Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/on4gpGJOHGq7wUfeYCtHexguWtQ.roa
File: on4gpGJOHGq7wUfeYCtHexguWtQ.roa (raw, json)
Hash identifier: 5ZJxuvDtIu1nJoOPrpG6riUENx+x7kLEuXrvV0lgwlc=
Subject key identifier: A2:7E:20:A4:62:4E:1C:6A:BB:C1:47:DE:60:2B:47:7B:18:2E:5A:D4
Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial: 01942748149FD7130019702F5442735A7CCB
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/on4gpGJOHGq7wUfeYCtHexguWtQ.roa
Signing time: Thu 02 Jan 2025 13:50:22 +0000
ROA not before: Thu 02 Jan 2025 13:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49454
IP address blocks: 109.202.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:14:9f:d7:13:00:19:70:2f:54:42:73:5a:7c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a27e20a4624e1c6abbc147de602b477b182e5ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:94:1d:a1:67:93:54:5f:d1:d3:04:68:f0:6b:
42:76:e1:50:65:ec:18:79:4f:f4:7e:9d:b6:02:6c:
6a:5c:7d:0b:80:ff:5f:49:28:42:41:89:2f:50:4d:
5e:8b:14:08:dd:65:06:76:4c:8c:42:89:d5:f3:29:
e5:01:7d:0e:17:1b:37:22:c1:d5:3e:8e:dc:89:b1:
ab:53:d3:30:c6:d6:30:bd:0b:4d:d9:4b:53:0d:e7:
72:c7:19:42:18:84:07:09:94:4f:23:2b:0a:e9:c2:
5c:4b:bb:e6:8c:ab:83:29:e2:56:27:72:b0:d7:69:
41:e7:9f:61:69:79:fc:fc:ab:36:64:5f:d3:82:75:
c7:9e:79:09:13:b1:b9:71:9b:10:d6:04:6c:a7:31:
fe:17:c7:55:f9:be:a7:02:79:a3:f0:ee:04:d7:88:
10:9f:13:4e:3c:17:ec:40:28:f2:f8:1d:fd:8b:4c:
f6:6b:ca:2b:bb:30:58:a9:a0:a7:91:2a:da:a0:61:
78:fa:1e:38:d3:dc:64:97:2d:1d:3f:16:4a:b7:12:
89:7a:ca:34:29:3d:5a:68:96:49:11:28:54:b7:01:
40:36:a5:1d:c2:f1:b6:d4:14:ab:1b:d9:97:19:90:
fa:6f:e8:71:5f:f7:0b:e4:2b:d5:df:af:e7:63:32:
58:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7E:20:A4:62:4E:1C:6A:BB:C1:47:DE:60:2B:47:7B:18:2E:5A:D4
X509v3 Authority Key Identifier:
keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/on4gpGJOHGq7wUfeYCtHexguWtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.202.96.0/24
Signature Algorithm: sha256WithRSAEncryption
91:7b:cc:0e:0f:96:fb:11:56:46:62:cd:fa:85:7a:f6:36:59:
1a:67:31:8a:84:b9:0f:f0:b9:08:dc:6e:1f:df:67:03:73:49:
24:b5:9a:12:13:fa:69:00:e4:ad:25:a0:e9:e0:1d:02:d5:62:
36:8d:ee:c6:45:08:5d:68:6e:f8:8d:92:e0:b9:bf:4c:57:0e:
d6:19:8a:19:91:e3:6a:88:2d:bf:6f:24:62:4f:84:b1:ca:95:
43:34:e7:c3:27:a5:53:06:90:80:85:0b:b8:37:75:1f:b3:b1:
de:55:82:0e:3e:cc:be:d6:58:0c:61:f2:f2:e6:c6:6c:51:77:
bf:f0:3e:f0:ac:5f:7c:b8:33:4b:4c:48:13:e3:49:dc:d6:8c:
6b:90:e1:cd:da:e4:74:24:d6:03:90:d9:62:89:f1:30:12:53:
1b:83:c5:57:90:c9:17:2c:a7:73:8b:6f:8f:65:27:6c:56:1b:
88:75:40:aa:2c:bb:fe:ee:3b:e1:2c:77:42:45:38:7a:39:6c:
f1:4a:6e:72:29:2f:47:cb:73:34:f6:0f:7e:da:86:53:27:40:
60:0e:b7:78:2a:79:8d:50:bb:5e:d4:fd:d1:43:24:9d:01:db:
3c:42:ba:75:29:69:85:f9:29:b5:42:d1:14:ce:3a:ec:61:5e:
7b:1a:eb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:13 2025 by rpki-client