Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/4w30D5KawwaEKeLXCLppZs-985Y.roa
File: 4w30D5KawwaEKeLXCLppZs-985Y.roa (raw, json)
Hash identifier: D2Lwmoer5qGID/4i5fsaA6M5CcgJmrhikqoV9diBlTk=
Subject key identifier: E3:0D:F4:0F:92:9A:C3:06:84:29:E2:D7:08:BA:69:66:CF:BD:F3:96
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 019422FC0F8349CA2C98410D1FCFFBF27432
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/4w30D5KawwaEKeLXCLppZs-985Y.roa
Signing time: Wed 01 Jan 2025 17:48:51 +0000
ROA not before: Wed 01 Jan 2025 17:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 109.72.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0f:83:49:ca:2c:98:41:0d:1f:cf:fb:f2:74:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 17:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e30df40f929ac3068429e2d708ba6966cfbdf396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0c:4e:60:fa:02:9c:b6:6c:e2:1a:9f:0c:6d:
c9:a1:70:f5:a1:31:f3:db:b1:99:cd:a7:ca:c9:49:
7c:dc:72:af:59:be:7a:c4:23:d3:77:80:ca:0b:06:
8b:ff:41:b4:57:fb:fa:8a:ef:40:25:28:d9:bc:1d:
2d:40:77:92:8f:84:95:62:a8:78:4f:19:0d:b0:82:
7b:97:32:36:40:5a:73:66:2c:3b:dd:6b:27:47:d1:
c7:f1:d7:bf:59:54:74:74:be:7b:6d:7e:0e:16:54:
c8:19:d8:4c:54:a7:e1:ae:ec:4b:0c:1f:38:0e:50:
f3:fd:f4:c2:93:43:d7:b1:f2:5e:7f:6c:96:1f:af:
3d:7b:3d:50:7e:b5:6b:45:3d:e9:89:0c:5f:8a:f4:
47:80:1d:9f:1a:00:a9:36:4e:2c:00:89:9f:d8:7a:
2a:b0:d3:f0:48:fa:2e:fb:14:fa:33:8c:f8:1a:ad:
f7:60:9a:a2:76:4a:fd:e5:31:97:6e:c7:eb:24:cb:
4e:f5:7b:f9:e6:0c:4a:42:de:92:ba:d7:92:75:06:
bb:0e:41:6b:1a:34:cc:bf:7b:e1:3e:a3:d9:83:00:
fe:71:64:f3:f4:1b:47:c0:5d:42:e4:18:23:6a:48:
56:e8:48:66:5d:64:b6:c9:5f:c5:7d:ff:13:20:a9:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0D:F4:0F:92:9A:C3:06:84:29:E2:D7:08:BA:69:66:CF:BD:F3:96
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/4w30D5KawwaEKeLXCLppZs-985Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.118.0/24
Signature Algorithm: sha256WithRSAEncryption
89:26:77:ab:b0:0f:4e:d3:ca:e7:f7:af:7d:4b:8b:5f:1f:01:
30:1d:9b:b7:ab:cb:9e:fd:a4:b7:4d:f5:67:d7:99:f4:ec:e3:
45:2f:10:6a:a1:42:00:94:b4:8a:07:82:47:8e:88:a0:0f:3b:
e9:a1:b5:41:a4:c2:db:2d:ea:2f:a9:c0:8e:a8:8f:74:f2:dc:
bd:76:1b:57:22:df:15:f7:3b:d3:ce:0f:99:84:14:8f:0d:eb:
e3:08:0c:01:ee:e1:7d:a1:69:43:5a:73:2e:42:c3:68:2a:17:
18:d8:dc:eb:60:44:64:be:80:9e:7a:ec:44:3d:83:27:ad:1b:
dd:32:1e:02:df:04:36:38:19:4b:99:7d:1c:cb:f8:6e:8e:9a:
fa:c0:46:2e:55:9a:6f:cf:68:fc:7e:3b:5b:5f:79:5d:05:72:
6e:a4:c7:53:29:f2:94:ab:3e:cb:0f:19:a8:8a:5f:6e:f8:e9:
30:75:7d:f3:4d:33:cc:01:99:e8:af:b2:bb:7c:fa:d7:2d:dd:
85:77:1b:0b:02:a8:52:f1:97:f8:1c:34:db:03:ef:1d:c2:83:
b5:03:36:d5:3a:dd:ec:27:ee:96:a9:c6:26:88:ac:50:c6:7e:
40:16:1a:e6:21:c1:ca:13:78:8d:5c:0a:e8:f9:00:d6:23:28:
ae:f3:a6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:54:15 2025 by rpki-client