Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Iot6quDpej5Fft4dnAq5g2Dfr7U.roa
File: Iot6quDpej5Fft4dnAq5g2Dfr7U.roa (raw, json)
Hash identifier: 4wp+Nr9HRhgltOy88nTHWn5nX3bmN67l6wHXl99uqwo=
Subject key identifier: 22:8B:7A:AA:E0:E9:7A:3E:45:7E:DE:1D:9C:0A:B9:83:60:DF:AF:B5
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01949DE521867FE119F27559FBC99C7B6A6F
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Iot6quDpej5Fft4dnAq5g2Dfr7U.roa
Signing time: Sat 25 Jan 2025 14:37:06 +0000
ROA not before: Sat 25 Jan 2025 14:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198926
IP address blocks: 109.122.249.0/24 maxlen: 24
188.212.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9d:e5:21:86:7f:e1:19:f2:75:59:fb:c9:9c:7b:6a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 25 14:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=228b7aaae0e97a3e457ede1d9c0ab98360dfafb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2d:bb:fa:06:f3:48:f5:02:4c:a9:08:ce:46:
2a:af:ef:9f:9b:be:41:e0:d8:86:3d:02:65:1e:4d:
1d:0c:28:f3:40:b3:65:5c:bb:ce:1a:99:2f:88:b2:
d9:53:12:fd:02:09:ef:9b:31:db:39:00:86:89:5b:
6b:c2:56:7d:6f:9f:fd:d4:56:77:03:e4:96:02:ec:
b3:42:8f:96:8b:88:28:af:bf:61:92:93:3a:50:19:
f5:9f:7b:a2:9a:42:ca:a7:46:7a:f4:10:49:fb:fa:
83:33:cb:83:5d:11:01:44:ae:7e:fb:e0:c4:19:f1:
08:67:56:87:b2:ac:33:9a:9a:fa:ae:22:95:00:72:
69:d7:48:2f:6c:43:a4:ed:bc:9d:6e:67:de:7e:59:
e3:5c:19:87:96:0e:6a:21:92:f6:33:81:da:4f:7c:
ff:c8:00:ef:16:a8:88:9e:77:73:64:a4:4e:83:f6:
c0:1a:a1:9f:e2:89:d3:24:37:a8:91:8e:59:36:41:
92:a5:e8:a0:fe:73:ba:3d:68:23:7e:a2:fe:27:c8:
88:9b:a7:1c:66:c9:1f:66:de:66:26:a2:e7:70:8c:
03:f5:fc:2f:1a:53:bc:61:7d:a0:2d:71:d2:c0:58:
2e:0a:25:37:31:20:c7:9f:7a:c3:07:5b:3b:6f:54:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8B:7A:AA:E0:E9:7A:3E:45:7E:DE:1D:9C:0A:B9:83:60:DF:AF:B5
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Iot6quDpej5Fft4dnAq5g2Dfr7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.249.0/24
188.212.97.0/24
Signature Algorithm: sha256WithRSAEncryption
73:96:4b:c2:84:f8:8f:b4:37:2f:71:e4:3c:fc:12:2b:49:3c:
1c:5d:65:0d:43:e5:a0:e4:f5:d3:5c:3d:d6:da:eb:f5:e4:2c:
c5:50:4f:6e:23:96:95:04:18:96:06:70:59:41:c6:76:bb:87:
f8:9f:05:ce:18:ca:f4:e9:3e:7f:30:a8:f3:75:02:d9:85:81:
54:e7:91:6a:9e:c0:6c:b8:70:c0:07:3f:66:42:cf:db:1e:57:
7a:f3:ef:2a:f1:05:99:42:2c:21:6f:64:6d:66:94:fc:ee:69:
df:14:25:d0:20:cb:f9:35:f7:19:a7:80:47:e8:88:6e:4d:a8:
56:a5:dc:50:04:ae:30:d3:41:d8:a8:58:02:8e:5e:22:e4:14:
a5:25:c2:6a:07:90:4a:f3:c6:94:bf:0f:40:9d:d5:e9:3f:cd:
00:da:27:70:2a:01:43:30:7d:fb:95:13:dd:d2:07:d7:61:21:
23:20:3c:0d:16:f0:f8:10:cb:09:e2:95:b6:36:06:4e:07:60:
36:d4:e6:39:c3:f8:c6:12:01:31:66:59:da:c4:c3:32:de:0e:
53:00:18:83:d3:4e:71:d3:90:a0:9c:48:4f:3b:28:11:19:8f:
7e:ef:82:65:c9:31:aa:d6:d9:f6:10:52:43:9e:d5:59:10:40:
0b:90:ad:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:00:41 2025 by rpki-client