Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/jL298tdrN6lW-Z_FSTlwEHl5J2g.roa
File: jL298tdrN6lW-Z_FSTlwEHl5J2g.roa (raw, json)
Hash identifier: N+Czi4kLunJdxEq8yNGyCoMRtrtusytZ4W5vbX9rMgw=
Subject key identifier: 8C:BD:BD:F2:D7:6B:37:A9:56:F9:9F:C5:49:39:70:10:79:79:27:68
Certificate issuer: /CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Certificate serial: 01945F6E9A696F6ED39EC73CA268518B6488
Authority key identifier: 2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/jL298tdrN6lW-Z_FSTlwEHl5J2g.roa
Signing time: Mon 13 Jan 2025 11:31:11 +0000
ROA not before: Mon 13 Jan 2025 11:31:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8829
IP address blocks: 109.204.168.0/21 maxlen: 21
109.204.192.0/18 maxlen: 18
2a00:8780::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:6e:9a:69:6f:6e:d3:9e:c7:3c:a2:68:51:8b:64:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Validity
Not Before: Jan 13 11:31:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cbdbdf2d76b37a956f99fc54939701079792768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:3e:06:88:15:45:3d:a8:93:9d:38:bb:92:
d3:17:1e:8c:83:ca:e9:fc:f7:d2:92:76:bd:c1:0d:
6d:bf:71:f5:ba:29:8a:6f:2f:66:5a:60:0d:b2:d6:
b4:f5:23:1d:1d:cd:53:1b:c9:60:05:64:81:00:df:
00:43:c0:b2:97:d5:9a:b9:83:4b:78:b2:27:1c:cc:
69:0c:fe:90:fe:71:35:d6:52:b8:62:81:94:ee:dc:
1a:66:ba:5e:fe:9b:a5:e9:9c:ee:1e:23:a1:ec:84:
be:b3:56:c6:a5:66:c4:b5:4b:dd:54:d6:ef:6a:9a:
c9:c8:e4:ad:58:ea:22:ad:12:9f:a8:53:36:89:27:
39:3c:24:42:f0:89:e8:8b:24:dd:8f:4c:9f:d1:c2:
0e:25:87:c1:fb:f8:ac:56:7a:14:8a:7a:ea:59:06:
27:da:07:fe:35:ec:42:cf:e8:6c:98:ff:c3:29:87:
18:09:67:ea:6c:a3:b6:06:15:6a:b1:30:a8:64:46:
78:7b:54:9b:58:8d:ab:17:36:41:bb:77:ba:8d:65:
db:33:1e:64:ec:34:f8:08:09:93:53:ce:3c:66:52:
a2:4f:39:f8:9e:f1:1d:c4:c2:c5:bc:e4:6b:9a:48:
2b:5c:3b:53:eb:f3:5b:28:26:93:5a:b8:e0:29:16:
36:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BD:BD:F2:D7:6B:37:A9:56:F9:9F:C5:49:39:70:10:79:79:27:68
X509v3 Authority Key Identifier:
keyid:2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/jL298tdrN6lW-Z_FSTlwEHl5J2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.204.168.0/21
109.204.192.0/18
IPv6:
2a00:8780::/32
Signature Algorithm: sha256WithRSAEncryption
64:80:e5:a1:82:55:2f:18:e2:95:62:11:fe:bc:60:b6:ac:8e:
49:25:3d:b6:da:98:72:e4:ed:f0:a2:fc:cc:d4:b7:0d:3c:5b:
69:a9:e0:ec:07:cd:d7:c3:20:bd:21:e5:c4:03:c5:e7:ad:54:
ba:48:a5:e5:85:4c:27:40:d6:5a:99:42:e1:78:83:a9:bb:d4:
88:69:6c:0d:2d:65:64:84:30:78:54:d1:73:c0:54:3c:99:a4:
47:2e:86:71:3d:19:d0:11:68:16:72:04:30:b8:96:4d:78:e1:
0a:6f:c2:f8:7b:e8:c5:b0:81:a1:87:b5:ee:ae:3e:3b:11:61:
34:63:93:cf:61:de:8a:54:e1:33:56:9f:cc:c5:11:b1:1d:1d:
02:89:7e:70:10:03:9e:b4:00:3f:67:32:a0:9e:c0:e3:32:94:
65:c8:e6:92:23:37:89:5c:e1:a4:6c:6f:e7:c5:11:66:0b:01:
ac:54:da:6f:ba:b0:cc:1d:83:96:c8:58:3a:51:f8:ed:e3:72:
83:91:43:9b:6f:c5:73:f2:34:22:d9:f5:71:24:b6:d0:b7:35:
5d:92:36:b6:aa:7f:ff:a3:d1:43:ec:a2:51:09:a0:03:12:d7:
ca:c2:b0:1b:29:21:05:20:13:df:88:03:4a:f3:63:fc:5c:45:
07:1a:d5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net