Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa
File: sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa (raw, json)
Hash identifier: fl3fF4gUVsev8QdVZnLOIu5u/5rzRWGxzrZRrAPXabs=
Subject key identifier: B1:6E:E2:32:25:9B:C2:34:19:E0:94:EB:F5:EA:8C:B2:DA:C7:D1:F6
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 019422FC0DAFF15DB5A9D06397EB0C13EDCB
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa
Signing time: Wed 01 Jan 2025 17:48:51 +0000
ROA not before: Wed 01 Jan 2025 17:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50673
IP address blocks: 109.72.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0d:af:f1:5d:b5:a9:d0:63:97:eb:0c:13:ed:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 17:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b16ee232259bc23419e094ebf5ea8cb2dac7d1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:be:5e:d7:7f:c0:e2:bd:c0:d7:9a:fe:f9:21:
d6:8b:84:57:c5:d7:7c:a1:d9:13:12:53:b0:ad:85:
82:98:b8:a7:7c:27:a0:6a:37:8b:0a:a6:e7:3a:20:
2d:fd:6b:cd:26:87:e6:cf:81:f9:06:83:06:ed:70:
57:d5:92:bb:95:ef:0f:e8:31:14:c7:c5:2e:c5:01:
70:d3:6c:71:4b:97:ce:47:44:b9:84:83:de:51:0d:
63:5c:81:9b:7d:78:42:d1:1d:9b:84:77:f8:68:dc:
36:74:3d:f0:c5:0d:ae:d4:9a:a4:d9:9d:5b:8d:3c:
fe:60:eb:99:5b:91:e9:b6:14:36:50:6d:78:43:35:
a2:49:fa:d1:eb:b9:4b:68:1a:aa:5b:59:63:4f:cc:
98:04:19:b7:c7:ab:f1:e0:97:b9:bc:e2:bf:e6:a3:
e0:86:f7:53:04:ec:fc:d5:a3:0a:9d:a9:7e:23:44:
45:d6:51:fb:3b:bf:49:b9:68:4d:dd:b8:8a:a1:e5:
af:53:c8:d9:14:db:77:ba:ba:c7:93:76:7a:f2:47:
32:83:5a:41:b1:41:0a:5f:88:67:20:ee:e4:54:24:
f0:61:02:c8:99:b7:b2:45:03:77:17:7a:7b:28:1e:
7f:db:c0:bd:48:35:a3:ed:73:ea:2e:10:41:8c:ea:
ea:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6E:E2:32:25:9B:C2:34:19:E0:94:EB:F5:EA:8C:B2:DA:C7:D1:F6
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.125.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e5:e8:d4:53:8c:92:8c:ef:ed:24:cb:d6:7c:e1:80:ba:60:
4b:ad:29:db:04:f3:a2:5d:ae:9d:97:ed:3f:90:03:ae:2d:a3:
49:4e:b2:8d:89:d5:8a:e7:5f:09:dd:e8:45:ee:c4:e5:33:20:
f0:a9:1d:9d:1f:ea:e9:ad:db:22:de:0c:6f:8c:46:94:44:f9:
46:af:11:44:8a:78:61:89:8b:67:74:aa:bc:8c:ae:03:ac:f8:
d4:14:8e:70:eb:2f:f8:e0:97:30:5e:51:c0:42:22:d4:e4:6e:
9c:db:b3:d5:a6:d8:a3:c0:80:42:44:ed:01:b0:79:49:cf:34:
53:ef:0b:87:e4:8e:ee:4b:bb:6d:07:a9:70:ec:75:8f:b1:eb:
e5:7d:f7:3c:7e:fb:f7:7c:89:8a:ad:53:b8:c6:80:c7:f5:88:
e2:0b:05:b8:7e:1f:30:c7:49:19:9b:5f:7d:79:9f:58:87:b0:
0c:6d:bf:5c:ac:1b:21:40:6b:55:eb:5a:c5:40:d6:08:a4:77:
09:96:98:6e:5a:37:d2:41:0b:d8:68:bd:65:be:66:e6:8e:37:
24:cb:b1:73:b1:c8:ca:a2:6e:62:5b:37:0c:f4:25:cf:50:52:
66:46:75:92:ca:89:2f:21:17:87:4c:e1:f7:9d:be:a2:8d:c7:
52:1c:a1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:35:34 2025 by rpki-client