Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/pw-uXfj6mcJrqBi6AQ_DbhRWlvc.roa
File: pw-uXfj6mcJrqBi6AQ_DbhRWlvc.roa (raw, json)
Hash identifier: F9GSSa/n4nzQc1So+eTia4zHzLGf70ctYWS6RuL9cmE=
Subject key identifier: A7:0F:AE:5D:F8:FA:99:C2:6B:A8:18:BA:01:0F:C3:6E:14:56:96:F7
Certificate issuer: /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial: 019427B50F1428F810F2CF3130CAECABC263
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/pw-uXfj6mcJrqBi6AQ_DbhRWlvc.roa
Signing time: Thu 02 Jan 2025 15:49:24 +0000
ROA not before: Thu 02 Jan 2025 15:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29676
IP address blocks: 109.224.192.0/20 maxlen: 20
109.224.220.0/23 maxlen: 23
109.224.222.0/24 maxlen: 24
109.224.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:0f:14:28:f8:10:f2:cf:31:30:ca:ec:ab:c2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Validity
Not Before: Jan 2 15:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a70fae5df8fa99c26ba818ba010fc36e145696f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9c:70:0f:5f:2e:99:71:f3:69:38:0e:64:f9:
4e:db:57:04:f4:73:d1:8d:07:87:80:04:43:af:7a:
f9:93:b1:ea:03:58:55:eb:18:13:c2:67:6d:73:4a:
39:53:ac:35:9f:c8:73:a5:aa:33:54:07:c3:37:83:
ed:95:9c:8c:00:ec:54:5c:d8:6b:8f:7c:e6:43:b3:
65:b0:5e:aa:62:9e:2b:66:62:a1:19:8b:8e:fb:c3:
97:b4:80:97:f2:8c:fd:3c:73:23:c9:f8:3b:1d:92:
59:6e:9b:66:3f:4c:40:ad:40:b6:85:b0:85:33:36:
49:6a:cd:bb:26:b4:2d:b7:30:ee:f0:1d:8c:df:88:
ba:0f:b2:e6:3c:45:f4:e8:55:4d:e1:63:a0:ac:8a:
21:3e:5d:a7:46:33:99:ea:4e:94:13:2e:0a:1c:8e:
7f:a0:65:06:ff:89:c7:c7:7b:76:c2:1f:a9:3b:c7:
86:74:e6:e6:ad:75:b2:f9:95:3c:7c:d2:9f:c1:32:
64:03:39:9f:8e:33:39:7d:9b:c5:73:14:64:00:4a:
52:c7:4b:ab:24:5a:f1:4e:2b:f5:e7:82:95:4b:46:
2a:65:21:52:46:fc:30:ee:87:aa:c2:18:dd:5f:6d:
48:81:f5:07:a3:95:22:ff:d1:3a:d0:9e:83:16:73:
e5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0F:AE:5D:F8:FA:99:C2:6B:A8:18:BA:01:0F:C3:6E:14:56:96:F7
X509v3 Authority Key Identifier:
keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/pw-uXfj6mcJrqBi6AQ_DbhRWlvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.192.0/20
109.224.220.0-109.224.222.255
109.224.233.0/24
Signature Algorithm: sha256WithRSAEncryption
60:9e:c6:ed:99:82:64:5f:13:f0:47:35:c9:7b:f4:e7:9e:8a:
72:53:0d:65:5d:dc:7f:9f:9e:3b:85:76:af:0f:5a:8e:5f:9b:
fc:99:e2:24:ac:2e:f2:db:1a:42:67:6c:94:16:fc:fc:e0:3c:
1c:73:06:79:a6:b3:83:c6:97:09:a5:d3:3d:c7:87:19:cd:04:
52:91:ba:97:40:80:82:42:63:7f:4f:24:34:8c:c7:36:40:c0:
48:92:11:d8:2b:35:7c:80:da:94:1a:cf:8e:54:f1:54:6a:db:
5d:17:54:e2:22:8c:58:29:71:79:3a:48:18:fd:62:51:ac:32:
0d:9d:e0:f9:2e:4a:11:0b:f0:d0:81:0d:b2:e3:84:90:ba:33:
3c:45:b5:84:c0:ee:fb:69:16:b3:04:3e:9d:8e:30:b1:54:a2:
1e:e7:ab:09:64:26:46:78:1a:20:99:46:ab:47:31:49:a8:cd:
9f:78:33:ec:29:73:40:c4:97:e5:c8:ec:b0:5e:55:5f:d8:9b:
1e:ef:76:90:c3:2f:b0:11:78:00:d9:13:9b:49:0f:52:b0:28:
7c:34:56:20:32:4d:91:ec:6e:5c:c2:7b:93:5c:13:1a:01:d1:
0d:dc:f6:fc:86:7a:42:a0:c4:5a:66:2c:f7:06:61:28:42:84:
1b:2a:05:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:22 2025 by rpki-client