Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/m07MDAfpyBy-79ZtRPrjp1nHgUM.roa
File: m07MDAfpyBy-79ZtRPrjp1nHgUM.roa (raw, json)
Hash identifier: nt5wNRLp/3eGdwl0jwqVp6q4VVV8Q+vzoY7sROczSbU=
Subject key identifier: 9B:4E:CC:0C:07:E9:C8:1C:BE:EF:D6:6D:44:FA:E3:A7:59:C7:81:43
Certificate issuer: /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial: 019427483678D71AA6F78B3A8B2774D578C8
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/m07MDAfpyBy-79ZtRPrjp1nHgUM.roa
Signing time: Thu 02 Jan 2025 13:50:31 +0000
ROA not before: Thu 02 Jan 2025 13:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204629
IP address blocks: 109.70.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:36:78:d7:1a:a6:f7:8b:3a:8b:27:74:d5:78:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
Validity
Not Before: Jan 2 13:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b4ecc0c07e9c81cbeefd66d44fae3a759c78143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:29:26:d7:d0:a3:b0:ef:52:95:aa:25:33:
52:92:54:17:e9:20:b4:a4:93:83:cf:c1:94:a3:53:
b5:fb:96:2a:fb:1f:85:83:f6:17:08:27:bf:8b:f3:
27:ee:05:d2:e7:0a:e0:fd:5b:df:1b:a8:83:7f:91:
38:d0:3f:f8:b9:13:04:6f:b4:5a:e8:45:59:96:2c:
f0:3f:18:ce:7e:0e:6d:d1:7f:14:83:72:43:e0:36:
13:f2:39:f6:51:45:51:9a:46:73:f1:a5:d3:c4:ed:
2b:5d:af:79:a7:dc:30:0c:cf:e2:2d:c7:39:0d:89:
6b:e2:d2:70:df:ec:0b:ae:f9:34:81:f3:c1:06:56:
02:1a:8e:2c:5e:91:bb:8c:29:52:bb:bb:1d:f1:74:
1a:a7:00:9a:42:d3:be:8e:10:b6:42:39:82:62:c5:
51:83:56:87:ff:fd:7d:e6:77:6e:e9:95:51:8a:e4:
37:a5:a5:cf:d1:4d:50:26:73:a5:00:4a:db:47:79:
e1:59:72:11:f7:a8:ed:1f:ba:a5:14:ee:ec:cc:5f:
54:07:e9:7c:eb:39:04:73:4b:a9:a3:81:8a:66:6b:
71:3a:51:4a:8a:01:a3:5b:ec:f8:36:28:41:ff:ea:
a8:59:6f:fa:51:50:cc:17:9c:ce:e5:e4:8f:f9:8d:
6e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4E:CC:0C:07:E9:C8:1C:BE:EF:D6:6D:44:FA:E3:A7:59:C7:81:43
X509v3 Authority Key Identifier:
keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/m07MDAfpyBy-79ZtRPrjp1nHgUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:01:5f:e7:b5:8f:e2:a7:43:8e:e4:46:42:e5:63:a2:ab:83:
e4:53:0b:2d:9d:00:74:67:bb:c3:99:d7:6b:35:8a:e5:4c:05:
23:64:aa:ba:1a:50:ce:65:c8:7a:42:b8:77:bf:b2:71:e5:76:
c5:41:77:fb:7c:f6:94:84:42:dd:2e:a4:49:dd:06:8e:86:84:
f3:e0:f3:cb:c7:88:96:9b:1d:02:60:d5:80:de:d7:cb:b1:12:
d4:e1:47:c2:8c:2e:8b:57:e4:89:d2:92:0d:0e:fe:68:00:b5:
5e:57:c9:ee:6c:b2:e4:f9:88:af:90:6e:8d:1c:08:b1:d5:dd:
3b:3d:21:f4:0e:0f:b3:17:4d:86:cd:a0:6f:cf:a0:09:c7:3b:
24:d8:c6:33:85:12:00:a8:e4:09:c1:0c:dc:f3:50:4b:c5:98:
c2:e3:8b:66:09:3e:bd:a9:86:45:e5:db:2d:da:3e:bc:e7:c9:
62:3d:6d:11:3f:40:31:a2:05:1c:18:ac:30:dc:0b:17:2f:77:
3a:9a:16:42:7c:6b:79:c2:03:4d:84:f2:bc:d7:fe:c1:67:e1:
36:8d:ed:c0:c5:bf:1b:16:56:f0:c6:f6:0c:b5:a9:08:8c:b1:
da:29:28:a3:3e:0a:4c:12:dd:65:45:ad:65:7a:b3:66:6c:4f:
4b:d1:b9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:01:13 2025 by rpki-client