Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/9ltoRvF8IrCagfv5cCrEK7BRKu0.roa
File: 9ltoRvF8IrCagfv5cCrEK7BRKu0.roa (raw, json)
Hash identifier: YJOxESLE8nePOUhojbtV7GmOsBKkJt32JlcUp20ccWw=
Subject key identifier: F6:5B:68:46:F1:7C:22:B0:9A:81:FB:F9:70:2A:C4:2B:B0:51:2A:ED
Certificate issuer: /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Certificate serial: 01942444A7CCC78D116ABF0C0202D4048544
Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/9ltoRvF8IrCagfv5cCrEK7BRKu0.roa
Signing time: Wed 01 Jan 2025 23:47:46 +0000
ROA not before: Wed 01 Jan 2025 23:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202367
IP address blocks: 194.107.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a7:cc:c7:8d:11:6a:bf:0c:02:02:d4:04:85:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Validity
Not Before: Jan 1 23:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f65b6846f17c22b09a81fbf9702ac42bb0512aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:74:ca:75:85:57:66:80:d2:e7:ce:42:f2:
8f:18:2a:c0:1d:a7:55:d0:69:24:41:bf:77:a1:dd:
ab:6b:75:b5:e0:0c:e0:a4:05:be:20:0e:12:7f:53:
80:18:05:ee:11:d0:1e:a4:ec:1c:0c:98:95:83:c4:
39:32:15:e6:45:da:be:cb:4c:d0:95:ca:5b:5a:97:
91:37:8a:07:a5:48:46:91:3d:a3:ea:18:5f:b9:88:
f9:d1:55:5e:c2:00:77:16:16:be:f5:5e:3d:16:7f:
d5:bd:d8:86:57:23:ca:c3:19:67:0f:23:3b:4d:80:
a3:a6:bd:94:e2:57:0a:fa:b2:7e:7f:00:5a:c6:b3:
40:c0:b4:9f:1c:07:9b:20:19:8f:81:b4:f3:e0:c8:
24:8b:1d:32:ac:49:4d:e9:a9:7b:00:bf:2c:63:3c:
0d:40:f5:a1:b3:93:da:db:31:eb:e1:7c:2c:2e:bc:
6d:6c:f7:79:a1:18:d2:b1:d0:ee:be:2b:8b:66:1c:
b1:c4:9a:53:f2:18:8e:3d:f7:72:03:d4:f2:63:c8:
f8:64:58:89:18:1a:32:19:9c:7a:2e:98:ae:a2:af:
ed:db:37:f2:6f:17:77:f0:2b:4b:ae:bf:54:a7:6b:
44:91:89:87:00:6d:08:f3:46:f4:ea:4f:18:fd:29:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5B:68:46:F1:7C:22:B0:9A:81:FB:F9:70:2A:C4:2B:B0:51:2A:ED
X509v3 Authority Key Identifier:
keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/9ltoRvF8IrCagfv5cCrEK7BRKu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.136.0/22
Signature Algorithm: sha256WithRSAEncryption
79:b4:5d:7c:3e:2f:5b:94:a9:95:fe:e7:89:39:43:2c:4c:75:
e6:37:98:a9:a0:98:e5:84:50:63:5b:6b:bc:3a:2b:50:d6:0d:
a1:01:80:cf:b8:6a:14:bf:4d:e6:4f:c0:ed:bd:b2:1d:a1:54:
2f:99:09:a5:65:7d:ca:db:28:cb:1e:b5:6e:2d:87:bd:4d:fa:
6a:83:01:85:d0:35:7b:66:bc:78:81:32:27:b3:08:a3:f1:dc:
ae:9f:5f:59:60:bb:fa:8f:96:09:f5:ff:5d:cc:76:c2:cd:ad:
dc:1f:a5:0b:69:a3:87:45:66:f8:6f:ef:a2:9a:d3:9b:50:dc:
7e:1f:90:ed:8d:9f:38:61:cd:05:92:27:1c:1a:07:85:63:8e:
56:18:41:05:1e:6c:e0:4e:20:db:dc:6d:dc:54:82:af:12:a4:
f2:98:9f:17:c6:22:86:ba:31:59:d8:b2:ed:d8:6c:0a:c2:25:
af:cf:ba:86:f9:4b:67:4d:9a:b3:6e:89:dd:9c:73:5e:d7:32:
64:de:34:fe:e4:bf:8f:fd:34:45:e1:ac:e5:bd:f9:50:7a:66:
f8:8e:f5:03:e5:0d:4c:ca:bc:98:d6:80:c5:f9:2d:9c:24:c1:
3c:9f:34:db:7e:d1:a7:3e:e7:b4:e2:0e:db:3f:74:4d:cb:09:
2a:92:d0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:07 2025 by rpki-client