Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/1k7B6OZhB1CFcx64eFikJ90IArY.roa
File: 1k7B6OZhB1CFcx64eFikJ90IArY.roa (raw, json)
Hash identifier: BObzQX0NmXL+SkwyifLtayjL5iVc0jp/QAmHV8ZAgNM=
Subject key identifier: D6:4E:C1:E8:E6:61:07:50:85:73:1E:B8:78:58:A4:27:DD:08:02:B6
Certificate issuer: /CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Certificate serial: 019423D7D71228129B7A68750C2D9D471489
Authority key identifier: CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/1k7B6OZhB1CFcx64eFikJ90IArY.roa
Signing time: Wed 01 Jan 2025 21:48:55 +0000
ROA not before: Wed 01 Jan 2025 21:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51247
IP address blocks: 109.172.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d7:12:28:12:9b:7a:68:75:0c:2d:9d:47:14:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Validity
Not Before: Jan 1 21:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d64ec1e8e661075085731eb87858a427dd0802b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:52:4c:e0:fe:4e:43:0e:fc:ea:f7:b2:5d:24:
fa:e5:b5:8d:53:cb:56:51:60:bd:b0:d4:b6:35:f0:
a5:f6:ab:34:c5:3a:a3:9f:5d:41:5e:20:4b:29:15:
d1:f8:ee:f7:70:70:ba:ea:eb:52:d5:fb:f1:a5:35:
8e:28:f0:0e:a0:d1:31:96:68:6a:e5:8c:96:9f:c3:
05:c2:4d:a2:93:0c:6d:97:cb:ca:32:93:15:14:69:
56:15:2b:e8:6c:ed:be:00:49:00:5f:22:82:cb:aa:
85:10:89:77:c4:d1:08:ca:13:59:36:8c:bb:37:c7:
73:73:ab:e3:f0:7d:f6:3c:bf:9e:bc:de:1b:a7:11:
60:81:16:44:64:43:69:04:8e:cd:9b:e8:32:09:56:
28:7e:c0:06:1a:55:4b:27:16:73:ec:7d:d4:80:32:
6e:a5:3c:7b:19:eb:35:67:36:df:b0:28:19:9b:c1:
10:84:7d:0c:6a:57:2c:3d:71:25:c8:86:0b:d3:64:
c3:a2:80:ac:fb:4f:3e:b1:3e:71:35:89:31:03:c2:
3d:09:79:59:b8:48:2d:b8:0c:bd:48:e2:e5:44:ac:
6c:1f:28:54:bc:06:0a:10:d3:07:45:06:ba:06:99:
ed:23:60:6d:49:55:72:d7:7b:8d:e5:01:28:26:5b:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4E:C1:E8:E6:61:07:50:85:73:1E:B8:78:58:A4:27:DD:08:02:B6
X509v3 Authority Key Identifier:
keyid:CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/1k7B6OZhB1CFcx64eFikJ90IArY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.172.92.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:eb:35:5e:cf:2a:5e:53:d5:14:37:4c:81:d2:c1:7c:00:d9:
7a:90:22:03:b8:64:88:e2:f6:65:36:b3:8b:59:e6:0c:10:87:
e0:fe:1c:39:42:5d:36:f2:6d:61:78:a8:86:b6:bd:a4:2f:0e:
29:e5:ab:cd:06:00:72:74:91:78:8e:db:56:5a:2e:71:03:f7:
2e:84:21:16:b1:dd:44:d9:57:49:47:13:24:16:20:c8:5a:28:
fc:55:f7:1c:05:0e:3e:78:6b:51:5d:b0:16:a3:2a:9b:71:8b:
b3:c6:f1:de:58:d6:73:72:50:d2:15:08:b2:0d:60:a8:dd:43:
c6:24:84:cc:2d:0c:ad:2a:ba:8c:d9:0a:aa:80:53:8a:02:2b:
d8:a0:1e:e9:a9:19:55:8f:fd:23:3d:69:b9:38:0d:ef:35:72:
57:49:d4:c3:e5:96:d6:44:1f:61:e2:ab:ce:18:eb:a9:ec:31:
ee:18:85:6b:00:33:5c:b5:2d:c9:dc:a9:04:46:42:e5:f5:3e:
f9:ec:0d:e4:27:9a:36:8d:48:64:d4:bf:79:62:7e:9a:12:07:
2c:b1:77:ad:27:0b:50:ab:d8:e0:1b:8c:81:06:17:56:70:c4:
56:d2:8e:52:6d:65:47:83:b1:c9:f8:61:d6:1c:95:b9:19:fe:
36:e4:f0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:22 2025 by rpki-client