Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/obRnA2DOaX1f1N0VaLSK561MsFg.roa
File: obRnA2DOaX1f1N0VaLSK561MsFg.roa (raw, json)
Hash identifier: xpha7L01dte1GwtkALu5D1iKZZKGT07iZI/1woD8rMs=
Subject key identifier: A1:B4:67:03:60:CE:69:7D:5F:D4:DD:15:68:B4:8A:E7:AD:4C:B0:58
Certificate issuer: /CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
Certificate serial: 019421446C59FC2B72E022EA5228212EEDB7
Authority key identifier: 9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/obRnA2DOaX1f1N0VaLSK561MsFg.roa
Signing time: Wed 01 Jan 2025 09:48:39 +0000
ROA not before: Wed 01 Jan 2025 09:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215677
IP address blocks: 109.207.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6c:59:fc:2b:72:e0:22:ea:52:28:21:2e:ed:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
Validity
Not Before: Jan 1 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1b4670360ce697d5fd4dd1568b48ae7ad4cb058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:ee:9b:d4:ad:32:01:e0:de:d9:80:f5:7c:
23:83:87:23:79:2b:cd:0c:de:c2:31:ae:de:44:da:
62:17:c9:b4:3e:af:03:7a:7c:14:ec:42:be:7c:11:
ce:75:83:2d:9c:5d:a6:56:f4:7b:b8:de:59:b6:7f:
08:30:f2:e1:62:06:8a:21:47:8d:bd:ce:93:7d:93:
f4:d3:6b:08:55:9b:5d:03:80:b3:91:10:01:8a:db:
f8:0b:ce:3b:2d:ec:5d:9f:c9:f2:19:fb:30:b5:46:
bd:6f:12:ff:27:54:fc:80:36:6a:67:bf:ce:cb:e7:
56:92:a2:a4:80:57:a0:0f:df:d3:99:06:aa:0b:0c:
31:3b:93:e9:1a:c8:f1:0b:6c:d8:b5:43:9c:8c:0e:
ce:90:2e:44:92:2b:6f:26:4e:60:10:c3:5b:a5:10:
d3:fb:e2:8c:b4:da:39:7c:95:e8:f7:4f:b7:dd:63:
00:72:23:0c:05:31:9f:e5:65:80:f9:fd:4e:f6:7a:
f5:9a:8f:d6:33:49:38:04:80:0e:d7:5f:52:37:30:
c9:8a:02:74:df:6a:fe:6a:15:c9:7b:cb:2c:3f:58:
22:a7:6d:8d:63:90:25:f8:a2:97:f7:2a:66:57:c9:
c5:d8:ca:40:76:26:75:d1:ed:02:ab:a9:ff:a7:82:
11:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B4:67:03:60:CE:69:7D:5F:D4:DD:15:68:B4:8A:E7:AD:4C:B0:58
X509v3 Authority Key Identifier:
keyid:9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/obRnA2DOaX1f1N0VaLSK561MsFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.207.240.0/24
Signature Algorithm: sha256WithRSAEncryption
39:58:37:98:fc:24:d7:11:a2:ee:91:6e:3b:79:f1:71:96:82:
72:14:b7:d9:b8:c1:36:41:90:93:f5:9f:56:7b:49:20:19:9a:
e1:ab:cf:97:89:5b:79:c9:e5:ce:c7:c2:8b:29:68:00:63:77:
3a:59:b6:ce:03:a9:ca:e6:f5:44:ed:39:a4:18:ab:a6:ce:8f:
a6:d9:89:46:9b:b5:72:8e:0e:50:43:4b:e4:c0:ba:3b:e8:85:
7e:68:0a:d0:c1:72:40:1e:c1:f5:35:b7:a0:c3:bb:27:dd:89:
ea:f8:bd:be:b4:36:cc:c5:65:08:cf:56:02:34:47:17:2b:e0:
fd:12:f1:70:1a:98:7f:48:ee:10:49:88:d7:fe:b0:93:48:56:
95:00:5b:fa:78:2e:e8:53:40:87:7f:6c:d7:03:ef:4b:dc:f5:
89:56:dc:5b:1c:54:8a:9c:10:c5:dc:46:93:18:18:6d:c8:b9:
ca:c5:c7:f9:a0:6e:52:c0:74:cf:66:47:22:ce:5c:40:42:94:
2f:04:98:f4:04:fe:47:bf:3f:3f:46:60:0e:9a:ce:fe:e3:fd:
dd:1b:f4:9d:90:37:a1:b3:fb:ee:4e:ec:23:3c:b5:d3:fc:3b:
9e:58:56:78:93:f1:9f:e6:0b:8d:0b:b2:46:c8:9b:2f:5b:9d:
a4:37:fd:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRGxZ/Cty4CLqUighLu23MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYjRhOGI5M2FmOWVhOWNmMThhYWNhNGU3M2YxMTZlYzI2
ZWIzNTcwHhcNMjUwMTAxMDk0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWI0NjcwMzYwY2U2OTdkNWZkNGRkMTU2OGI0OGFlN2FkNGNiMDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS3um9StMgHg3tmA9Xwjg4cjeSvN
DN7CMa7eRNpiF8m0Pq8DenwU7EK+fBHOdYMtnF2mVvR7uN5Ztn8IMPLhYgaKIUeN
vc6TfZP002sIVZtdA4CzkRABitv4C847Lexdn8nyGfswtUa9bxL/J1T8gDZqZ7/O
y+dWkqKkgFegD9/TmQaqCwwxO5PpGsjxC2zYtUOcjA7OkC5EkitvJk5gEMNbpRDT
++KMtNo5fJXo90+33WMAciMMBTGf5WWA+f1O9nr1mo/WM0k4BIAO119SNzDJigJ0
32r+ahXJe8ssP1gip22NY5Al+KKX9ypmV8nF2MpAdiZ10e0Cq6n/p4IRAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKG0ZwNgzml9X9TdFWi0iuetTLBYMB8GA1UdIwQY
MBaAFJ+0qLk6+eqc8YqspOc/EW7CbrNXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjdTb3VUcjU2cHp4aXF5azV6OFJic0p1czFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84OTg3NDEtZWRhNC00YzVkLWFmOWYt
OGQ2OGViMjBmYmRkLzEvb2JSbkEyRE9hWDFmMU4wVmFMU0s1NjFNc0ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC84OTg3NDEtZWRhNC00YzVkLWFmOWYtOGQ2OGViMjBmYmRk
LzEvbjdTb3VUcjU2cHp4aXF5azV6OFJic0p1czFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc/wMA0G
CSqGSIb3DQEBCwUAA4IBAQA5WDeY/CTXEaLukW47efFxloJyFLfZuME2QZCT9Z9W
e0kgGZrhq8+XiVt5yeXOx8KLKWgAY3c6WbbOA6nK5vVE7TmkGKumzo+m2YlGm7Vy
jg5QQ0vkwLo76IV+aArQwXJAHsH1Nbegw7sn3Ynq+L2+tDbMxWUIz1YCNEcXK+D9
EvFwGph/SO4QSYjX/rCTSFaVAFv6eC7oU0CHf2zXA+9L3PWJVtxbHFSKnBDF3EaT
GBhtyLnKxcf5oG5SwHTPZkcizlxAQpQvBJj0BP5Hvz8/RmAOms7+4/3dG/SdkDeh
s/vuTuwjPLXT/DueWFZ4k/Gf5guNC7JGyJsvW52kN/0Z
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:36:18 2025 by rpki-client