Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/56aGLoH7Bse2LO-_92GKlUjhbBU.roa
File: 56aGLoH7Bse2LO-_92GKlUjhbBU.roa (raw, json)
Hash identifier: 9BM7a0N91eERqW7VUlPdX8P/hOguhSCnOBLInaqrNrM=
Subject key identifier: E7:A6:86:2E:81:FB:06:C7:B6:2C:EF:BF:F7:61:8A:95:48:E1:6C:15
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 01941FFAB948B26EB0CCA414EBA15463C734
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/56aGLoH7Bse2LO-_92GKlUjhbBU.roa
Signing time: Wed 01 Jan 2025 03:48:32 +0000
ROA not before: Wed 01 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50269
IP address blocks: 109.95.64.0/21 maxlen: 21
109.95.64.0/24 maxlen: 24
109.95.66.0/24 maxlen: 24
109.95.67.0/24 maxlen: 24
109.95.69.0/24 maxlen: 24
109.95.70.0/24 maxlen: 24
109.95.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b9:48:b2:6e:b0:cc:a4:14:eb:a1:54:63:c7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7a6862e81fb06c7b62cefbff7618a9548e16c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:f5:95:0c:b9:68:27:98:8c:88:b8:87:12:
6e:8b:49:23:17:b9:cd:b3:50:d6:f9:ac:4c:6d:bc:
d0:6e:5d:67:a8:c9:87:af:88:ea:9f:15:d2:b0:e7:
5e:d6:d7:8f:fd:53:72:18:d8:9b:de:b2:22:91:7f:
33:ff:d6:56:6f:78:81:4e:8c:85:e6:ab:1f:4b:cf:
25:e6:f2:95:04:71:27:c0:3e:f5:0b:02:d4:1f:5c:
d8:73:24:f2:a6:01:84:52:33:ea:af:c3:4b:b3:58:
3f:b1:fd:6b:e2:31:7b:8b:f7:84:0a:e7:52:95:5f:
02:bd:a7:4f:4d:97:b0:fc:a9:86:6e:6d:20:ea:39:
c7:9f:21:41:be:07:f6:f1:8d:41:c1:d6:f9:85:65:
eb:bd:67:63:a0:1b:e1:51:fd:fd:0d:83:21:e7:b3:
83:cf:9f:a7:56:50:6a:46:94:a8:a5:76:86:b9:03:
38:06:0c:3c:55:cb:f8:43:db:3b:0e:0e:fb:45:8a:
54:ce:22:26:e5:ea:a1:2d:fc:15:31:ee:d4:8c:3f:
b2:7d:d2:37:1e:a4:1c:b3:8b:87:b4:f6:a1:ef:14:
09:98:73:ea:a6:e4:f7:84:5f:a3:95:84:73:62:8e:
64:b8:ed:0b:85:e3:ab:8c:b3:8f:4f:23:21:c5:8a:
d7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A6:86:2E:81:FB:06:C7:B6:2C:EF:BF:F7:61:8A:95:48:E1:6C:15
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/56aGLoH7Bse2LO-_92GKlUjhbBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.64.0/21
Signature Algorithm: sha256WithRSAEncryption
88:5a:7b:95:f5:1d:7b:50:91:8c:55:bf:38:96:2c:1c:63:ed:
57:a7:a2:22:25:d3:47:92:5c:d6:f1:a4:6e:7f:a6:89:0c:20:
43:88:2e:50:64:6f:c2:39:ef:33:d3:9f:52:75:07:5b:2f:6b:
ee:ba:32:af:5b:ab:47:b5:47:be:7a:c7:e6:50:15:a6:f1:6f:
76:2d:e6:f3:cd:24:f4:37:87:e2:ca:2f:5c:a5:9b:51:3e:5b:
3f:04:ab:3d:b5:33:2c:bf:9f:22:36:2d:f3:8f:ee:5d:93:37:
a4:84:9a:8b:50:51:03:f5:35:3f:1a:a2:d1:2c:95:08:86:cc:
0d:ef:30:56:07:0f:8c:d4:70:82:8d:ef:25:ed:c2:b2:fc:89:
d3:6a:da:d5:10:e8:74:af:56:91:10:9e:75:4b:d5:44:99:d3:
fd:32:29:22:f7:35:d8:eb:1f:ff:cd:b5:68:67:5c:a9:a1:ea:
b0:80:64:69:e8:b8:4f:37:82:03:52:1a:6a:3c:33:4d:8e:81:
28:74:02:ff:c0:7d:04:d0:d3:85:ad:ae:e8:c5:83:c1:28:6e:
5a:14:3d:38:02:6f:ee:39:66:ec:ac:a5:0c:81:66:ef:4f:aa:
c9:3a:a5:38:23:06:64:f6:48:c7:a8:31:5e:89:8a:e2:5a:06:
66:02:4a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:45 2025 by rpki-client