Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Xb4K6QGWK6u2H5rpgCimBfmnPeo.roa
File: Xb4K6QGWK6u2H5rpgCimBfmnPeo.roa (raw, json)
Hash identifier: evjk8yV3VEqaA3LwbzzX9i/xxrm2pBL5U0hXMWqJQB4=
Subject key identifier: 5D:BE:0A:E9:01:96:2B:AB:B6:1F:9A:E9:80:28:A6:05:F9:A7:3D:EA
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 01942748271163A2518360C35FB0C370BFFD
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Xb4K6QGWK6u2H5rpgCimBfmnPeo.roa
Signing time: Thu 02 Jan 2025 13:50:27 +0000
ROA not before: Thu 02 Jan 2025 13:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8628
IP address blocks: 109.121.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:27:11:63:a2:51:83:60:c3:5f:b0:c3:70:bf:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Jan 2 13:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dbe0ae901962babb61f9ae98028a605f9a73dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ac:4a:1a:02:93:8a:09:e7:ce:66:18:42:e0:
ac:c8:2a:ce:47:cc:57:38:55:b6:60:62:8c:cd:e2:
6c:c9:51:b8:a8:01:b2:3e:99:af:c9:cd:d5:4e:2a:
46:78:fc:b9:a9:b8:6e:21:8c:85:4b:5a:b1:9b:56:
78:23:e5:46:f6:bd:b8:a5:24:e2:0b:3f:70:b3:ca:
d9:b0:0b:af:8c:ac:04:59:1a:fb:39:24:ef:94:95:
e8:6d:fe:ad:3e:ab:4b:1e:53:b6:06:cb:17:00:59:
93:18:80:96:84:f8:69:61:10:7e:3e:52:f8:0f:af:
7f:a5:d6:fc:ce:b6:5e:92:e4:31:b0:a6:d1:48:f6:
91:70:e3:b5:90:5a:ef:16:62:56:e9:68:ed:00:f0:
a1:82:b8:58:5b:52:1e:ac:6a:9b:00:a5:cf:ba:23:
be:be:2f:dd:de:92:8e:05:fc:3f:8b:ba:f5:24:8e:
ae:9b:59:b2:43:23:87:a3:14:64:f4:11:79:5a:dc:
da:99:e6:81:cd:13:93:c7:bd:2e:27:b8:a4:1c:ee:
ec:57:70:82:ff:31:8a:aa:e6:d3:8e:2b:1b:45:b8:
a3:71:78:c2:eb:28:19:bb:42:15:a0:cb:fa:64:5d:
90:6d:4d:b0:10:1d:c5:7c:8e:21:2e:f1:c5:4c:5f:
5a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BE:0A:E9:01:96:2B:AB:B6:1F:9A:E9:80:28:A6:05:F9:A7:3D:EA
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Xb4K6QGWK6u2H5rpgCimBfmnPeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.133.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b8:c8:5e:9f:c9:fc:99:70:be:de:01:27:08:9b:a0:2b:50:
46:f2:3d:ba:51:fc:fc:3d:27:80:47:04:a9:cf:9b:1b:b1:46:
3d:c6:06:38:0b:1e:41:b2:e2:41:d5:86:b4:50:4b:96:0b:d6:
0a:6f:d9:96:fc:af:6c:24:77:9b:ce:79:28:13:3b:5b:c0:22:
4b:b9:e0:d9:27:93:89:93:e6:39:42:73:0b:28:b4:e2:c4:ef:
02:24:35:2f:b1:85:fa:dd:f5:38:6f:41:98:78:88:bb:12:d3:
7f:24:5d:31:1c:29:ac:d3:37:2b:80:f6:fc:6b:0e:ea:fe:0c:
68:c3:1c:47:48:bb:ba:79:09:3e:c8:cb:8e:c7:79:90:6d:5b:
82:c9:f6:b2:9d:97:da:38:d8:f4:86:6c:d2:5b:4b:39:af:bf:
c8:c4:0f:93:b3:53:e4:61:8e:07:a7:f5:5f:f8:da:12:0a:b8:
c5:c0:92:ff:95:4b:98:89:f0:78:4f:78:73:83:4b:49:10:cb:
70:d4:df:7e:15:6f:da:16:00:cb:36:cf:05:3f:d9:65:f3:95:
a5:cb:ca:ae:85:0a:b1:2b:76:df:87:7a:03:06:0b:c8:b6:6f:
0a:d8:21:cd:d3:39:5a:9f:80:82:7b:07:8b:fa:55:cf:a3:74:
dc:73:3b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:13:56 2025 by rpki-client