Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/1iNqSGLBurdVBRXSj9jkGbrkAYg.roa
File: 1iNqSGLBurdVBRXSj9jkGbrkAYg.roa (raw, json)
Hash identifier: I52bbOoIJFwXUk3tZr6SbiTpSM/ybqgeCNsRlccE3vw=
Subject key identifier: D6:23:6A:48:62:C1:BA:B7:55:05:15:D2:8F:D8:E4:19:BA:E4:01:88
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0195EC8899222E0CAB8377F189D8BD22461F
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/1iNqSGLBurdVBRXSj9jkGbrkAYg.roa
Signing time: Mon 31 Mar 2025 14:08:49 +0000
ROA not before: Mon 31 Mar 2025 14:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215943
IP address blocks: 109.69.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:88:99:22:2e:0c:ab:83:77:f1:89:d8:bd:22:46:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Mar 31 14:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6236a4862c1bab7550515d28fd8e419bae40188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:03:a5:05:1e:bd:5d:e2:d3:81:4a:cf:35:
be:98:ef:72:4a:48:d1:80:08:08:07:02:ef:a1:23:
73:2c:07:dd:44:42:73:da:9f:35:45:e4:e6:6c:7e:
99:41:a9:af:e1:ee:d8:e0:50:b8:e9:3f:d1:f1:fb:
bc:eb:53:0e:8d:42:8f:96:c8:89:bc:ba:13:49:1f:
17:5c:78:5d:a3:52:fa:f2:06:bf:02:06:0e:21:aa:
6b:27:87:09:f3:a9:70:87:dc:67:81:02:f1:4c:65:
e6:55:17:85:2c:d4:db:20:c2:a1:61:32:c5:9b:73:
8d:4e:eb:f9:e9:e3:2a:97:49:65:90:9b:9c:f4:4a:
8d:33:96:35:55:a2:f6:3f:5d:85:2d:52:ae:f4:80:
a5:dd:8f:97:ef:c5:f9:2b:12:2f:0a:7e:dc:ce:2d:
5f:5a:e9:f1:37:d4:44:a7:7f:0b:c7:60:2d:c4:f0:
27:50:b0:25:b5:ab:b9:b9:e2:df:28:dc:f2:0a:dc:
de:40:10:57:8c:ee:ab:40:b4:a3:bc:0e:cf:cc:87:
11:ab:63:8d:d6:47:0f:5f:30:08:af:19:ee:be:a8:
77:4b:f4:39:9f:ba:e0:c6:7d:dc:43:ff:87:7d:60:
b0:65:7a:a2:3e:45:07:6c:f2:a5:cd:90:d2:5f:f8:
4d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:23:6A:48:62:C1:BA:B7:55:05:15:D2:8F:D8:E4:19:BA:E4:01:88
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/1iNqSGLBurdVBRXSj9jkGbrkAYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.69.63.0/24
Signature Algorithm: sha256WithRSAEncryption
68:14:eb:17:d0:2b:37:ce:cc:2c:60:db:8f:3c:57:1f:c3:bc:
e0:5f:a5:54:4b:53:6d:3a:e5:d0:01:18:75:2f:4a:e4:b0:39:
27:14:0f:de:30:91:80:d9:7c:05:6a:72:6e:c6:ea:9b:ba:3c:
a9:94:4e:cf:f6:1b:69:21:20:33:7e:c7:8d:8a:5e:a5:f4:b2:
8a:cb:c8:77:aa:b3:b5:e9:15:d7:5f:21:e8:31:5c:7e:e4:ca:
d0:dc:f8:3f:42:3b:0f:0a:ac:73:34:32:cd:fd:01:32:aa:c1:
9a:7e:13:bd:fd:b0:a1:2b:df:bb:07:5a:77:04:2e:21:ca:0a:
02:57:66:5d:b4:96:33:e7:ea:7c:aa:3b:14:39:81:7c:00:20:
75:5d:76:04:e1:93:03:ff:f3:d9:46:7f:f6:ef:22:29:dd:63:
e1:cb:c6:eb:c6:00:5a:11:bd:e1:0a:e5:c2:04:2e:84:fa:5f:
20:39:8d:a1:ff:28:0e:89:a7:cd:c4:0b:b0:03:cd:dc:f9:92:
0c:67:bb:d3:71:81:cd:75:c7:38:f0:23:a2:c9:fc:0f:8f:6f:
71:cc:44:a4:f8:70:a2:6e:0f:f0:2c:8c:e7:76:2e:e2:df:3e:
45:f5:d5:b4:b3:5f:8a:23:eb:db:6f:42:d7:4c:e0:e9:c0:aa:
aa:68:86:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net