:d3:63:79:
1f:81:5a:54:70:42:7a:d8:5f:9b:b3:2f:83:4e:b2:
57:57:b7:d4:e1:ce:ea:0b:72:14:1c:6b:50:c8:f4:
08:9f:ab:3a:4d:87:cb:4d:01:23:69:75:d3:2c:c9:
86:31:cf:0e:8c:18:29:6f:30:fe:b1:e0:22:78:44:
f3:5b:52:8d:e2:7c:61:93:16:05:74:da:10:bc:ae:
32:14:12:32:80:43:6c:3c:79:1b:10:a7:13:78:c2:
43:8e:14:aa:32:b7:60:27:54:b5:09:a2:1e:63:17:
03:66:0d:72:44:ab:5a:b1:f4:3e:1b:dc:36:e3:ec:
2d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:37:EF:6D:0A:35:4F:49:46:E2:70:56:8C:5E:F8:ED:71:4F:68:05
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/aTfvbQo1T0lG4nBWjF747XFPaAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.73.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f7:8d:84:97:66:d4:bc:05:0b:ee:e9:9e:59:13:e5:e2:36:
de:8f:25:c0:65:a0:55:74:0a:c6:95:96:14:79:17:c0:50:96:
f3:e0:f7:68:33:3b:81:37:40:e7:cb:60:a0:d2:16:3e:6f:a8:
21:bd:b0:bf:05:4d:d2:8a:a4:88:97:b7:12:1f:3d:69:1e:0b:
b4:83:73:97:8a:ba:db:db:27:bc:5c:5e:59:11:dd:fe:c0:1a:
90:b6:99:54:c7:38:e4:b2:62:6b:3f:51:19:26:e0:b6:34:a7:
c5:a8:86:98:d2:d3:ed:22:df:5d:35:73:14:b0:10:17:29:3a:
b0:7b:92:e2:34:75:bc:9f:5c:5f:84:21:92:0d:bb:cc:4e:68:
da:c0:63:4e:80:b7:b8:7c:1f:e4:10:30:9d:b7:84:65:11:f4:
48:ad:80:70:ea:c4:75:de:65:69:25:0c:36:32:b2:ae:51:5a:
2c:0a:6c:8f:c1:3c:25:dc:d6:a1:1e:6b:07:f1:00:11:d3:c5:
0d:95:16:c6:99:c0:ef:09:61:9e:61:87:95:2b:44:d5:94:22:
28:a6:0f:b8:46:d3:e6:b8:e3:9f:65:42:61:db:e9:67:38:72:
4f:7f:a3:e3:79:51:8c:83:7f:b2:15:e1:e4:40:a7:3e:69:b2:
7a:35:f8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:28:19 2025 by rpki-client