Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/X57-ZKJiC7pX1z2IhDWI4_Vb_x4.roa
File: X57-ZKJiC7pX1z2IhDWI4_Vb_x4.roa (raw, json)
Hash identifier: rQu7xdiT+nmHcmLVj2/49bWlcYuEeveWXCKAsMSKvZs=
Subject key identifier: 5F:9E:FE:64:A2:62:0B:BA:57:D7:3D:88:84:35:88:E3:F5:5B:FF:1E
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01941F8C8748C033F7831972BB448A669D4B
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/X57-ZKJiC7pX1z2IhDWI4_Vb_x4.roa
Signing time: Wed 01 Jan 2025 01:48:10 +0000
ROA not before: Wed 01 Jan 2025 01:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62048
IP address blocks: 109.122.240.0/24 maxlen: 24
109.122.242.0/24 maxlen: 24
109.122.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:87:48:c0:33:f7:83:19:72:bb:44:8a:66:9d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 1 01:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f9efe64a2620bba57d73d88843588e3f55bff1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4f:55:77:fa:36:04:7f:0a:f8:27:17:37:33:
53:83:fb:04:ae:0a:02:9d:66:82:8c:27:8c:da:70:
2b:0e:60:6d:e0:b6:d4:9d:e4:fa:33:6a:30:90:a1:
0b:d0:1a:92:6b:97:ab:f5:bc:59:5c:e8:ff:a8:8c:
46:d3:e9:85:be:b7:8c:e1:8f:dd:a6:47:09:cc:ad:
09:ed:4d:19:18:81:fb:f5:cd:a0:f8:ed:55:fa:91:
3c:b9:ce:75:1d:33:63:ed:f8:17:45:98:75:05:22:
4f:ec:6e:5e:51:cc:f7:42:9a:4d:eb:19:d4:84:6e:
85:73:6d:a2:72:3e:c2:ca:59:20:dd:6c:ab:53:1f:
c0:f9:38:0a:4d:d5:69:b8:86:fc:55:7f:e1:aa:f7:
06:8d:66:d9:ee:25:d8:e7:1f:6f:4e:9c:50:28:73:
b7:68:f3:2a:37:28:c7:ee:0a:43:24:6b:e9:58:e6:
57:b1:1a:d7:95:30:da:9d:77:a9:da:43:6e:d5:7e:
d8:a8:da:7c:63:07:38:59:db:8d:0a:3c:bc:30:b1:
2c:0b:ea:60:07:9d:89:5c:2c:bd:6f:a9:a0:95:70:
39:9d:fe:7e:27:5e:ea:22:36:80:9e:8e:e4:5d:0c:
62:1a:cc:a1:24:23:3f:26:5d:76:3c:85:4b:b7:f0:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9E:FE:64:A2:62:0B:BA:57:D7:3D:88:84:35:88:E3:F5:5B:FF:1E
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/X57-ZKJiC7pX1z2IhDWI4_Vb_x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.240.0/24
109.122.242.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:1e:43:2c:cf:26:03:d3:51:d5:9a:39:1c:a3:8a:71:e9:a9:
2b:60:77:77:21:46:89:4b:a2:ef:8a:f8:d3:20:fb:a6:b9:c5:
ba:4a:1b:f6:d1:e9:85:a0:3f:17:0b:2c:a7:17:47:38:ad:7f:
48:d3:bb:33:cb:60:35:1a:87:4f:4d:d9:c6:b5:8c:30:5b:8b:
89:ac:99:1a:c5:91:3c:7c:e5:c7:1a:08:f8:f3:77:a3:6c:b1:
6c:b8:cc:8e:6b:c3:54:9f:73:bf:42:38:c9:41:45:75:62:7a:
3b:b5:12:b4:d3:40:9c:c1:cd:48:31:b6:07:0e:ea:23:13:f7:
e1:a6:f7:08:b9:08:75:b8:49:d6:8a:02:bf:89:43:c3:8f:4a:
98:c7:8a:d1:8a:08:89:2f:9f:2c:69:69:38:e7:09:88:5d:d8:
dc:d2:c6:5f:a2:e5:f1:5f:35:0f:06:65:71:8b:c6:19:3a:7c:
6d:5e:0d:65:f4:7d:21:54:c8:e6:aa:ee:d9:95:29:75:51:cd:
57:18:92:90:68:33:45:ce:29:f0:29:6b:ff:05:73:3f:44:72:
72:04:10:1f:30:a7:1a:c6:4d:0f:12:47:45:35:7b:7c:bd:89:
e4:9f:e5:3c:ce:ab:1d:8f:c4:21:19:bd:46:3f:e1:a6:48:37:
2f:01:ce:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:40:34 2025 by rpki-client