Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Mkotcv7SVmhVByeOdk7RYd0Gupw.roa
File: Mkotcv7SVmhVByeOdk7RYd0Gupw.roa (raw, json)
Hash identifier: kugv35F9Yygi1KlvVSFAeTblpUz5gnszp5yric0gM3k=
Subject key identifier: 32:4A:2D:72:FE:D2:56:68:55:07:27:8E:76:4E:D1:61:DD:06:BA:9C
Certificate issuer: /CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c
Certificate serial: 01941F8CA7F54AE978AE83D31E3746131FD5
Authority key identifier: 3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Mkotcv7SVmhVByeOdk7RYd0Gupw.roa
Signing time: Wed 01 Jan 2025 01:48:19 +0000
ROA not before: Wed 01 Jan 2025 01:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51420
IP address blocks: 109.164.64.0/19 maxlen: 19
109.164.64.0/20 maxlen: 20
109.164.80.0/20 maxlen: 20
109.164.83.0/24 maxlen: 24
109.164.84.0/24 maxlen: 24
109.164.85.0/24 maxlen: 24
109.164.87.0/24 maxlen: 24
109.164.88.0/24 maxlen: 24
109.164.89.0/24 maxlen: 24
109.164.90.0/24 maxlen: 24
109.164.91.0/24 maxlen: 24
109.164.92.0/24 maxlen: 24
109.164.93.0/24 maxlen: 24
109.164.94.0/24 maxlen: 24
109.164.95.0/24 maxlen: 24
109.164.96.0/24 maxlen: 24
109.164.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a7:f5:4a:e9:78:ae:83:d3:1e:37:46:13:1f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c
Validity
Not Before: Jan 1 01:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=324a2d72fed256685507278e764ed161dd06ba9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:f7:63:83:de:9c:f6:05:a0:3e:34:08:c2:
b0:5f:d6:4e:b8:31:94:37:ec:31:76:31:56:b0:f5:
96:61:4a:65:ab:2a:a8:03:34:ff:a5:d6:ba:62:22:
43:35:84:b1:39:c7:64:54:f7:57:91:03:74:dc:76:
3f:64:e7:23:63:7f:a6:f4:19:3a:6f:90:c9:76:2d:
bd:24:82:ca:d1:03:a6:16:bf:34:7d:c3:a8:eb:36:
a8:31:d0:d5:43:53:26:a5:72:bd:23:a4:29:0f:b9:
e5:84:de:72:d6:1c:ed:c2:8c:67:cf:ab:23:ad:d3:
a8:08:a4:14:e5:36:f2:f8:5a:69:9d:76:fb:c8:0b:
26:b6:b7:33:7c:7d:43:68:59:ba:11:0b:33:98:d8:
78:f3:21:24:be:62:45:6f:20:1d:61:d6:e8:0c:d4:
80:e0:5b:23:7f:97:f2:bc:c3:f9:92:a0:9e:73:48:
ec:81:08:e9:be:df:b3:26:89:7d:46:15:97:ec:d0:
57:36:23:a5:2b:f8:22:8d:94:23:53:70:0c:b8:71:
b7:55:ba:89:3d:6f:7f:c6:50:48:fe:b9:04:65:86:
8f:38:0a:5e:c3:7d:90:bd:46:26:e0:1b:00:ea:8e:
cb:72:17:a9:46:80:52:8c:1c:bf:16:8f:35:4e:2b:
33:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4A:2D:72:FE:D2:56:68:55:07:27:8E:76:4E:D1:61:DD:06:BA:9C
X509v3 Authority Key Identifier:
keyid:3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Mkotcv7SVmhVByeOdk7RYd0Gupw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.164.64.0-109.164.97.255
Signature Algorithm: sha256WithRSAEncryption
01:63:a6:cc:20:8d:23:42:c8:d8:39:88:1b:3c:7a:48:13:2d:
48:96:3e:36:6c:6f:03:1d:c7:bd:5b:16:a5:55:df:9b:ef:4f:
e6:7d:6d:68:88:c9:60:b2:ff:8f:7a:4c:86:43:ff:e9:a6:c8:
83:87:93:e3:82:4f:b8:16:12:92:7e:af:16:e6:27:bd:af:10:
d2:71:92:46:cb:12:d2:cb:97:f7:7b:00:87:31:9a:0d:a6:89:
b3:fb:85:91:d8:44:8c:5c:bd:ec:6f:44:80:2b:99:16:b0:92:
1f:16:eb:98:dd:a8:f7:9e:89:af:60:a0:42:d7:ab:34:83:5d:
d6:95:30:5d:43:2f:7c:b3:58:e9:23:bb:8b:6f:f6:34:b4:b8:
79:af:64:e8:bf:52:3f:ef:9c:95:82:97:3e:aa:d0:cb:e3:1b:
4c:38:99:75:84:07:df:55:bc:0b:cd:82:8e:06:8e:4c:ea:8e:
8a:d0:2f:79:ee:8a:06:2b:b8:bd:52:78:30:2b:5d:7f:dd:05:
a1:78:f7:be:f7:e0:85:c8:42:2c:e5:d1:05:f8:1f:68:3c:ca:
35:4f:bc:62:0e:5a:92:dc:2d:40:77:1e:53:23:a6:dd:11:6a:
32:b2:6e:98:16:74:71:4f:43:36:86:99:39:98:e4:31:fd:33:
03:bc:a7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:21:51 2025 by rpki-client