Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/43AxQadttxpukdA8vcrVdRW-t5w.roa
File: 43AxQadttxpukdA8vcrVdRW-t5w.roa (raw, json)
Hash identifier: kF6ocnoDs/XQiaEmG2F7DKuzq9j+uOFKWVL4Npen2L8=
Subject key identifier: E3:70:31:41:A7:6D:B7:1A:6E:91:D0:3C:BD:CA:D5:75:15:BE:B7:9C
Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial: 0194258E5B5BF0B92136F3E07D74A09154A9
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/43AxQadttxpukdA8vcrVdRW-t5w.roa
Signing time: Thu 02 Jan 2025 05:47:54 +0000
ROA not before: Thu 02 Jan 2025 05:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214175
IP address blocks: 109.61.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:5b:5b:f0:b9:21:36:f3:e0:7d:74:a0:91:54:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Validity
Not Before: Jan 2 05:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3703141a76db71a6e91d03cbdcad57515beb79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:19:7b:b5:fb:de:c8:67:26:af:cd:20:f6:
8e:66:af:ab:d5:5f:9d:db:17:aa:fa:e6:84:05:7d:
fd:02:ae:1c:bd:8f:0c:a3:a6:c0:c7:82:ed:12:92:
83:0c:ad:26:77:0d:76:9f:8f:43:ce:a6:86:02:2a:
7f:89:da:59:f3:5e:83:d8:fe:3d:13:39:79:7f:41:
c9:05:84:c0:fa:1a:1d:f6:b9:61:e6:13:29:9e:1f:
db:98:fd:be:97:58:53:92:a3:4c:1f:5e:a1:6c:a5:
aa:c0:4d:8c:12:0a:e1:23:6b:00:f0:e5:27:14:56:
c5:f1:ad:fc:c1:5e:9e:45:b3:cc:2f:b2:c4:6f:35:
22:95:7b:12:93:a5:2c:98:62:1d:bf:34:5c:60:b7:
7f:20:56:50:fb:bf:4b:7a:e9:66:21:eb:64:ef:c3:
61:7d:6d:01:23:b9:a7:60:6d:94:19:73:33:a4:5c:
13:33:c6:72:b8:66:6e:0c:ca:8a:e0:79:55:39:90:
44:52:80:14:83:8a:54:9e:a0:78:9e:8a:35:5e:a8:
83:b7:b6:84:d9:5e:46:4d:1e:f6:28:cd:40:9a:31:
4a:3a:0b:f1:d3:0e:04:c9:f6:3d:83:a7:db:ba:55:
50:ca:08:5b:e7:b8:32:4f:fb:7b:5b:6a:dd:fb:fb:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:70:31:41:A7:6D:B7:1A:6E:91:D0:3C:BD:CA:D5:75:15:BE:B7:9C
X509v3 Authority Key Identifier:
keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/43AxQadttxpukdA8vcrVdRW-t5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.61.13.0/24
Signature Algorithm: sha256WithRSAEncryption
81:5c:c6:c9:bc:2e:85:ca:93:ee:cc:79:94:f1:1b:20:c3:94:
c0:04:dc:7f:69:55:7d:a0:08:bd:6d:f0:25:8d:40:e1:5c:ee:
f2:77:8b:e4:0d:15:61:7b:06:f1:8d:b5:a6:97:5d:40:1a:ba:
ad:0f:44:d7:c8:8a:0e:f2:ca:2b:fa:cf:03:a6:14:81:aa:8f:
58:c2:97:ce:fc:55:6f:f1:f1:c1:a1:30:c3:47:d3:0d:d8:e7:
b6:d7:15:6e:c8:5f:1d:94:42:2d:49:ee:0a:be:43:32:9b:b1:
28:cc:2e:de:d9:c7:f3:0c:fd:87:32:49:98:69:bb:f9:fe:02:
8c:70:10:de:ca:e2:14:97:92:c9:24:f6:36:32:b6:9f:55:f8:
d2:68:06:97:76:1d:81:ec:50:ca:94:68:b8:45:3c:a9:3b:e7:
5c:8a:1f:7c:45:96:12:be:8e:51:70:e7:20:a7:ab:15:33:d0:
6a:88:a9:f7:60:f8:31:06:da:da:bf:cb:bb:99:f5:fa:80:9e:
9c:5c:e9:b0:b6:eb:b1:e0:f0:d3:67:00:5d:58:ae:35:47:f1:
85:7c:53:76:49:80:6f:8e:8f:60:8d:41:ea:b2:6e:57:04:ae:
82:79:36:e0:52:8e:9a:fb:01:9d:60:67:f5:03:34:63:49:69:
cf:6b:7d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:51:11 2025 by rpki-client