Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/4un7oDf8ZWgrvfoW5eKdXFBCKmw.roa
File: 4un7oDf8ZWgrvfoW5eKdXFBCKmw.roa (raw, json)
Hash identifier: wgivj5igSD5WDukv93HE7CTyflA9bHREG0W55t+jRIE=
Subject key identifier: E2:E9:FB:A0:37:FC:65:68:2B:BD:FA:16:E5:E2:9D:5C:50:42:2A:6C
Certificate issuer: /CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
Certificate serial: 0246DAB7
Authority key identifier: F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/4un7oDf8ZWgrvfoW5eKdXFBCKmw.roa
Signing time: Mon 04 Jul 2022 16:27:25 +0000
ROA not before: Mon 04 Jul 2022 16:27:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15596
IP address blocks: 109.122.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38197943 (0x246dab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
Validity
Not Before: Jul 4 16:27:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2e9fba037fc65682bbdfa16e5e29d5c50422a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:d5:2f:76:b9:89:b8:68:0e:dc:e6:08:c3:
bf:4d:74:2e:92:32:6a:5e:74:2e:28:1b:fb:c5:65:
49:fe:3f:42:53:52:a1:33:40:66:a9:55:73:1b:56:
54:ea:04:b5:ff:80:42:7a:92:99:ad:2d:0e:1c:e9:
11:3b:48:b7:c3:b6:f0:f0:5d:11:38:b3:12:24:b5:
0a:17:0e:2f:4d:cb:c0:3a:88:78:c3:91:a2:c4:d1:
cf:d8:2a:5f:d1:f1:d0:fb:51:41:9e:ee:1d:cc:02:
60:a9:23:a4:c3:55:67:7d:40:61:71:40:d3:c7:00:
2f:d3:45:6e:07:ad:6a:ed:52:8f:a2:c5:f9:f2:5d:
2a:6e:5c:98:8b:73:34:94:07:33:f4:6e:33:3e:8d:
9e:14:44:e6:86:47:d8:30:19:f8:8d:30:53:05:4f:
bd:7f:19:26:ae:99:fc:04:6f:e9:fd:01:9b:e8:7d:
7a:04:e6:50:df:02:fc:37:56:a6:37:ac:4f:43:1c:
c9:e9:ec:8d:5d:0d:bc:c2:cc:ae:6c:35:b5:06:46:
92:28:51:ff:5e:2e:54:99:d3:50:c0:19:b1:45:73:
04:64:5f:9d:ad:da:aa:50:c5:00:33:b0:46:30:db:
f8:0f:9c:4d:38:43:b2:56:0e:5e:bb:a0:9a:b3:65:
ef:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E9:FB:A0:37:FC:65:68:2B:BD:FA:16:E5:E2:9D:5C:50:42:2A:6C
X509v3 Authority Key Identifier:
keyid:F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/4un7oDf8ZWgrvfoW5eKdXFBCKmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/9OLptfuWen09eND7uTDAgOydkeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.56.0/21
Signature Algorithm: sha256WithRSAEncryption
02:59:56:6c:da:d9:c6:36:9a:a6:32:44:54:de:d5:3d:2c:7d:
22:f7:23:db:bd:6f:ac:b9:7f:ed:73:0f:8c:a0:a6:2b:68:52:
6b:db:39:d7:08:fa:ff:e8:b5:f3:b9:08:1b:09:9b:78:8a:c3:
54:33:4d:ac:ac:b5:36:50:5b:e9:c4:23:bb:1d:71:48:74:77:
d3:23:59:c5:08:89:5d:f0:51:aa:ab:bc:e4:65:1a:c7:a1:57:
13:26:7f:d2:93:f3:11:27:5c:24:ff:d5:3a:38:3e:7d:8f:ed:
30:84:a9:1e:ee:77:83:33:8f:47:d7:b9:0c:fc:0d:31:ee:23:
ff:36:a0:cc:fb:70:d0:6e:ed:46:e2:37:5d:0d:9f:37:6f:79:
69:a1:69:f2:4d:05:ae:af:b5:e2:25:4c:42:d1:74:2b:fb:d3:
88:50:8c:de:5d:4b:5b:9a:7c:42:dd:f9:0c:e5:c3:11:d7:92:
1c:42:a7:a4:8e:e6:f7:5c:61:26:f9:6c:b1:58:8a:f5:ed:ac:
a5:19:5f:41:b7:33:79:3c:f5:bc:c4:0a:e0:74:dd:0f:dc:6c:
90:41:c6:32:46:5b:80:18:1c:81:b1:82:8a:bf:71:8e:db:eb:
0c:40:64:ff:51:7e:a7:cd:b0:f4:7e:0c:3e:10:d1:d2:af:a8:
70:ed:bf:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:16:22 2025 by rpki-client