Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/_4mHAp6kpGlHe9veqUWZlR3bnno.roa
File: _4mHAp6kpGlHe9veqUWZlR3bnno.roa (raw, json)
Hash identifier: AE1aWk5k7KrYjZa6mqR0Z0k8/+EX2mo7iBxCrqvE0fg=
Subject key identifier: FF:89:87:02:9E:A4:A4:69:47:7B:DB:DE:A9:45:99:95:1D:DB:9E:7A
Certificate issuer: /CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
Certificate serial: 019422FC4504DD244F2B8176A1413A4E580B
Authority key identifier: D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/_4mHAp6kpGlHe9veqUWZlR3bnno.roa
Signing time: Wed 01 Jan 2025 17:49:05 +0000
ROA not before: Wed 01 Jan 2025 17:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39590
IP address blocks: 109.105.124.0/22 maxlen: 24
2001:948:40::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:45:04:dd:24:4f:2b:81:76:a1:41:3a:4e:58:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
Validity
Not Before: Jan 1 17:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff8987029ea4a469477bdbdea94599951ddb9e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:07:39:13:f2:f1:ea:0a:21:a5:db:4d:f5:
47:fe:5c:56:76:91:96:0d:e7:7f:76:5d:3a:0e:f4:
eb:44:16:2e:b6:93:7a:6b:d1:88:e7:4d:63:13:f0:
b2:fd:31:35:04:d2:ae:46:7b:f3:92:bb:e9:2a:66:
7c:68:55:2c:10:c6:c2:04:9c:04:1e:14:1d:ad:e9:
34:51:f2:de:87:7a:6a:3e:b9:94:39:66:6c:cf:c8:
47:d2:98:8d:7f:bc:c2:a5:c8:fc:6e:f7:8d:d0:21:
46:60:6e:34:29:27:80:9f:04:ec:6c:f7:fa:a1:e2:
12:96:df:0a:bf:80:2a:b2:a4:50:f8:61:ba:5a:e2:
78:d7:9f:b3:eb:35:83:a2:98:9b:7c:26:5f:9e:7d:
9a:f1:0b:dc:d1:fc:4a:a4:69:3a:2f:9a:a6:4e:9c:
3a:9d:ed:90:dd:32:ae:8c:e8:39:d1:ff:53:8b:27:
3d:2e:57:cf:65:b3:d9:9c:9e:4a:14:c7:ad:a9:ee:
73:63:fb:a2:a0:10:a9:bb:20:ea:b1:46:8d:9c:97:
38:4a:f9:7d:7e:68:75:4c:9b:4b:10:23:85:74:ee:
77:f0:08:50:fc:4c:2d:10:4a:b7:4e:bc:35:5c:e3:
7e:6e:e8:1d:27:f2:68:08:58:0c:6e:10:7a:7f:60:
39:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:89:87:02:9E:A4:A4:69:47:7B:DB:DE:A9:45:99:95:1D:DB:9E:7A
X509v3 Authority Key Identifier:
keyid:D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/_4mHAp6kpGlHe9veqUWZlR3bnno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.124.0/22
IPv6:
2001:948:40::/42
Signature Algorithm: sha256WithRSAEncryption
a5:33:76:69:50:82:5f:96:63:b3:b2:1e:5b:52:c9:b3:d2:7e:
a8:e9:eb:af:e1:dc:57:47:8a:cd:7b:89:67:2b:a0:6d:e5:40:
14:f1:59:d3:a5:98:c0:8c:d2:fe:fd:93:9c:cb:7a:1b:61:2e:
90:67:05:32:d1:8a:f0:41:2c:3e:08:8a:35:2f:6e:35:c0:9d:
a6:7d:38:01:b9:73:28:69:0d:d0:6d:42:e0:4c:53:b0:52:79:
28:6c:3a:57:5f:71:2a:a1:11:af:85:14:45:e6:83:74:9f:85:
81:d2:ab:9c:36:bc:6d:bf:85:9d:1e:58:65:6d:7d:09:e3:a7:
d6:8e:dd:79:e3:ce:0b:e6:70:45:f0:35:58:64:40:7b:83:87:
fc:c3:38:24:af:8d:ad:de:8a:2e:76:d1:74:4f:d6:b4:65:6c:
0f:f1:92:32:09:e9:07:db:86:cd:a0:a5:04:ff:06:d6:3a:9a:
a3:3c:a8:31:d1:cf:a8:bb:fa:e5:21:6f:45:12:32:e9:38:3f:
30:73:de:20:c7:6b:92:4c:20:da:38:09:c3:d3:c0:38:06:e2:
5d:82:6c:e8:ca:15:c8:a5:dd:3a:0d:f6:98:3e:55:01:4f:b3:
d3:91:1b:33:0c:2b:b6:ff:67:4f:56:19:ec:46:d5:62:81:68:
27:ac:c2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:13:13 2025 by rpki-client