Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/0FwdA4ymMzmi2xIxcm9ptvfrFQY.roa
File: 0FwdA4ymMzmi2xIxcm9ptvfrFQY.roa (raw, json)
Hash identifier: qKX9mbONM6/Xx6gF2emn3N/lO2VKopekGuKmwl2j208=
Subject key identifier: D0:5C:1D:03:8C:A6:33:39:A2:DB:12:31:72:6F:69:B6:F7:EB:15:06
Certificate issuer: /CN=1d53c2c8bb7364a553242f3f1773362227b30e94
Certificate serial: 0194244543C6E74E3CF1E9D8EB015EE186BE
Authority key identifier: 1D:53:C2:C8:BB:73:64:A5:53:24:2F:3F:17:73:36:22:27:B3:0E:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVPCyLtzZKVTJC8_F3M2IiezDpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/0FwdA4ymMzmi2xIxcm9ptvfrFQY.roa
Signing time: Wed 01 Jan 2025 23:48:26 +0000
ROA not before: Wed 01 Jan 2025 23:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59545
IP address blocks: 109.205.192.0/23 maxlen: 24
109.205.192.0/24 maxlen: 24
109.205.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:43:c6:e7:4e:3c:f1:e9:d8:eb:01:5e:e1:86:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d53c2c8bb7364a553242f3f1773362227b30e94
Validity
Not Before: Jan 1 23:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d05c1d038ca63339a2db1231726f69b6f7eb1506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:68:2a:8f:bb:b9:da:b7:6d:61:3f:5f:8b:10:
da:4d:be:60:d9:88:93:81:7e:ef:9e:df:a0:ca:72:
c5:7e:41:91:33:10:5d:24:3a:96:01:7c:57:38:f2:
a8:c9:f2:0d:f4:db:72:b9:85:00:94:64:38:c4:95:
ac:ff:ba:80:40:30:15:54:38:bd:cb:82:0e:93:bf:
df:1f:7a:fe:59:ab:66:5a:3c:68:c3:14:ff:ca:a2:
ea:8a:4d:77:a0:66:b7:da:30:f0:b8:86:c7:a4:68:
e5:98:7a:8b:ab:82:78:26:bd:45:f5:08:11:da:59:
68:4c:44:0a:39:36:ab:30:e4:40:36:38:e8:68:5f:
58:aa:c1:c6:6a:21:a1:8c:24:81:e6:2e:ef:a1:a5:
bb:ec:44:4f:b9:60:16:3c:ee:8b:f5:f7:0a:05:f2:
07:ab:de:bc:9a:cf:e2:4f:51:6e:83:19:b4:4f:9e:
ce:73:18:b3:8c:e7:90:4b:56:e1:2f:36:06:05:2c:
30:d4:ce:75:5b:98:1f:de:59:13:23:78:b6:03:5c:
e6:9d:fb:ca:e3:00:60:aa:ca:59:49:d3:56:aa:b0:
67:ab:d2:04:d5:71:30:b4:6e:f5:4e:2e:01:3a:1b:
6e:59:7c:79:7b:7e:63:f2:dd:cc:d3:17:55:ee:20:
2b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5C:1D:03:8C:A6:33:39:A2:DB:12:31:72:6F:69:B6:F7:EB:15:06
X509v3 Authority Key Identifier:
keyid:1D:53:C2:C8:BB:73:64:A5:53:24:2F:3F:17:73:36:22:27:B3:0E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVPCyLtzZKVTJC8_F3M2IiezDpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/0FwdA4ymMzmi2xIxcm9ptvfrFQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.192.0/23
Signature Algorithm: sha256WithRSAEncryption
41:fe:05:d5:9a:1b:14:a9:91:63:aa:28:a4:c8:43:48:3d:3e:
19:ff:60:06:42:25:d5:f3:96:20:63:7d:bd:52:cc:8f:04:37:
c1:56:7c:b6:b5:61:b2:3e:e2:49:2c:e1:0e:de:e3:11:a2:41:
a7:fa:a7:50:bd:ce:4a:7b:b8:8a:7a:0b:46:e2:21:f4:aa:83:
91:40:c3:6f:68:6f:a1:7a:90:e2:cf:4d:48:95:fb:90:ae:17:
67:40:ba:17:f2:3c:3b:96:78:06:d5:3b:15:52:99:0d:7c:84:
c9:1b:f2:96:a6:d5:66:4c:49:dc:02:ed:ff:24:67:cb:1e:a1:
d0:04:b3:69:d0:c8:bc:58:db:ed:c6:bc:22:6c:e7:a5:e2:30:
63:57:6f:b3:62:14:80:71:25:de:09:63:e1:5d:4b:7b:aa:5c:
63:d1:4f:92:f2:2a:30:7e:6b:5f:85:e6:23:55:f6:c0:10:8a:
51:2e:ea:96:7e:7c:8c:57:ea:e5:36:ac:45:12:7e:26:b3:a9:
3e:12:03:8d:90:f0:cc:83:b2:bd:35:cd:66:dd:19:8a:1b:74:
00:a3:0b:21:58:a6:38:ba:4e:d7:f3:5f:a9:56:47:af:ee:e9:
fb:0d:fd:19:87:ef:ec:d8:c5:af:f4:e2:41:34:73:7b:ea:05:
8e:b7:b2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:00 2025 by rpki-client