Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/UuYyj9g7ygd92uJbbnTVZwkbtjY.roa
File: UuYyj9g7ygd92uJbbnTVZwkbtjY.roa (raw, json)
Hash identifier: v7ssa43g8hOulnMAjGkaCOjIeO9Ip/jvV99Y5Y5Zics=
Subject key identifier: 52:E6:32:8F:D8:3B:CA:07:7D:DA:E2:5B:6E:74:D5:67:09:1B:B6:36
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 01941FFA463F4063309FB70D4A0C247BAB8B
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/UuYyj9g7ygd92uJbbnTVZwkbtjY.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42083
IP address blocks: 109.224.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:46:3f:40:63:30:9f:b7:0d:4a:0c:24:7b:ab:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52e6328fd83bca077ddae25b6e74d567091bb636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:3c:7d:dc:40:bb:3f:d3:a7:df:76:4b:11:
d4:d2:0c:80:d7:cf:34:26:2c:8a:3b:d8:0e:10:d3:
b1:f1:65:64:bb:6e:ef:5b:c8:9d:ec:d9:7a:43:18:
b8:e0:94:85:9c:95:60:7d:a2:09:e3:be:f9:e7:53:
c4:06:3c:bc:5c:74:7b:4e:34:d3:7b:8b:01:67:81:
fe:1b:8e:b6:29:12:27:98:ac:b7:fb:e8:e8:d8:64:
45:b7:85:08:53:03:83:f7:47:ff:7e:eb:22:ca:26:
f3:37:31:65:1c:11:3a:e7:f0:c6:5c:58:ef:cf:dd:
1d:23:ae:19:fe:0e:52:3c:cf:2b:ae:01:99:0c:32:
d2:f4:31:6c:29:f8:f8:f5:ef:f1:66:2b:39:de:6c:
fc:05:04:d0:80:3d:e7:5a:7b:82:d0:70:2d:82:9a:
76:18:d3:d3:f9:22:30:88:80:f0:46:27:2d:3f:d1:
61:48:89:f9:e9:36:87:93:f3:19:51:e4:c1:d5:43:
19:83:02:c9:9f:10:f8:81:24:d6:73:9d:b8:49:10:
a7:9d:a3:6b:ed:89:87:65:ac:ea:cd:3e:33:d8:3d:
45:ca:08:8b:f9:6d:cd:8f:ca:bd:c4:a3:55:ac:9c:
56:ad:26:36:44:7d:54:43:be:97:45:ff:48:02:9a:
de:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E6:32:8F:D8:3B:CA:07:7D:DA:E2:5B:6E:74:D5:67:09:1B:B6:36
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/UuYyj9g7ygd92uJbbnTVZwkbtjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.242.0/24
Signature Algorithm: sha256WithRSAEncryption
88:0a:96:2e:93:4d:fe:10:1e:9d:81:ba:63:83:b8:f0:6e:cf:
5f:1f:48:3d:fe:b6:ed:73:0d:31:7d:45:aa:85:eb:14:5c:7c:
2e:46:86:f3:c2:73:df:57:73:75:be:d0:88:57:ae:ce:cb:3f:
f6:24:78:e4:9d:7b:7b:b6:2c:95:0e:4a:ef:00:b8:cf:c3:3b:
c7:e0:5f:6a:82:6b:5f:eb:e2:9d:c4:8a:7d:da:cd:b6:59:9e:
49:15:80:04:4c:5b:4e:10:e5:31:4e:cc:45:01:3b:5c:df:9a:
59:e5:01:c4:6c:f8:1f:74:0a:2f:21:69:65:6d:8d:e0:88:05:
c2:3e:be:b7:e8:4f:7b:ea:6e:0a:4c:49:37:18:fa:b3:b8:0a:
bf:2f:97:5a:7b:03:2b:79:1d:b8:c0:15:d6:5c:43:72:cd:32:
41:3a:1a:ed:39:9e:f9:ea:6d:41:21:a7:ef:ea:39:c6:13:d8:
bd:42:82:e6:b4:49:47:ed:c1:8e:9e:74:dd:f7:e9:10:00:c5:
25:0c:6a:02:4d:03:eb:b9:17:f4:6a:45:92:16:4e:ac:23:ef:
09:1d:18:b2:97:3d:61:e0:b7:ae:68:61:60:71:a4:5e:84:95:
0a:41:1a:01:cb:85:d1:61:83:ca:97:c3:d9:49:1c:fc:d6:d9:
ab:d1:2c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:41 2025 by rpki-client