Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/hg5R4vwoQ_9Vrh_yIOCSPSZwhjE.roa
File: hg5R4vwoQ_9Vrh_yIOCSPSZwhjE.roa (raw, json)
Hash identifier: AUv0nseoL0Jb4BkT4F0dIMy2ekdAQmyLQI8e0ZH77o8=
Subject key identifier: 86:0E:51:E2:FC:28:43:FF:55:AE:1F:F2:20:E0:92:3D:26:70:86:31
Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456
Certificate serial: 0194221F86CFA6C08457D1660F9375099B01
Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/hg5R4vwoQ_9Vrh_yIOCSPSZwhjE.roa
Signing time: Wed 01 Jan 2025 13:47:58 +0000
ROA not before: Wed 01 Jan 2025 13:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 109.107.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:86:cf:a6:c0:84:57:d1:66:0f:93:75:09:9b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456
Validity
Not Before: Jan 1 13:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=860e51e2fc2843ff55ae1ff220e0923d26708631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:55:79:0b:08:c2:0c:61:2a:64:2a:eb:ce:
83:6e:c4:58:f8:32:fb:25:19:cb:b8:75:21:9b:12:
68:2b:00:97:f0:34:99:c1:18:6b:71:85:5e:37:e3:
e5:df:5d:e2:0e:de:14:96:41:e5:a5:3b:46:2c:b2:
6e:97:4a:3a:3f:65:89:8d:ce:ad:b9:bd:6b:11:30:
90:ab:41:42:fe:da:78:6b:5f:a5:92:ef:15:52:4b:
04:cb:6a:1d:c8:cf:35:04:fb:6f:cc:d0:a5:e8:76:
dc:43:ab:2b:e7:4a:b0:0f:a4:58:88:ab:a9:40:28:
28:6e:e4:c6:48:cd:37:12:76:8f:d9:5c:58:0e:d0:
b4:55:04:da:e7:63:32:d9:15:04:f4:af:7b:9f:de:
3a:1c:b5:64:bd:ab:91:78:33:60:20:a5:00:3d:92:
4a:64:b7:1b:e2:5f:c7:b7:a1:a5:06:f2:70:a3:06:
3a:3d:42:eb:92:92:99:58:b5:5a:b4:6f:39:00:94:
84:b5:7c:6b:e8:72:86:6f:25:8d:c8:4e:bd:f1:ba:
96:53:62:91:34:c0:53:47:f6:06:06:8e:e6:12:42:
b4:2d:f1:0d:5c:3c:d3:f5:d0:f6:80:f7:db:0a:24:
71:3a:ef:0c:9f:12:82:4f:bc:69:76:93:65:70:a1:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0E:51:E2:FC:28:43:FF:55:AE:1F:F2:20:E0:92:3D:26:70:86:31
X509v3 Authority Key Identifier:
keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/hg5R4vwoQ_9Vrh_yIOCSPSZwhjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.183.0/24
Signature Algorithm: sha256WithRSAEncryption
64:06:a8:38:af:cb:a3:6c:4d:18:89:10:2a:dc:8b:cd:12:ed:
0b:8e:14:66:12:c3:88:6c:64:4b:38:1e:8e:42:33:4a:0a:7e:
4c:de:77:61:80:8f:65:6e:61:e6:b4:c4:23:2a:ad:4b:b8:dc:
32:3e:b9:91:bd:88:07:c0:4c:ad:25:3b:1d:4e:07:99:ab:9b:
71:ac:59:c6:63:2d:c4:de:01:6f:4d:59:72:9c:ab:50:12:26:
88:b4:aa:54:6f:f6:1a:f4:7c:96:9c:20:84:ee:ea:49:16:7b:
d0:0e:5f:17:8c:31:87:05:f3:49:59:fa:f1:8e:bb:6f:25:25:
1d:07:6d:9c:dc:5c:ba:00:b3:ab:e8:23:cf:77:58:61:7b:69:
86:7f:f8:64:f5:1a:d9:15:66:d3:fe:01:41:b1:53:d5:70:fe:
3a:9c:03:48:ab:4c:2a:42:00:43:bb:c5:64:42:dc:cd:4d:fd:
5c:cd:b3:49:3a:0a:6e:6c:e1:35:1f:c1:96:5b:e5:d5:32:f8:
74:75:30:ab:02:54:33:21:b6:49:3d:1f:83:21:4b:de:df:0f:
08:65:14:0e:25:2e:1e:e9:7f:2e:46:24:09:22:92:c6:8e:fb:
9c:e5:9c:c2:22:1d:ea:31:cb:3b:7f:bf:f3:99:58:3f:35:1e:
cf:84:d3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:54:40 2025 by rpki-client on console.sobornost.net