Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/mpjXcuJiQ7-uSg-Pyvcd5Jyi9CQ.roa
File: mpjXcuJiQ7-uSg-Pyvcd5Jyi9CQ.roa (raw, json)
Hash identifier: Lu5r9i8ixXyJ5ES8WKQvjbTrdOTsSJq3NWag7o5zs2g=
Subject key identifier: 9A:98:D7:72:E2:62:43:BF:AE:4A:0F:8F:CA:F7:1D:E4:9C:A2:F4:24
Certificate issuer: /CN=4e64f2a0b26df43de723099a63a723b5beb97f5a
Certificate serial: 0100B523
Authority key identifier: 4E:64:F2:A0:B2:6D:F4:3D:E7:23:09:9A:63:A7:23:B5:BE:B9:7F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmTyoLJt9D3nIwmaY6cjtb65f1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/mpjXcuJiQ7-uSg-Pyvcd5Jyi9CQ.roa
Signing time: Sat 01 Jan 2022 07:54:59 +0000
ROA not before: Sat 01 Jan 2022 07:54:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207046
IP address blocks: 109.205.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16823587 (0x100b523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e64f2a0b26df43de723099a63a723b5beb97f5a
Validity
Not Before: Jan 1 07:54:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a98d772e26243bfae4a0f8fcaf71de49ca2f424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:c1:bf:74:ae:bb:35:e0:6c:b4:2a:02:cf:
c2:74:9d:fd:71:85:51:9a:a8:5e:1a:76:67:9d:22:
3f:94:f9:e7:d4:8a:b8:01:44:b6:72:32:b5:54:20:
bc:36:92:ae:b9:38:d1:1d:3a:e5:39:17:ae:e5:4b:
e9:bb:20:9c:30:79:01:01:24:1e:52:e7:d3:05:d2:
a5:8d:8c:13:9c:da:83:00:6a:df:b3:1a:30:9a:7d:
96:a2:32:03:78:1f:be:b8:f9:59:d4:93:f1:40:7c:
10:fc:1d:5d:3c:fd:07:b0:5e:f2:f8:7a:92:66:35:
d2:40:21:c0:e2:01:1d:0b:71:38:57:5a:5d:59:c1:
15:b6:13:b3:0f:c2:31:b3:c4:b9:c4:75:7f:30:88:
3f:71:30:d8:ea:f8:a3:21:75:32:8e:61:ed:3f:64:
9d:ea:6e:38:cd:72:5d:fd:2f:8e:bd:de:e2:b8:38:
b9:1e:b3:2b:dc:68:ba:e7:16:62:95:dd:0d:56:62:
99:c5:d3:65:b1:86:5f:fd:a2:0f:12:48:9d:d7:ba:
71:3a:0a:26:d8:65:82:d4:d7:bc:0b:43:89:b6:6a:
b8:bd:b0:fc:83:8f:83:60:52:c5:01:79:c8:e9:b2:
b0:30:73:09:14:ab:fb:f8:40:37:6f:34:6e:56:95:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:98:D7:72:E2:62:43:BF:AE:4A:0F:8F:CA:F7:1D:E4:9C:A2:F4:24
X509v3 Authority Key Identifier:
keyid:4E:64:F2:A0:B2:6D:F4:3D:E7:23:09:9A:63:A7:23:B5:BE:B9:7F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmTyoLJt9D3nIwmaY6cjtb65f1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/mpjXcuJiQ7-uSg-Pyvcd5Jyi9CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/TmTyoLJt9D3nIwmaY6cjtb65f1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.60.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:51:77:80:f7:a9:b0:9c:18:72:2e:ed:a7:f0:f8:65:ff:fe:
5a:22:05:93:b7:99:9c:d1:86:55:01:e6:19:b2:eb:16:b8:6e:
54:cb:f3:52:14:eb:84:e6:d3:8e:e8:71:11:ac:cc:44:c6:ae:
8d:5d:25:46:f4:18:88:2d:8b:2d:8a:bc:fd:eb:29:60:8c:cf:
72:b4:1c:0c:b2:e0:fd:35:35:bc:e6:7f:77:a3:44:2a:8e:3b:
91:86:32:da:05:84:65:7f:4c:e9:2c:20:10:a9:a5:42:b0:7c:
ab:31:25:c2:e5:a6:5f:0d:9c:99:5a:5c:f7:94:bb:aa:f3:64:
4d:af:8c:68:2d:c1:78:13:5e:b2:10:23:99:38:d7:89:f0:8b:
0b:1a:11:1a:f7:4d:c5:53:be:90:bb:b2:2b:f9:10:70:ca:b4:
b3:34:99:c0:61:fe:44:1c:2d:5f:35:39:88:f5:0f:27:70:55:
2f:e9:3e:3a:b7:a7:35:cf:3e:b4:8b:28:e8:68:ce:18:13:46:
70:7d:3f:9a:af:65:b9:48:b1:96:3f:cd:38:86:ee:3a:69:14:
c1:41:20:82:c3:cd:74:1d:10:b5:11:44:f4:6f:73:16:68:ee:
f8:f7:4a:fe:f9:c8:f0:2a:27:69:18:3f:ed:a1:25:da:8a:30:
6a:8b:7d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:05 2025 by rpki-client