Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/siRHZGzjU5vu4v8DeICTl92tPX0.roa
File: siRHZGzjU5vu4v8DeICTl92tPX0.roa (raw, json)
Hash identifier: 2n7AZXR9uoTXkRVA2gnntJ9HqpCYlguZnEV+wRDgvGw=
Subject key identifier: B2:24:47:64:6C:E3:53:9B:EE:E2:FF:03:78:80:93:97:DD:AD:3D:7D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195385B9E5CD5A6F111A1BAEACF44F19A2A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/siRHZGzjU5vu4v8DeICTl92tPX0.roa
Signing time: Mon 24 Feb 2025 14:28:03 +0000
ROA not before: Mon 24 Feb 2025 14:28:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215567
IP address blocks: 109.61.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:5b:9e:5c:d5:a6:f1:11:a1:ba:ea:cf:44:f1:9a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 24 14:28:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b22447646ce3539beee2ff0378809397ddad3d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:b5:fc:22:09:07:f2:a1:03:a0:e7:33:45:
69:32:81:99:3b:ad:d3:ad:62:3a:75:04:97:df:a2:
e7:1c:57:52:1d:ee:75:59:59:60:93:ed:d0:6c:a8:
ac:ee:91:e0:ce:da:89:6f:1f:d9:27:79:86:5a:ae:
af:dc:6d:b5:15:0a:be:91:37:89:89:16:b2:40:27:
08:e5:7b:bc:2d:06:ec:8c:08:29:1c:02:98:90:2f:
3e:7a:33:67:3d:01:38:a0:bc:e3:eb:95:7e:64:a9:
26:8f:d1:a6:34:a7:57:ed:f5:5e:b9:a4:c6:0d:92:
3e:c0:12:84:6b:8d:60:bd:33:28:8f:0f:a0:9e:80:
94:51:a6:1d:77:3c:69:4a:d6:60:0f:e5:d6:b5:8e:
75:ab:4c:f5:f3:c2:65:27:03:f5:d5:3b:e4:00:86:
51:b8:e5:c8:ce:88:a5:fc:18:d9:0b:1e:5a:aa:42:
ca:86:fc:de:d1:6a:b9:ce:43:ea:91:bf:b2:84:45:
fb:ea:48:51:d0:09:5c:ee:a4:85:95:e6:40:1b:e6:
e2:46:02:6f:93:3d:68:10:64:4b:29:2c:c2:78:b8:
ad:dc:52:c7:44:e7:dd:73:c1:62:1e:f2:6e:cb:6d:
e3:25:c6:28:d9:31:dd:b4:b2:4c:9e:c4:80:4e:5e:
d1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:24:47:64:6C:E3:53:9B:EE:E2:FF:03:78:80:93:97:DD:AD:3D:7D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/siRHZGzjU5vu4v8DeICTl92tPX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.61.111.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:15:4c:7e:82:9e:7c:3b:3b:92:f4:92:22:ea:d4:27:74:52:
6c:b7:2e:6a:39:96:eb:d8:98:bb:0a:48:3a:88:1f:fe:55:20:
69:8d:95:1d:ea:3a:5e:95:38:5d:86:65:b2:cb:63:72:3e:59:
9a:f2:46:08:a3:a3:a0:5a:df:84:9f:68:e5:99:0c:69:77:ea:
24:4d:93:1d:92:a3:90:1d:3d:dd:dd:3c:1f:6c:9e:d8:37:c1:
10:6a:29:16:d8:c3:7b:29:00:f3:ff:80:d8:c5:6c:83:fe:b4:
39:a9:15:ce:c9:a5:5b:98:60:01:a7:cc:0c:91:d9:2e:79:fe:
ad:1f:dd:f9:ec:09:e3:cc:a7:b5:5a:d2:75:00:e0:2f:95:3c:
e2:fb:c7:01:76:f4:a8:e4:a0:a4:0e:7e:5e:d0:91:d9:b4:8e:
2e:26:ca:56:ef:03:40:85:9c:b2:38:de:73:c5:d3:cb:01:7e:
4e:9a:3e:f1:cb:ab:c8:56:60:43:6e:9d:5c:79:00:79:17:88:
80:56:94:12:5d:60:fb:eb:b6:9e:69:4d:a1:1e:b5:1d:6f:92:
1b:b7:58:ae:ad:68:3c:fb:e6:73:e3:c1:bd:d1:9d:17:e4:c8:
4c:6d:36:eb:4d:75:aa:b6:e0:6f:c1:d6:22:1a:b1:04:ff:60:
a3:32:7d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:15 2025 by rpki-client on console.sobornost.net