Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/n3lj8Imlf54KOqF_Kqk-h0qcwVk.roa
File: n3lj8Imlf54KOqF_Kqk-h0qcwVk.roa (raw, json)
Hash identifier: 2POYPsdH+jKImtpOmPpWEy8yit+ATY6Eb8geD/u6vK4=
Subject key identifier: 9F:79:63:F0:89:A5:7F:9E:0A:3A:A1:7F:2A:A9:3E:87:4A:9C:C1:59
Certificate issuer: /CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Certificate serial: 0194228E06B91450B40D418EFD4519F97B58
Authority key identifier: CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/n3lj8Imlf54KOqF_Kqk-h0qcwVk.roa
Signing time: Wed 01 Jan 2025 15:48:40 +0000
ROA not before: Wed 01 Jan 2025 15:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50837
IP address blocks: 109.224.243.0/24 maxlen: 24
185.113.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:06:b9:14:50:b4:0d:41:8e:fd:45:19:f9:7b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Validity
Not Before: Jan 1 15:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f7963f089a57f9e0a3aa17f2aa93e874a9cc159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:f1:80:cc:4a:d2:25:f9:ab:f1:01:bd:e1:
1f:3d:77:40:10:aa:28:ab:89:1a:10:61:ec:86:39:
ce:24:3a:ee:2d:ec:f9:f1:ad:e5:51:3d:1c:94:63:
ab:78:3a:75:ae:2e:ff:dd:03:48:5b:79:92:a0:67:
da:41:6a:75:5f:61:62:70:e8:63:22:b2:76:21:84:
76:43:5e:9a:97:11:31:b3:87:53:db:00:15:54:6d:
b4:90:67:01:f1:29:8e:ea:80:7c:04:ca:d9:67:ae:
68:2c:db:6a:5d:90:40:62:a8:c2:1d:1a:04:87:4d:
6d:1f:6e:0b:05:5a:05:86:6a:7f:99:b7:44:e0:54:
85:eb:56:55:52:44:06:d5:33:1e:2e:24:5e:11:d6:
37:69:e0:a8:3b:06:06:03:07:3e:dd:8d:af:91:ea:
b3:22:a2:34:61:0c:5e:05:39:ed:f3:3a:12:be:b4:
7f:27:54:6e:de:1b:fd:1a:74:08:e2:fa:ba:24:e0:
da:48:13:f8:7d:5d:12:69:52:c9:6e:c8:16:fe:f7:
36:61:0f:24:6d:30:d4:43:83:47:d9:f7:9e:ca:7e:
9d:f2:77:88:0d:45:0a:b7:21:12:c2:ea:f4:b0:69:
d3:58:8d:9d:b1:f5:63:d0:95:3d:f5:ad:b1:f0:3a:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:79:63:F0:89:A5:7F:9E:0A:3A:A1:7F:2A:A9:3E:87:4A:9C:C1:59
X509v3 Authority Key Identifier:
keyid:CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/n3lj8Imlf54KOqF_Kqk-h0qcwVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.243.0/24
185.113.222.0/24
Signature Algorithm: sha256WithRSAEncryption
42:51:2e:93:fa:e8:6c:dc:86:10:25:7d:b9:fe:f0:08:28:fd:
55:15:83:61:c7:7b:92:09:53:78:7f:24:1a:01:0b:e2:bc:6c:
39:5d:4c:54:76:d6:3a:68:a5:c2:82:8d:a4:ad:77:c0:1e:68:
a5:7c:43:59:d5:78:fa:b4:b2:bc:2c:c5:8c:ed:31:53:9a:70:
d6:e0:e4:0e:dc:a7:d8:00:42:17:d6:86:c1:79:0e:d4:15:04:
db:6b:5e:e8:81:e5:55:0e:2b:e1:87:03:39:0f:c5:c6:10:df:
d8:af:b9:e7:31:1c:c8:98:4f:fe:f4:2e:ba:bc:98:02:3a:68:
28:7c:d6:ad:25:1b:1a:ab:5d:ec:c8:0d:c7:e6:82:42:e3:12:
a0:28:30:3c:83:6c:e2:35:01:21:01:2a:ad:a5:39:e5:e2:15:
23:a6:cf:83:72:cf:ed:44:37:5d:9e:04:12:9d:f1:7b:4f:49:
fa:ae:4f:ec:f2:7b:74:f7:11:50:89:96:c8:6c:75:00:43:1b:
e9:93:95:96:2e:5e:b9:ea:2e:fb:9c:69:91:60:25:50:64:ec:
68:d0:41:09:32:dd:6a:8c:21:5a:07:9d:ce:eb:bd:a0:78:11:
87:54:2a:55:a6:71:95:1a:25:3c:40:ef:de:ef:b8:67:ed:54:
4f:11:77:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:16 2025 by rpki-client