Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/DGVdvNoy4BZmMskAY0FhRqegebQ.roa
File: DGVdvNoy4BZmMskAY0FhRqegebQ.roa (raw, json)
Hash identifier: iRYRAmf2jWOp8JdrLs3Bp0+JXzjugHqhdQJXjVJrTgk=
Subject key identifier: 0C:65:5D:BC:DA:32:E0:16:66:32:C9:00:63:41:61:46:A7:A0:79:B4
Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456
Certificate serial: 0194221F84D034DF422E235304F7EC2A1DF3
Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/DGVdvNoy4BZmMskAY0FhRqegebQ.roa
Signing time: Wed 01 Jan 2025 13:47:58 +0000
ROA not before: Wed 01 Jan 2025 13:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56380
IP address blocks: 109.107.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:84:d0:34:df:42:2e:23:53:04:f7:ec:2a:1d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456
Validity
Not Before: Jan 1 13:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c655dbcda32e0166632c90063416146a7a079b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:84:3e:28:c7:1c:6e:41:18:3b:07:57:8c:
63:13:56:03:d0:ea:72:bb:30:cc:26:6d:8c:4a:4a:
05:25:08:65:63:93:be:5e:10:77:4d:17:8d:ab:9f:
43:8c:a9:d7:9a:11:f4:5d:b7:15:aa:a7:f6:25:fb:
6c:92:aa:7e:04:f1:3d:1b:c4:b4:35:de:97:83:f1:
df:ab:3e:f4:ee:8c:99:b3:a3:5b:d7:ab:cd:7e:ef:
84:ac:3c:b8:af:c8:9b:35:4d:6a:82:73:26:a0:97:
c3:67:c8:30:b0:d1:f0:20:3e:4a:a5:28:10:06:88:
88:e3:e2:ec:ee:2f:d6:b5:d2:6e:ed:56:42:4b:35:
15:30:ff:05:84:64:60:32:35:7f:7b:d7:0e:34:9c:
94:d2:f9:73:3f:0b:12:7e:52:6b:9c:35:e7:e9:08:
9b:fb:ad:61:e7:ef:a9:1a:4e:72:95:cd:87:45:fc:
e8:b1:ff:38:0e:16:47:d1:7a:9e:b9:c3:ed:e8:ee:
d2:61:7e:5d:39:f8:88:fd:ae:93:72:5d:4c:c7:a1:
e1:29:68:e6:ea:60:d1:b5:aa:15:8c:cf:5f:95:58:
1d:e4:5a:8a:2c:44:4b:d2:e1:88:30:f4:09:b7:9b:
c4:1a:3c:4f:a3:73:9a:17:83:e6:15:87:2f:11:98:
fc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:65:5D:BC:DA:32:E0:16:66:32:C9:00:63:41:61:46:A7:A0:79:B4
X509v3 Authority Key Identifier:
keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/DGVdvNoy4BZmMskAY0FhRqegebQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.183.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:bb:50:8c:1e:c5:f0:7f:c0:24:53:19:41:94:c8:3f:7a:b5:
f0:d8:a7:a5:8a:c9:9f:ca:ed:5b:d5:3b:d1:bc:fb:78:f3:4b:
6b:8c:d8:f9:0d:70:bc:45:a3:c6:d7:4a:03:e3:d1:08:57:fa:
49:2e:db:80:54:b5:be:3b:b8:18:0a:46:aa:e5:b4:a1:73:e8:
28:87:76:73:e1:22:ea:6a:ab:01:e3:a1:02:d2:67:0b:c8:db:
6a:37:2a:c6:83:86:c9:a3:5d:e4:bb:48:e5:08:31:c6:1c:1c:
ed:10:e3:5f:2e:72:68:4a:dc:fb:68:2a:7b:d4:15:20:9d:34:
62:cc:d1:0a:06:78:2b:b0:77:a8:7a:4c:41:c5:ed:7d:83:ad:
0a:54:c0:c6:68:7b:ad:ca:23:72:3d:a7:d0:60:9c:14:ac:19:
e4:4c:41:11:c6:df:ca:35:e5:dc:47:01:42:e0:de:dd:2c:bf:
b1:96:79:8d:a2:c2:06:9f:d8:66:49:f3:be:3d:2d:7a:2a:33:
00:b4:3a:50:8f:f9:4d:e9:0b:e0:26:03:f6:c3:04:d7:8f:56:
31:95:43:ec:fe:5a:72:16:3c:12:90:f7:cc:d6:e7:45:15:2b:
b1:12:90:55:69:be:fb:32:f5:fc:be:ef:bd:2b:a6:ff:17:2d:
ac:28:ad:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:54:40 2025 by rpki-client on console.sobornost.net