Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/TAOBnxgc8LmscXgS8IDXSi623Tg.roa
File: TAOBnxgc8LmscXgS8IDXSi623Tg.roa (raw, json)
Hash identifier: 6RWz7UJTHw39ChM2sLrqHKPxQnZlrGLnwbJez0KQ0Uo=
Subject key identifier: 4C:03:81:9F:18:1C:F0:B9:AC:71:78:12:F0:80:D7:4A:2E:B6:DD:38
Certificate issuer: /CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
Certificate serial: 0189FB0926F2CAC82F38E38FC645324E0ECF
Authority key identifier: F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/TAOBnxgc8LmscXgS8IDXSi623Tg.roa
Signing time: Tue 15 Aug 2023 21:10:28 +0000
ROA not before: Tue 15 Aug 2023 21:10:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208911
IP address blocks: 109.122.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fb:09:26:f2:ca:c8:2f:38:e3:8f:c6:45:32:4e:0e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
Validity
Not Before: Aug 15 21:10:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c03819f181cf0b9ac717812f080d74a2eb6dd38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:c1:0e:d7:25:4f:57:8a:1e:0e:f9:29:62:
a4:a1:a5:2a:d8:80:64:2b:ed:9b:78:1c:3c:bc:3f:
d8:29:5d:ec:4e:74:83:12:02:13:ba:a5:6e:56:38:
96:3a:ad:64:1c:0d:bb:1d:fb:09:9b:d3:b0:a5:36:
94:6b:25:da:58:51:6e:14:9c:91:02:55:3f:81:92:
4d:5d:58:49:a0:b7:de:1c:ab:ec:90:7d:d6:60:45:
c8:1c:ca:ca:be:15:89:82:cc:9b:48:9a:fe:4e:6b:
0a:06:4d:66:c8:44:a7:bf:8c:5b:44:de:ce:c1:04:
20:90:74:fa:aa:1a:a4:f8:a9:4c:d4:41:b7:af:44:
19:29:d9:45:61:f0:64:5e:99:af:ae:0e:7d:d1:dc:
55:2c:2b:2f:5e:c2:96:41:c6:cd:62:f4:0e:4f:0e:
5c:e7:a1:04:5b:81:62:a9:60:4b:1c:99:2d:db:a4:
ff:aa:a3:89:b3:5d:49:50:15:b8:08:d5:66:92:9b:
ea:85:31:27:2b:0b:50:24:c8:9e:7a:66:32:be:7a:
d8:84:92:32:86:b3:a5:75:33:00:fc:fd:88:52:56:
8c:db:d5:ea:9d:79:42:83:c4:07:2c:7c:9d:ad:1d:
b1:ed:3d:a4:32:81:63:5c:42:35:6e:59:55:f8:3c:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:03:81:9F:18:1C:F0:B9:AC:71:78:12:F0:80:D7:4A:2E:B6:DD:38
X509v3 Authority Key Identifier:
keyid:F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/TAOBnxgc8LmscXgS8IDXSi623Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/9OLptfuWen09eND7uTDAgOydkeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.56.0/21
Signature Algorithm: sha256WithRSAEncryption
10:53:40:ee:c5:42:1c:29:d4:51:e2:e5:61:eb:99:8c:04:59:
fe:1c:56:9c:bc:78:25:07:a8:10:15:b7:50:98:e1:f8:60:d2:
45:f1:be:75:23:6e:af:af:d4:a0:0b:a2:ff:c2:a7:96:67:5c:
a4:f5:f7:ab:6e:bb:c1:0b:e6:12:91:93:c9:cb:d4:9a:21:7f:
0a:13:10:c5:bb:17:67:7e:bc:9d:11:63:ea:78:28:9a:9c:bf:
53:f3:ad:89:3f:1c:76:c9:6b:80:c5:bc:ef:5e:28:5c:2f:e3:
a8:81:89:7e:2c:82:27:0d:75:d0:df:ca:0e:7c:80:3c:ab:bf:
dd:2f:d2:42:77:84:0a:aa:07:5f:b7:49:23:98:07:ee:0b:c2:
27:da:bc:ae:cb:ab:e0:40:e3:4a:21:10:ad:cf:7e:f9:9c:f8:
4e:90:ba:e4:ca:57:23:c9:ac:bc:f2:7e:5d:3a:1f:75:2d:89:
e2:8e:83:70:6c:de:e9:0e:ca:63:88:ae:6c:37:06:54:7d:30:
8e:f9:b7:64:c8:d8:97:81:73:32:fb:5f:79:c5:4d:8a:12:cd:
fd:95:d0:14:b5:d2:ee:b8:65:09:3c:47:6f:88:74:4b:08:4b:
e1:08:59:39:fb:d8:61:44:07:e8:2b:d7:1a:87:c6:7b:47:8e:
ae:12:2d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:14:17 2025 by rpki-client