Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Pola2Po0q0mGEk7DIEMpRcIqt5g.roa
File: Pola2Po0q0mGEk7DIEMpRcIqt5g.roa (raw, json)
Hash identifier: F1W51SHx4h0AQjrvkFp/rcGJaZcmAG4nsNwWtU5YPcA=
Subject key identifier: 3E:89:5A:D8:FA:34:AB:49:86:12:4E:C3:20:43:29:45:C2:2A:B7:98
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01949D3CAC96FC5DA16F89E7E6F514EBC1F2
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Pola2Po0q0mGEk7DIEMpRcIqt5g.roa
Signing time: Sat 25 Jan 2025 11:33:06 +0000
ROA not before: Sat 25 Jan 2025 11:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4515
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9d:3c:ac:96:fc:5d:a1:6f:89:e7:e6:f5:14:eb:c1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 25 11:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e895ad8fa34ab4986124ec320432945c22ab798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:5e:0e:21:1e:47:94:9c:5a:99:bd:83:1a:
51:ce:bd:04:a6:c9:2f:cb:23:19:e4:7e:05:49:05:
f9:01:55:dd:6e:70:a4:e0:5b:b7:e5:b1:86:ef:35:
6c:8b:5c:ec:ac:51:d4:56:61:97:bb:99:89:95:12:
93:a6:45:ae:b8:e4:1d:62:6a:80:c7:20:8a:49:7b:
00:5f:ad:9b:d7:12:9f:aa:db:df:87:6a:b7:5f:66:
84:97:db:05:e8:11:2d:48:02:5d:e9:fc:43:e5:ca:
1c:ba:ba:31:59:42:56:e3:f3:55:dc:3e:b1:9c:de:
11:5a:b5:ee:64:c5:d1:84:d6:ac:56:d6:97:62:d3:
8e:6a:1c:8a:fe:98:35:7f:d2:f6:c1:38:42:06:b8:
b8:f5:da:57:81:57:73:79:1c:0a:bd:1e:be:31:77:
27:9f:01:67:08:91:b4:1c:8a:d9:df:9c:6f:84:6c:
1a:0e:9c:47:68:ab:9b:2c:dc:9a:7b:7f:da:ed:99:
59:a5:53:1a:43:72:b0:a9:84:8a:10:db:9c:91:1c:
ec:e9:76:20:ab:5b:5e:96:ea:c4:76:14:98:b3:14:
6d:c1:f6:cf:a4:88:5a:42:34:e9:df:74:ec:46:52:
6f:f8:4c:64:1d:04:56:3e:4c:d1:5c:b6:8f:b6:0d:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:89:5A:D8:FA:34:AB:49:86:12:4E:C3:20:43:29:45:C2:2A:B7:98
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Pola2Po0q0mGEk7DIEMpRcIqt5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
04:22:84:46:49:6d:ef:aa:ca:64:38:75:5c:a4:a3:32:d5:b3:
f0:72:d9:26:8b:05:88:14:77:a8:13:fc:ed:6c:e6:6f:2f:97:
20:67:21:d6:77:50:37:b6:f4:90:ed:6b:ac:16:02:af:78:2b:
86:f7:d2:d7:43:84:39:14:c2:c3:fc:21:e5:84:06:6f:ee:63:
d8:12:ec:72:0f:d9:b3:c3:b4:35:26:4a:24:11:82:c3:4b:ef:
a0:8d:92:f7:ea:18:04:d7:32:0a:8d:ad:8c:6c:d2:68:07:b2:
72:9a:8a:6b:7d:55:e2:7c:fd:5e:a3:d1:46:63:c5:5e:ad:39:
86:9e:68:c3:fc:9d:18:26:0b:d6:a7:30:4d:82:af:56:4c:08:
fb:4c:00:77:32:ef:67:ac:9f:80:a2:7b:e1:0a:4a:e4:4f:ce:
42:02:9a:17:26:6c:fc:69:4a:d8:e9:d2:d6:40:d7:82:67:c9:
81:7a:9f:18:87:7d:2c:82:b9:0c:8e:a6:46:9f:7b:46:53:2d:
2e:9b:9d:87:f5:ac:65:cf:d0:6d:0a:2b:6e:2c:a1:e7:c4:28:
64:1f:14:d9:20:2e:dc:27:f4:67:58:19:43:b8:dd:9a:33:24:
df:a4:95:18:7d:38:ec:62:8e:a8:fc:9d:bc:0c:d6:b1:28:90:
59:4d:d8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:23:17 2025 by rpki-client