Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/f8Jfuz3olL_LUxLhvxrEUL1lq1s.roa
File: f8Jfuz3olL_LUxLhvxrEUL1lq1s.roa (raw, json)
Hash identifier: cCI2ME4NxfzXGTX0CfcXSoIgKsezN2dmQvlb97ihDFk=
Subject key identifier: 7F:C2:5F:BB:3D:E8:94:BF:CB:53:12:E1:BF:1A:C4:50:BD:65:AB:5B
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C8563AAA2A8C0D0FD0B2A7DA81BE4
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/f8Jfuz3olL_LUxLhvxrEUL1lq1s.roa
Signing time: Thu 02 Jan 2025 09:50:33 +0000
ROA not before: Thu 02 Jan 2025 09:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199377
IP address blocks: 109.62.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:85:63:aa:a2:a8:c0:d0:fd:0b:2a:7d:a8:1b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fc25fbb3de894bfcb5312e1bf1ac450bd65ab5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:38:7a:a6:c9:2e:a5:eb:24:c4:e4:a3:c1:b8:
95:15:f4:f9:c3:47:02:cc:51:6a:52:f7:ef:f0:43:
ab:5b:3b:db:7f:11:10:c8:b2:e5:bf:43:48:76:a4:
ec:32:55:c6:91:dd:6e:a1:44:78:da:bc:75:20:de:
8b:74:e2:0a:1c:ab:c0:78:1f:55:e9:f3:c8:9c:ee:
91:b3:b8:56:9b:1d:33:4b:ca:d9:2b:ae:38:67:d5:
03:f0:cf:03:8c:d1:52:4d:16:76:dc:8a:b8:26:98:
13:66:bc:1d:08:f5:81:48:d2:2e:57:ab:d9:02:68:
4f:c5:b6:bd:5c:b3:db:a7:22:11:18:4a:b9:45:9b:
5f:5d:88:5b:d2:9c:d4:75:2b:c7:b1:6f:77:79:ab:
0c:2e:e6:91:e5:5b:2b:0d:7d:68:dd:c0:db:0c:ef:
ee:ac:97:d8:a1:1a:b7:4a:dd:c3:a4:4c:19:49:3c:
ba:73:bd:3a:03:02:9d:e4:62:98:21:7e:e9:bf:07:
98:25:11:77:eb:be:7c:50:0e:da:2f:83:6f:a1:2b:
bd:08:d6:10:aa:8b:42:80:25:dc:16:1d:fe:dc:03:
ed:24:33:28:18:dd:17:20:96:5e:40:ba:3f:9e:5d:
c9:e3:55:b0:48:fb:0c:cd:ae:ac:1d:62:41:6a:80:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C2:5F:BB:3D:E8:94:BF:CB:53:12:E1:BF:1A:C4:50:BD:65:AB:5B
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/f8Jfuz3olL_LUxLhvxrEUL1lq1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.62.255.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c1:60:e3:d1:f6:8b:1d:5e:e0:21:a9:12:d5:13:b5:a8:2d:
1a:10:bc:3f:90:d1:e1:13:6e:94:7c:ae:60:0c:0d:40:dd:59:
d2:1f:47:fa:3f:22:86:af:c5:21:63:a9:78:64:7a:de:23:fc:
10:25:a3:c1:94:44:4b:f9:5e:e7:82:e2:97:8c:ff:05:a1:58:
43:75:c3:ab:3f:4b:c5:c9:0a:e7:bb:a9:98:fd:6f:d5:68:b3:
75:af:3e:78:f8:84:15:53:05:52:52:3d:45:8b:6a:a8:cd:1e:
5c:a8:63:75:c6:dd:fd:fd:23:89:6c:98:7e:78:78:a0:47:96:
0c:c5:52:a6:10:58:44:00:8a:16:9e:19:f6:1c:79:23:a0:9b:
57:f6:4f:18:f2:3a:68:91:df:6e:24:3c:9e:6f:83:5c:67:ac:
7c:17:ce:14:88:36:ba:5a:d6:cc:44:dc:83:ae:54:6e:59:5b:
99:2f:c7:4e:7b:d2:b1:ee:a4:8c:ce:3f:6a:0e:ee:cc:18:df:
65:76:5b:df:f8:e1:d8:3f:a8:37:60:ee:56:c8:84:1f:0e:37:
8c:82:31:dc:9e:24:60:51:45:27:a3:f9:39:63:e7:27:f7:9f:
a2:e8:a8:63:47:c5:95:e7:0e:f2:82:ea:ee:06:ca:4c:e5:99:
09:3a:fa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:38 2025 by rpki-client