Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/Fu58RJgsZ5Us0AAevq0rVOWRRzg.roa
File: Fu58RJgsZ5Us0AAevq0rVOWRRzg.roa (raw, json)
Hash identifier: ng5uPev1pyRZi4kTfCBU+j8vTTj6PtE4Pb5wITUaj0Y=
Subject key identifier: 16:EE:7C:44:98:2C:67:95:2C:D0:00:1E:BE:AD:2B:54:E5:91:47:38
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 0194266BEFE0217A4E74A108ED7901B31EF4
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/Fu58RJgsZ5Us0AAevq0rVOWRRzg.roa
Signing time: Thu 02 Jan 2025 09:49:55 +0000
ROA not before: Thu 02 Jan 2025 09:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202477
IP address blocks: 109.205.199.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ef:e0:21:7a:4e:74:a1:08:ed:79:01:b3:1e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16ee7c44982c67952cd0001ebead2b54e5914738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:36:83:8e:df:78:26:34:08:96:79:db:d2:
9d:07:f5:6e:bd:8f:9d:5e:87:46:f9:e5:25:8b:46:
41:b9:63:c8:24:62:89:95:3a:04:67:b9:60:a4:97:
e7:8e:ce:de:17:1f:01:d2:1e:51:38:b9:9e:ed:79:
e1:ac:96:d5:49:c0:18:9e:a1:41:ac:02:68:84:6c:
e0:fc:ac:53:c1:cd:02:8d:c0:aa:95:05:00:97:49:
7f:4d:c0:25:fd:37:e3:c1:33:a5:40:8b:94:09:ab:
a3:f0:0f:0f:41:09:79:17:fe:e5:69:9c:0c:2e:59:
75:1e:81:18:bf:71:28:d2:89:1d:91:ee:4e:24:eb:
e2:da:1f:8e:15:76:2c:99:74:e9:78:78:62:92:d0:
02:70:3b:ac:2c:f3:e4:c2:71:c5:4e:20:82:79:2d:
d3:1b:41:d7:c3:5c:f7:10:0b:81:76:63:9c:87:6f:
c9:eb:92:c1:68:18:d5:c7:fe:44:24:2a:14:83:14:
7f:a9:22:d5:e7:73:2c:64:4d:7d:10:fb:79:aa:f6:
af:bc:32:b5:4a:a2:07:67:55:bb:0d:e4:5a:30:5f:
52:29:c8:b8:30:47:8d:4e:94:18:b8:20:01:e1:76:
b7:b7:67:c0:2a:c8:1e:62:c6:ce:9f:0f:75:a8:07:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EE:7C:44:98:2C:67:95:2C:D0:00:1E:BE:AD:2B:54:E5:91:47:38
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/Fu58RJgsZ5Us0AAevq0rVOWRRzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.199.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a7:1f:f5:ec:44:dc:71:a8:68:e2:2d:89:2e:87:67:ec:4e:
13:30:96:71:bd:95:80:b3:03:e4:96:b5:1a:a2:9d:21:96:e8:
e1:c9:82:dd:dd:ec:a1:d6:90:76:7e:16:ae:ba:c7:7e:f4:87:
19:ca:be:f2:c1:50:02:7b:df:8d:c4:9f:5d:b3:58:56:f7:5c:
de:ee:ee:dd:5f:7e:22:04:f5:b3:b5:14:f6:80:f8:64:4b:9d:
ae:46:f8:7b:2a:c4:85:60:90:bc:52:7f:2e:20:c4:b5:62:06:
da:35:d5:cd:c6:ba:46:c0:46:d3:70:a1:8f:f3:9b:c3:a8:b4:
62:33:29:ff:39:cb:04:9e:ff:19:ed:a2:b6:12:2a:60:0b:e6:
f8:3c:08:56:ad:ee:f2:e7:cc:33:7f:25:7e:91:61:0c:c3:3b:
20:b9:a4:2c:f2:a1:82:81:c5:65:42:4d:2c:c8:9d:76:03:09:
89:b7:d3:9d:1d:64:50:f6:31:a2:94:d1:b9:83:83:28:2b:c7:
1f:e6:91:08:fb:dd:a6:55:14:86:35:d9:78:5b:1d:8e:dc:ee:
d3:93:1e:4f:56:ff:e4:c2:13:50:93:ea:b5:68:e1:f3:b4:a1:
18:0b:3d:7c:3f:71:bd:52:33:a5:23:c2:45:95:9d:4f:4e:f9:
f8:3e:69:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:49 2025 by rpki-client