Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/3qH8ZS9wbp4ZckrapmstLsBtl4U.roa
File: 3qH8ZS9wbp4ZckrapmstLsBtl4U.roa (raw, json)
Hash identifier: 15PfLViKUV8ieAONMSTBZ+uuNJdfqoHQHR26dEyF8eQ=
Subject key identifier: DE:A1:FC:65:2F:70:6E:9E:19:72:4A:DA:A6:6B:2D:2E:C0:6D:97:85
Certificate issuer: /CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Certificate serial: 01953774E6CEF4307F6E294653526C912534
Authority key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/3qH8ZS9wbp4ZckrapmstLsBtl4U.roa
Signing time: Mon 24 Feb 2025 10:16:02 +0000
ROA not before: Mon 24 Feb 2025 10:16:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42807
IP address blocks: 109.232.221.0/24 maxlen: 24
109.232.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:74:e6:ce:f4:30:7f:6e:29:46:53:52:6c:91:25:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Validity
Not Before: Feb 24 10:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dea1fc652f706e9e19724adaa66b2d2ec06d9785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:7e:7e:e1:bf:7b:f6:f3:2f:1c:2c:dc:22:
8b:f3:6c:cd:c6:de:c6:b3:f4:d6:17:46:9b:31:96:
ea:94:50:6e:63:dd:39:c1:7d:03:41:9a:0f:21:1d:
1a:d8:34:f5:3c:95:b6:bd:5c:c0:61:7f:eb:ae:f2:
4a:da:e0:81:91:bb:bb:72:4c:54:d8:28:d6:e0:ed:
88:f2:a9:f6:d6:2c:cf:f9:58:73:3f:d9:39:d2:04:
6c:11:eb:a7:41:22:3d:76:c5:fc:8e:fd:a9:b7:3a:
ad:c4:99:54:ad:da:ee:49:e2:87:80:45:75:56:55:
01:4d:52:58:83:9b:6b:14:47:f1:a3:1b:40:5e:4d:
34:cd:14:e8:79:25:02:c6:65:bd:aa:35:25:b7:5e:
d3:64:b5:5f:77:38:fb:eb:26:77:d5:30:13:d3:02:
7c:5b:45:ba:f4:bc:b9:c3:11:30:ac:2e:dc:10:47:
45:74:ba:69:77:f0:5e:6b:ce:53:49:3b:cd:ab:10:
65:4b:38:9a:f5:02:36:8b:54:df:13:38:5a:f8:b4:
ac:ba:23:2e:ce:b1:0d:fa:28:89:bc:c7:c1:96:f0:
43:a5:68:4c:44:49:9c:c5:2f:09:df:84:e7:4d:45:
3d:bd:43:ec:0e:65:72:d5:f5:d4:bf:f0:75:2d:56:
8d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A1:FC:65:2F:70:6E:9E:19:72:4A:DA:A6:6B:2D:2E:C0:6D:97:85
X509v3 Authority Key Identifier:
keyid:55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/3qH8ZS9wbp4ZckrapmstLsBtl4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.221.0/24
109.232.223.0/24
Signature Algorithm: sha256WithRSAEncryption
95:68:d7:fe:95:59:c8:74:63:59:4c:d6:dd:8f:23:a2:ae:c6:
61:aa:2c:d8:5c:cb:22:49:46:24:06:72:41:e1:63:e0:4c:3b:
18:34:83:dd:54:93:ba:0a:15:ba:71:c2:60:4f:8c:b1:7a:84:
ca:f2:d8:66:35:4c:ed:1b:42:7f:86:04:75:aa:f7:ea:5d:20:
43:80:fc:96:ba:fa:fc:a7:f5:dd:a5:a1:9a:90:3d:2f:eb:7e:
43:82:95:be:9e:09:54:25:a0:e5:0f:6c:a2:ec:17:48:fb:e2:
2a:8e:67:c1:23:76:11:6e:7e:90:e6:fe:5d:ed:88:8b:41:48:
2c:e7:58:f2:3c:71:e3:09:3c:3b:28:41:c0:8c:97:70:cd:89:
6b:e0:a6:6d:db:c9:8e:34:f8:2d:ab:83:6e:35:c0:1e:c4:16:
f9:07:49:b8:bd:9a:04:12:1a:59:e9:0f:cb:76:85:a9:c1:d9:
20:a6:7f:f2:48:7c:92:ac:8c:0e:69:87:94:da:47:e6:f2:9c:
a1:9b:c5:56:aa:3d:2f:bf:22:05:3a:7f:da:61:3e:de:c6:d4:
40:3c:b2:97:b5:70:15:d9:24:03:86:ec:d1:86:c3:26:d9:44:
fa:19:09:ad:92:9a:32:b6:45:1f:da:92:65:e8:40:21:6c:5f:
68:0f:78:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net