Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/d2MIp2qYuBZCHWiIbVeAISsNGI4.roa
File: d2MIp2qYuBZCHWiIbVeAISsNGI4.roa (raw, json)
Hash identifier: ma8Nz3xs0m2BEdDPTCkwHa6WDhwuna/hfw1DQ0N0ODE=
Subject key identifier: 77:63:08:A7:6A:98:B8:16:42:1D:68:88:6D:57:80:21:2B:0D:18:8E
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 019427482AF017393F4C8FDF2B09B74520AF
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/d2MIp2qYuBZCHWiIbVeAISsNGI4.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47872
IP address blocks: 109.121.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2a:f0:17:39:3f:4c:8f:df:2b:09:b7:45:20:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=776308a76a98b816421d68886d5780212b0d188e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d7:ad:e1:90:ee:16:39:db:87:23:35:96:32:
7b:89:30:77:a9:c3:e8:bf:06:c0:75:f4:48:7e:aa:
08:d0:5b:0d:e1:b8:27:b3:a2:55:4c:24:33:36:16:
72:38:f5:8d:24:39:14:2a:c9:fa:e0:2a:de:4f:7e:
13:6a:a1:46:d0:74:c2:ff:5b:58:17:72:6a:e4:d8:
08:47:72:d9:d7:01:5d:d8:1e:88:00:3d:8c:cf:46:
63:2c:6f:47:df:42:50:b5:d8:f9:82:82:38:76:6d:
2a:10:66:e0:a7:c4:5b:63:7e:ec:79:dc:c6:77:4d:
24:85:69:e5:59:f9:1f:6b:37:ad:2a:d3:a6:f8:96:
99:f4:9e:ce:c9:f3:e1:bd:e5:10:0c:6e:94:8c:a7:
ec:3b:ac:21:18:66:a8:7b:04:fd:af:13:2e:7f:01:
6b:23:df:3e:5b:44:2d:c6:46:8e:81:88:75:32:22:
65:71:9e:48:26:ce:d2:80:f5:0f:1b:fc:b0:a0:06:
8c:2d:69:4e:3d:c6:2c:3b:72:9b:a9:36:d4:ee:34:
be:a5:bc:c5:9e:86:80:1d:6f:79:95:33:30:8d:a7:
d4:55:39:e6:44:db:29:08:39:4e:c7:05:67:88:dc:
ef:63:91:43:38:d6:a2:15:46:27:78:3b:da:ef:3c:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:63:08:A7:6A:98:B8:16:42:1D:68:88:6D:57:80:21:2B:0D:18:8E
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/d2MIp2qYuBZCHWiIbVeAISsNGI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.152.0/24
Signature Algorithm: sha256WithRSAEncryption
34:8e:44:d4:a1:4d:3a:53:7c:d8:b2:2f:7c:29:c8:a2:d6:48:
d6:3c:45:34:33:af:51:54:23:ca:5a:97:7a:87:36:cb:6d:4c:
a9:cc:ec:98:ef:77:52:29:8f:39:14:8f:44:4a:c6:58:a4:b4:
0a:73:23:00:33:40:35:af:87:fa:24:1f:48:00:88:14:68:60:
bc:b6:28:11:6c:2d:4c:c5:7f:1e:66:3f:d3:9e:e4:6b:ef:a5:
bf:56:96:fd:97:83:42:09:af:e7:c7:89:42:14:68:05:7f:37:
d4:2a:49:d2:38:31:f9:be:cf:04:fa:0f:03:ca:81:56:9a:3f:
f2:79:c3:cd:30:ff:88:68:91:6a:10:1e:7c:5f:44:92:48:39:
2d:a7:de:77:91:a1:c2:fe:ac:90:3f:18:2a:b6:a9:4d:a8:f6:
28:e6:bb:b2:1e:02:06:ac:10:c2:31:88:30:e4:ef:cb:93:26:
29:fa:82:73:c7:00:05:10:b6:cb:af:28:ae:7a:65:a9:71:e0:
ee:18:6a:76:74:d1:5e:2a:78:99:fd:6c:f5:d9:97:f4:c7:33:
c7:3d:1b:98:9d:7d:29:ba:f9:0d:5b:fd:a3:9f:7e:8a:d9:68:
a9:24:e2:20:7d:64:1f:0f:a0:9c:10:d6:74:9c:da:1e:51:cb:
98:cc:0c:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSCrwFzk/TI/fKwm3RSCvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZWY5ZTQ5ZmVjZjI1MDllYjY3NjllZWUyY2RkNGE1MjUz
YjcxYzUwHhcNMjUwMTAyMTM1MDI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzYzMDhhNzZhOThiODE2NDIxZDY4ODg2ZDU3ODAyMTJiMGQxODhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Net4ZDuFjnbhyM1ljJ7iTB3qcPo
vwbAdfRIfqoI0FsN4bgns6JVTCQzNhZyOPWNJDkUKsn64CreT34TaqFG0HTC/1tY
F3Jq5NgIR3LZ1wFd2B6IAD2Mz0ZjLG9H30JQtdj5goI4dm0qEGbgp8RbY37sedzG
d00khWnlWfkfazetKtOm+JaZ9J7OyfPhveUQDG6UjKfsO6whGGaoewT9rxMufwFr
I98+W0QtxkaOgYh1MiJlcZ5IJs7SgPUPG/ywoAaMLWlOPcYsO3KbqTbU7jS+pbzF
noaAHW95lTMwjafUVTnmRNspCDlOxwVniNzvY5FDONaiFUYneDva7zy2vQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHdjCKdqmLgWQh1oiG1XgCErDRiOMB8GA1UdIwQY
MBaAFBLvnkn+zyUJ62dp7uLN1KUlO3HFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTIt
MWQ1ZDk0NWEwNWEzLzEvZDJNSXAycVl1QlpDSFdpSWJWZUFJU3NOR0k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTItMWQ1ZDk0NWEwNWEz
LzEvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXmYMA0G
CSqGSIb3DQEBCwUAA4IBAQA0jkTUoU06U3zYsi98Kcii1kjWPEU0M69RVCPKWpd6
hzbLbUypzOyY73dSKY85FI9ESsZYpLQKcyMAM0A1r4f6JB9IAIgUaGC8tigRbC1M
xX8eZj/TnuRr76W/Vpb9l4NCCa/nx4lCFGgFfzfUKknSODH5vs8E+g8DyoFWmj/y
ecPNMP+IaJFqEB58X0SSSDktp953kaHC/qyQPxgqtqlNqPYo5ruyHgIGrBDCMYgw
5O/LkyYp+oJzxwAFELbLryiuemWpceDuGGp2dNFeKniZ/Wz12Zf0xzPHPRuYnX0p
uvkNW/2jn36K2WipJOIgfWQfD6CcENZ0nNoeUcuYzAyd
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:26:52 2025 by rpki-client