Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/adu-BzUlwng8dNdlq2MbiQQI92E.roa
File: adu-BzUlwng8dNdlq2MbiQQI92E.roa (raw, json)
Hash identifier: mG0AgTBEkkvkmMbJXQXBFpPow4/ZlBQH8HH4ZWbBppE=
Subject key identifier: 69:DB:BE:07:35:25:C2:78:3C:74:D7:65:AB:63:1B:89:04:08:F7:61
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258FA62BC3EF9E845B8AB134BF18C0B0
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/adu-BzUlwng8dNdlq2MbiQQI92E.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213816
IP address blocks: 109.196.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a6:2b:c3:ef:9e:84:5b:8a:b1:34:bf:18:c0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69dbbe073525c2783c74d765ab631b890408f761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c3:bb:10:48:ad:2e:9d:1b:2c:f4:0a:79:ea:
99:84:3f:e5:02:8b:5e:e4:b3:f0:47:af:71:de:28:
8a:cf:9d:70:96:05:aa:e5:00:e9:84:cb:2f:d0:c9:
b8:21:d3:24:a6:35:40:2f:f3:b0:b0:fb:24:c7:1f:
d4:7b:2b:17:14:65:2e:20:58:1e:fc:b0:86:2d:25:
16:7d:ac:bb:3d:4c:61:43:d6:ff:0e:44:86:ff:d3:
09:3f:e4:40:d2:73:66:5e:0c:0a:36:6e:dc:d7:78:
1a:fb:3e:97:51:11:1a:de:23:81:d1:78:c4:69:18:
d3:db:73:d5:2a:2c:c1:23:d1:f8:1a:a9:f4:de:83:
81:6d:4d:f3:f6:b0:08:63:b0:04:2a:ba:85:45:e3:
bd:fa:84:83:6b:03:88:70:26:75:31:5d:04:e3:eb:
cf:14:13:e6:1d:37:b0:93:e1:81:08:12:4f:96:16:
b9:51:70:e5:3a:94:b2:3e:93:93:da:17:5e:c4:9c:
6d:95:b1:83:28:66:57:e1:29:52:ef:ce:67:31:7d:
e7:2f:f0:ca:70:d1:c2:1f:31:f5:67:a4:b5:cb:7b:
22:6b:08:07:47:bd:6e:57:18:d0:d7:ab:f1:a7:91:
6a:9d:91:53:90:4f:e0:c0:aa:ca:6c:b9:57:78:99:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DB:BE:07:35:25:C2:78:3C:74:D7:65:AB:63:1B:89:04:08:F7:61
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/adu-BzUlwng8dNdlq2MbiQQI92E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.196.97.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d7:de:c6:44:66:08:6e:d4:48:ba:2f:6c:f7:61:b1:99:2b:
55:aa:86:f3:0b:d9:0a:0d:3f:8d:91:d9:26:a5:1f:95:9d:16:
dc:51:2f:b0:dd:3d:32:4b:26:b9:19:c9:41:45:41:b5:93:28:
62:50:5c:be:95:03:58:13:31:0a:56:99:be:b6:19:b1:2f:7e:
04:45:6e:6a:f1:12:52:72:04:37:a6:10:7c:43:f0:ec:a9:66:
f3:bc:8b:01:84:7f:d7:e2:cf:bd:d6:1e:02:bc:f0:1e:21:3d:
ab:00:6c:4e:23:50:3c:33:27:92:c7:6e:47:52:cc:6f:16:b1:
72:87:ca:a5:5e:92:d0:0d:e5:6d:99:34:2d:35:83:25:07:50:
fd:18:f0:ac:31:08:0b:30:b6:ed:3f:18:3d:7a:4e:c1:c0:cf:
be:cf:83:bf:36:d5:8f:43:e8:bb:5e:65:c7:e9:10:39:f8:3f:
f6:f3:0f:04:9d:73:21:7c:0a:56:08:48:86:e5:e2:03:de:8f:
46:dd:87:db:06:24:35:b4:8d:20:85:33:e5:27:60:9f:1d:72:
a9:fb:27:77:e2:b7:11:8f:35:aa:e0:25:12:c0:88:c3:a1:b8:
f7:8e:00:b2:81:63:88:6f:a2:2b:54:38:a3:22:81:bb:ec:46:
6d:46:0a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:47 2025 by rpki-client