Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/tMFph9cmJacY9_6pBYOFi0X8qxI.roa
File: tMFph9cmJacY9_6pBYOFi0X8qxI.roa (raw, json)
Hash identifier: yN3wCBUXrF4u5FVJmYsnf0p7F7khnudzz4ntTOuoOuA=
Subject key identifier: B4:C1:69:87:D7:26:25:A7:18:F7:FE:A9:05:83:85:8B:45:FC:AB:12
Certificate issuer: /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Certificate serial: 01942369C2EC2F25C2139B8F2A1CFAD1AC6D
Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/tMFph9cmJacY9_6pBYOFi0X8qxI.roa
Signing time: Wed 01 Jan 2025 19:48:41 +0000
ROA not before: Wed 01 Jan 2025 19:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50602
IP address blocks: 109.205.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c2:ec:2f:25:c2:13:9b:8f:2a:1c:fa:d1:ac:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Validity
Not Before: Jan 1 19:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4c16987d72625a718f7fea90583858b45fcab12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:9a:d6:84:40:ca:93:5a:e6:8b:8a:2a:1e:
2b:87:97:b4:b6:9d:fc:c3:ac:d9:8c:24:8d:e2:9d:
98:c2:55:ab:c4:88:a5:6d:4e:e8:fa:fb:95:63:19:
de:30:2b:6e:37:24:08:4c:69:31:88:d3:47:c9:9b:
68:9d:eb:3f:ba:e0:7b:93:a2:3b:0d:d2:c0:49:8a:
3f:60:07:fa:14:c3:aa:a9:86:e6:13:32:71:c9:9a:
35:ad:6a:8f:39:51:8d:aa:97:1d:ad:6b:99:88:1e:
27:ae:81:c5:4f:a8:74:92:45:22:c6:1b:d7:b7:e7:
1e:fe:c4:e8:fa:df:8e:3a:0c:15:10:34:c5:4c:18:
9a:15:4d:2e:c2:1f:03:d8:ad:32:cf:e0:7e:01:2c:
58:5c:a1:4d:9b:33:95:57:50:aa:5f:60:a0:b7:a1:
c6:5f:d0:9f:81:cb:82:47:2a:03:af:42:96:15:6d:
4e:f3:be:d7:6a:93:f7:20:12:bc:f5:ba:6a:b4:29:
97:17:60:0f:a4:b2:42:35:cd:9b:3b:67:f5:9b:65:
ed:c1:ff:98:0a:d5:fa:53:27:e7:1a:91:22:73:8d:
15:85:c6:e5:e9:03:c3:24:2c:e7:f1:47:03:eb:14:
29:15:7d:5a:d7:03:8c:82:5d:dd:9b:86:9e:12:d1:
41:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C1:69:87:D7:26:25:A7:18:F7:FE:A9:05:83:85:8B:45:FC:AB:12
X509v3 Authority Key Identifier:
keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/tMFph9cmJacY9_6pBYOFi0X8qxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:62:e0:d5:50:49:ac:44:86:5b:c2:50:71:c1:64:a2:bc:2c:
1a:16:7a:d0:3f:09:ad:9e:9e:a6:a9:48:88:2f:43:4b:d2:22:
7f:b3:e4:27:ab:8b:66:c1:8e:e7:6c:e4:42:84:4d:77:d2:4b:
4a:65:77:63:f2:1c:7d:5f:ae:f4:53:a7:fe:dc:ac:57:b0:72:
36:f8:08:f5:9b:b0:99:61:a7:81:14:68:a1:cf:a4:57:54:48:
02:a8:4d:9a:fa:eb:2b:5d:01:5c:e1:f2:24:ee:a9:f0:8f:9d:
67:c3:6b:07:31:ce:8b:d7:2c:b0:7a:0c:65:1f:59:63:39:a2:
58:0f:b2:8e:e6:8f:89:10:99:88:c7:31:66:32:3b:4f:80:51:
62:ec:51:68:db:95:aa:2b:9b:d4:54:89:09:dd:7f:b4:75:c2:
f3:47:5f:fb:db:71:c1:5f:3b:d1:6c:cb:61:c6:25:18:61:df:
4b:d9:d3:a1:e5:aa:50:f3:2c:14:53:f8:e9:7d:88:87:08:98:
45:e9:65:23:5a:a6:6b:dc:45:66:9d:9c:c3:1e:d4:83:62:50:
5a:79:dd:a1:2e:c2:56:e5:35:70:0e:d2:bf:9a:49:87:4b:18:
5f:b2:9c:f3:ce:52:75:6f:e6:4b:34:0c:13:f9:e8:78:70:74:
03:a3:04:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:28:08 2025 by rpki-client