Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/YzKUAEeM3CnWsdIrwfHnUsBhQcI.roa
File: YzKUAEeM3CnWsdIrwfHnUsBhQcI.roa (raw, json)
Hash identifier: 4/OtRTmHPZoVC5SXZxinCft/J9eQslnnS2y+eRKDbVE=
Subject key identifier: 63:32:94:00:47:8C:DC:29:D6:B1:D2:2B:C1:F1:E7:52:C0:61:41:C2
Certificate issuer: /CN=5157c87d111c8050fd5c9ac2b06be62323675033
Certificate serial: 019421445D6EC524FCFF4854BD1EBCD51EF3
Authority key identifier: 51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/YzKUAEeM3CnWsdIrwfHnUsBhQcI.roa
Signing time: Wed 01 Jan 2025 09:48:35 +0000
ROA not before: Wed 01 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58082
IP address blocks: 109.233.128.0/21 maxlen: 24
109.233.128.0/22 maxlen: 24
109.233.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5d:6e:c5:24:fc:ff:48:54:bd:1e:bc:d5:1e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5157c87d111c8050fd5c9ac2b06be62323675033
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63329400478cdc29d6b1d22bc1f1e752c06141c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:69:dd:cb:e1:49:21:d4:ab:17:6e:43:91:
93:b8:bb:10:ba:3c:97:9d:10:de:f6:61:cb:3b:5d:
99:fa:eb:27:1c:38:fc:c1:36:60:6b:3c:6d:5f:fa:
62:6e:61:a2:dd:ef:8f:32:9e:99:f0:e1:4c:5f:59:
e6:24:c1:b4:8e:4a:69:a4:b3:90:c3:c1:e1:64:c7:
ac:17:3b:f3:22:61:ef:0b:01:59:bc:05:24:d2:2e:
a2:21:68:ca:55:5b:df:9e:bf:f1:be:ea:3f:2b:bf:
8d:94:86:b6:2f:2d:ca:6f:c0:f7:4e:28:ef:b1:19:
98:af:32:a4:e9:32:1e:fb:19:a5:df:35:f9:1e:b6:
2c:2f:b1:54:52:bf:20:d7:68:95:77:05:3e:78:6a:
77:35:74:17:2c:0f:a8:c3:58:82:75:65:c6:54:18:
80:29:5c:99:2f:13:d5:73:6d:1f:6e:60:ee:d1:2f:
91:80:ce:8c:e6:0f:dd:50:eb:17:8d:0c:6e:58:8f:
12:bc:b2:bc:8f:cd:13:85:7f:ac:64:e2:09:01:c2:
15:02:fa:89:6f:4a:6a:cd:07:a9:90:b3:fd:a3:1f:
66:2e:fe:a2:04:7e:8c:f6:60:12:b9:bb:b7:68:d0:
5b:21:73:d7:3f:01:bc:5b:8a:df:c4:8b:d1:c3:0b:
1d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:32:94:00:47:8C:DC:29:D6:B1:D2:2B:C1:F1:E7:52:C0:61:41:C2
X509v3 Authority Key Identifier:
keyid:51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/YzKUAEeM3CnWsdIrwfHnUsBhQcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.128.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:a2:02:f6:91:17:f9:99:42:ab:26:71:4e:95:66:09:bf:8b:
b7:d4:f0:6d:f6:6d:3b:de:e5:df:b6:f7:ac:60:1d:9f:34:e8:
3d:90:f2:85:37:08:82:46:63:27:2f:7b:34:23:4d:6c:84:5d:
be:95:74:29:b6:3b:ad:be:06:4c:b3:1b:d5:3c:1c:13:bc:12:
b7:f1:d4:82:53:32:35:2b:d6:60:f5:b1:07:5f:3c:99:70:5c:
32:e9:e8:3a:e9:06:ae:24:9d:50:5c:72:a1:93:83:f1:6c:24:
97:7a:19:a0:ae:c3:98:f7:81:71:65:5a:1d:a4:cd:9a:52:37:
1e:16:b0:d9:3e:34:ca:ff:b3:06:6b:d1:02:17:c9:0e:22:b5:
8d:6c:32:6b:56:90:9e:6c:a5:f3:22:56:ca:a5:a1:d4:f4:ea:
c6:14:32:5d:a0:df:c7:7f:27:f8:01:3e:99:97:0c:8b:39:a1:
40:ac:96:89:f9:1e:ca:36:bf:14:3c:15:40:bb:93:09:b2:40:
64:c9:3c:08:75:b7:3b:ec:89:bc:a5:e9:52:30:b8:b3:82:d0:
0c:71:7a:4c:65:17:a5:2d:14:73:bd:3d:8a:23:d9:68:a9:6f:
29:ba:0a:89:2d:0f:95:0e:7c:be:71:2e:77:06:c2:79:f5:3c:
4b:4a:bc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:34:13 2025 by rpki-client