Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/fSmHU7qVPsXJ1zTRPU2DaAM6o4o.roa
File: fSmHU7qVPsXJ1zTRPU2DaAM6o4o.roa (raw, json)
Hash identifier: R5qmNwXkQ6Mck+phKYHvxS5EGIGbn91KAbtmw4VqgXc=
Subject key identifier: 7D:29:87:53:BA:95:3E:C5:C9:D7:34:D1:3D:4D:83:68:03:3A:A3:8A
Certificate issuer: /CN=c93182d9666e419e667de860d544a50361b3223a
Certificate serial: 180E20
Authority key identifier: C9:31:82:D9:66:6E:41:9E:66:7D:E8:60:D5:44:A5:03:61:B3:22:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTGC2WZuQZ5mfehg1USlA2GzIjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/fSmHU7qVPsXJ1zTRPU2DaAM6o4o.roa
Signing time: Fri 18 Feb 2022 09:56:21 +0000
ROA not before: Fri 18 Feb 2022 09:56:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41528
IP address blocks: 109.235.175.0/24 maxlen: 24
109.235.174.0/24 maxlen: 24
109.235.174.0/23 maxlen: 23
2a00:1968::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1576480 (0x180e20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93182d9666e419e667de860d544a50361b3223a
Validity
Not Before: Feb 18 09:56:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d298753ba953ec5c9d734d13d4d8368033aa38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7b:b3:4c:56:5b:13:7a:53:21:a8:95:ac:6c:
ef:9a:bb:ca:c7:8a:4a:39:ac:96:c9:61:30:37:bd:
33:8b:88:1f:7a:27:dc:43:cb:a9:ed:c7:e4:32:4d:
d6:36:46:62:a4:71:2d:2c:4e:ca:e9:21:d6:43:4f:
7c:fd:57:3e:f5:71:2e:21:20:15:3c:76:d3:45:b1:
60:d0:c8:b3:b0:16:0d:36:32:e3:3c:be:64:ca:fb:
f8:87:95:f2:21:1a:e1:bb:af:d0:1c:38:19:ca:c8:
87:fd:82:f6:e8:4a:7a:60:47:fd:7f:47:b2:c3:47:
82:08:94:fc:87:61:48:b0:e8:6e:ea:98:11:c3:a4:
2e:0c:96:bb:c7:e1:df:35:fb:6f:52:f1:cd:de:38:
fa:0d:8d:2a:12:04:0f:2b:b9:d1:50:ea:10:b0:a9:
18:d7:fe:aa:a6:03:2a:f8:bc:95:98:45:ea:5b:37:
77:cc:42:b6:c3:04:57:73:13:ed:49:d4:89:ac:e8:
ee:f6:99:ca:c0:1d:ee:91:05:77:78:f1:9c:26:e2:
93:51:eb:15:9e:4e:e8:8b:58:8a:2a:cd:5c:bb:9f:
fe:3f:8f:47:ea:9c:2b:b4:1d:63:66:f7:80:5e:d2:
1d:c3:48:11:28:df:5a:ea:f8:3a:f6:23:9a:a1:7e:
f3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:29:87:53:BA:95:3E:C5:C9:D7:34:D1:3D:4D:83:68:03:3A:A3:8A
X509v3 Authority Key Identifier:
keyid:C9:31:82:D9:66:6E:41:9E:66:7D:E8:60:D5:44:A5:03:61:B3:22:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTGC2WZuQZ5mfehg1USlA2GzIjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/fSmHU7qVPsXJ1zTRPU2DaAM6o4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/yTGC2WZuQZ5mfehg1USlA2GzIjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.174.0/23
IPv6:
2a00:1968::/48
Signature Algorithm: sha256WithRSAEncryption
5a:bb:50:e9:86:16:3e:b2:52:a7:8b:5b:4b:9f:8c:05:6d:d8:
11:83:36:e8:c8:8b:53:6a:63:61:fa:17:78:3a:10:0b:18:fb:
ca:0f:1b:90:a1:0b:22:9d:e4:2a:30:f3:52:9a:0b:0e:49:09:
92:9e:12:85:ab:cb:3a:66:45:8e:88:ed:9a:19:be:d5:e2:3a:
00:e7:fa:bb:ba:cf:7d:e7:5d:a5:2f:b5:f6:63:34:1b:62:d8:
f3:fd:2a:04:44:e1:84:46:8b:da:b1:84:38:15:a5:89:16:ea:
ef:59:28:53:50:c8:65:d5:78:88:a3:14:6f:83:54:0e:06:21:
04:ea:14:b2:ec:87:6d:1e:fa:6f:cf:8e:e2:45:d8:75:a5:98:
c7:11:20:42:af:3f:d6:57:90:7f:db:cb:0a:47:54:9a:8b:9e:
d9:13:50:b6:3c:8a:1c:67:79:fc:b8:d7:ad:d0:4f:bf:7c:8d:
af:57:cf:9b:56:f6:87:6a:f0:91:f4:d8:2b:ed:8c:dd:ea:03:
63:eb:5b:5a:f1:8b:63:ba:3b:59:e8:eb:d8:be:fc:3a:45:16:
6a:77:bd:68:b5:72:a5:83:63:be:b9:04:31:39:bc:af:38:50:
d0:ed:d8:9c:54:a5:6a:c1:c5:e2:d9:ea:b0:27:4b:c1:a9:0d:
15:39:5b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:54 2025 by rpki-client