Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/kPouSigkCfrRHoMg7De2TJT88UA.roa
File: kPouSigkCfrRHoMg7De2TJT88UA.roa (raw, json)
Hash identifier: t8cgJtzKMebDlU5SK4Js6mv7oMUSZDhw9bql1pMcUmY=
Subject key identifier: 90:FA:2E:4A:28:24:09:FA:D1:1E:83:20:EC:37:B6:4C:94:FC:F1:40
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 019424B38D621AF2B9484919A64088BD4144
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/kPouSigkCfrRHoMg7De2TJT88UA.roa
Signing time: Thu 02 Jan 2025 01:48:54 +0000
ROA not before: Thu 02 Jan 2025 01:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61134
IP address blocks: 109.197.35.0/24 maxlen: 24
194.169.126.0/24 maxlen: 24
195.20.212.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8d:62:1a:f2:b9:48:49:19:a6:40:88:bd:41:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: Jan 2 01:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90fa2e4a282409fad11e8320ec37b64c94fcf140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:b3:44:89:c6:4d:71:f0:5c:3e:08:40:21:
8d:d6:d8:ae:1b:7f:02:e7:8c:fb:9e:3c:7f:c6:6d:
45:33:be:d2:9e:4d:34:27:10:d0:2a:60:45:eb:9c:
fa:2e:14:2d:a3:a4:fc:76:53:c3:96:dd:30:2f:df:
ad:49:29:86:df:08:4a:e2:13:bb:52:2d:a9:c3:47:
7d:b9:fc:56:8f:0e:eb:e6:49:a3:e1:8f:0b:7d:e7:
09:81:e2:40:bd:f6:51:64:1e:9a:3a:cd:fc:a0:ff:
da:26:e5:ef:d2:35:13:7f:81:4d:ed:b7:a2:32:4e:
7a:27:45:a0:68:8e:4c:52:07:8f:6c:87:7f:09:7a:
ac:33:dd:74:22:ce:21:c3:08:95:0c:48:39:7f:78:
f8:fb:f9:aa:1b:ff:08:88:99:cf:9c:04:8b:17:1d:
fc:a3:f6:5f:35:1b:af:af:5d:1f:1e:51:aa:b7:9b:
df:64:05:79:81:1a:a0:73:be:2a:a3:a4:68:79:fc:
57:48:cb:eb:90:3c:31:a7:6e:34:41:6c:00:e7:e6:
25:62:3f:3f:6b:0a:61:ba:da:9c:af:bb:0f:e1:0e:
2f:3f:08:9e:83:fc:73:a2:56:f1:bd:f0:63:48:16:
13:04:b4:3f:97:ca:48:30:f7:76:66:d5:53:8e:cf:
c8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FA:2E:4A:28:24:09:FA:D1:1E:83:20:EC:37:B6:4C:94:FC:F1:40
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/kPouSigkCfrRHoMg7De2TJT88UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.35.0/24
194.169.126.0/24
195.20.212.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:03:2e:fc:4b:8c:10:c7:25:cc:df:8d:7f:96:8f:d8:b5:44:
d3:03:b2:c1:50:37:75:35:94:88:32:5b:3d:10:86:f4:75:21:
d0:49:e2:57:0a:b3:d5:46:42:1c:31:97:41:4e:60:8c:85:67:
10:d4:58:5c:5b:1b:1e:1c:d1:ae:d2:af:e4:eb:d3:fd:0f:f6:
16:77:50:0f:36:c0:99:dc:9c:12:c3:32:51:ed:98:ed:2e:a1:
0c:1b:14:3c:85:a1:37:15:fa:18:95:f3:2f:5b:49:76:3c:0e:
c3:a8:a3:d2:b0:61:44:9a:96:95:ce:75:e0:bb:13:d7:56:04:
83:af:52:e8:e4:19:66:54:ad:53:73:53:04:37:b4:c2:76:74:
bc:ac:77:39:8a:b4:17:b4:5a:fe:c7:8d:4e:29:c3:05:cb:25:
8b:a4:d7:af:b9:f4:02:93:42:b6:ba:77:86:c1:56:20:3f:1d:
fb:14:0c:67:1d:a2:93:bf:c8:20:2d:3e:3f:ca:1a:d9:a5:1b:
f8:f2:9c:dd:54:81:6c:cd:48:4b:16:dc:0f:61:be:67:8f:1d:
06:0b:ff:8d:65:ff:d3:51:49:c8:e0:18:47:35:56:c6:2b:4f:
42:4b:8f:f3:f6:db:49:81:66:79:f2:00:29:e5:bf:86:a6:c9:
93:8b:7c:61
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQks41iGvK5SEkZpkCIvUFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzkxYzUwYmZmOWNhMDU5ZTZlMzhiMmUwYzdlYjg1MmE2
MzBiYmEwHhcNMjUwMTAyMDE0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGZhMmU0YTI4MjQwOWZhZDExZTgzMjBlYzM3YjY0Yzk0ZmNmMTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2azRInGTXHwXD4IQCGN1tiuG38C
54z7njx/xm1FM77Snk00JxDQKmBF65z6LhQto6T8dlPDlt0wL9+tSSmG3whK4hO7
Ui2pw0d9ufxWjw7r5kmj4Y8LfecJgeJAvfZRZB6aOs38oP/aJuXv0jUTf4FN7bei
Mk56J0WgaI5MUgePbId/CXqsM910Is4hwwiVDEg5f3j4+/mqG/8IiJnPnASLFx38
o/ZfNRuvr10fHlGqt5vfZAV5gRqgc74qo6RoefxXSMvrkDwxp240QWwA5+YlYj8/
awphutqcr7sP4Q4vPwieg/xzolbxvfBjSBYTBLQ/l8pIMPd2ZtVTjs/I/wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJD6LkooJAn60R6DIOw3tkyU/PFAMB8GA1UdIwQY
MBaAFI3JHFC/+coFnm44suDH64UqYwu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjhkNGQtOGI2NC00ZTc1LTllNTQt
NTczMDlkZjY5NjQyLzEva1BvdVNpZ2tDZnJSSG9NZzdEZTJUSlQ4OFVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jNjhkNGQtOGI2NC00ZTc1LTllNTQtNTczMDlkZjY5NjQy
LzEvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbcUjAwQA
wql+AwQBwxTUMA0GCSqGSIb3DQEBCwUAA4IBAQAqAy78S4wQxyXM341/lo/YtUTT
A7LBUDd1NZSIMls9EIb0dSHQSeJXCrPVRkIcMZdBTmCMhWcQ1FhcWxseHNGu0q/k
69P9D/YWd1APNsCZ3JwSwzJR7ZjtLqEMGxQ8haE3FfoYlfMvW0l2PA7DqKPSsGFE
mpaVznXguxPXVgSDr1Lo5BlmVK1Tc1MEN7TCdnS8rHc5irQXtFr+x41OKcMFyyWL
pNevufQCk0K2uneGwVYgPx37FAxnHaKTv8ggLT4/yhrZpRv48pzdVIFszUhLFtwP
Yb5njx0GC/+NZf/TUUnI4BhHNVbGK09CS4/z9ttJgWZ58gAp5b+GpsmTi3xh
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net