Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/ibDNoVPt_SWuF1TTYGcbR_ptYMU.roa
File: ibDNoVPt_SWuF1TTYGcbR_ptYMU.roa (raw, json)
Hash identifier: ul6C7Hw2mOMrIR7JJ3pVvWUBrEsSVBHfGtaoivQYtXM=
Subject key identifier: 89:B0:CD:A1:53:ED:FD:25:AE:17:54:D3:60:67:1B:47:FA:6D:60:C5
Certificate issuer: /CN=01423ad4d629b2f828b79f00ac40388e37b8e252
Certificate serial: 0194228DDBFE99C88DB9F9B43157C9D96771
Authority key identifier: 01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/ibDNoVPt_SWuF1TTYGcbR_ptYMU.roa
Signing time: Wed 01 Jan 2025 15:48:29 +0000
ROA not before: Wed 01 Jan 2025 15:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61355
IP address blocks: 185.234.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:db:fe:99:c8:8d:b9:f9:b4:31:57:c9:d9:67:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01423ad4d629b2f828b79f00ac40388e37b8e252
Validity
Not Before: Jan 1 15:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89b0cda153edfd25ae1754d360671b47fa6d60c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:7d:a9:00:d4:1a:ce:e0:62:4d:00:71:a1:
d4:37:8c:9c:69:66:62:f2:d5:eb:44:46:e0:ea:e5:
b8:f3:32:b5:0d:a6:81:c2:d6:b2:ea:d3:f1:a3:13:
5c:85:a0:fe:ac:7d:36:90:46:e6:bc:2a:66:d6:29:
0b:a2:47:49:69:a6:60:ff:bf:71:07:83:2b:f9:15:
08:02:5d:3b:62:69:7b:ff:3e:6d:14:e9:e2:e5:81:
9a:5b:77:5c:05:23:11:c1:e4:16:e0:ba:1d:10:46:
4b:3a:90:b7:e5:17:65:ad:8b:a4:69:53:c0:3c:fc:
44:30:df:1e:ec:4c:d2:ff:eb:12:1e:3f:aa:cc:74:
ec:dc:c0:6a:a4:60:1b:87:1a:e6:6e:34:88:84:95:
41:59:d2:7d:2d:dd:b9:f9:36:b9:27:24:37:2d:1e:
fa:9f:64:ac:d2:fc:54:af:1a:33:ca:a0:46:ab:4a:
80:91:06:b3:25:8c:cd:be:20:03:85:03:8a:28:65:
74:3d:a9:f8:fe:ec:84:0b:32:16:66:7d:8b:2b:e0:
33:72:b3:bd:cc:ed:2c:e1:47:b9:d5:4b:55:70:a7:
5e:d7:fa:55:44:e6:46:cb:18:4a:60:9a:54:32:24:
13:ff:97:06:4a:b0:d8:d4:d8:ac:14:cf:44:a3:94:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B0:CD:A1:53:ED:FD:25:AE:17:54:D3:60:67:1B:47:FA:6D:60:C5
X509v3 Authority Key Identifier:
keyid:01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/ibDNoVPt_SWuF1TTYGcbR_ptYMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.109.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:b0:46:77:38:dd:95:8d:28:25:b5:ca:56:65:5d:52:49:2f:
83:27:db:77:9d:56:ef:ce:c4:5e:cd:8a:71:21:de:a1:d6:97:
b5:2d:68:4b:0d:a9:8b:14:c2:3b:31:72:6a:52:28:7d:d9:d7:
cc:cb:c5:9c:60:92:53:75:03:9a:a9:f2:57:cc:08:91:2d:b1:
1e:40:1b:05:12:cd:b9:13:ce:6d:99:80:d7:41:2e:1b:2f:6c:
6e:c4:b7:11:fa:26:1e:a1:88:bf:db:58:a6:ee:cb:51:65:6c:
79:11:ee:30:a3:e0:3d:b1:04:dd:76:e6:64:ed:b7:c9:35:b3:
f5:bf:06:ed:c4:31:9c:36:27:0b:e6:92:c9:39:fd:3b:80:6b:
a4:02:46:77:8b:76:10:f6:e4:e4:97:7d:41:b1:83:1b:b1:68:
f8:03:97:04:5a:82:b2:43:92:51:c5:6e:03:46:0c:ce:8a:0b:
85:62:a8:20:61:ff:2d:45:83:59:43:e4:40:f5:c1:41:ef:f7:
44:9c:a0:32:26:b1:e7:5b:82:40:6a:6c:4e:4f:34:0e:a3:f5:
fb:91:ca:1d:ca:5e:98:f0:19:be:17:21:2c:c5:92:d9:20:ad:
66:42:6a:a2:f4:40:f2:8c:ff:af:61:e9:35:de:e0:e3:f0:83:
56:dd:7a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:17 2025 by rpki-client