Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/RR9CZyYi6n9Q08SG7w4DsIQSJqE.roa
File: RR9CZyYi6n9Q08SG7w4DsIQSJqE.roa (raw, json)
Hash identifier: N5pZ5HpdV+sU2XpEoXlts+Mklu638CuRARvFwE/FmiI=
Subject key identifier: 45:1F:42:67:26:22:EA:7F:50:D3:C4:86:EF:0E:03:B0:84:12:26:A1
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 0194266C22533A2BB3C41CB60C83131195D5
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/RR9CZyYi6n9Q08SG7w4DsIQSJqE.roa
Signing time: Thu 02 Jan 2025 09:50:08 +0000
ROA not before: Thu 02 Jan 2025 09:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198178
IP address blocks: 138.124.81.0/24 maxlen: 24
138.124.107.0/24 maxlen: 24
138.124.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:22:53:3a:2b:b3:c4:1c:b6:0c:83:13:11:95:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jan 2 09:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=451f42672622ea7f50d3c486ef0e03b0841226a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:ca:62:8a:01:7f:0c:be:35:b8:83:39:be:
c6:9f:e2:fb:b6:c2:03:48:a1:05:eb:37:8e:80:44:
1f:4f:d3:43:20:51:a1:bd:17:56:88:05:11:92:54:
02:3f:12:96:ed:2a:9f:2b:41:46:fd:8b:3d:23:d2:
ca:ad:4a:ab:e9:c4:c2:80:09:be:97:0d:99:1d:6c:
19:d2:5b:e4:c6:01:6d:fb:8a:ad:16:f3:58:a2:90:
de:e8:f0:0f:c2:2d:e9:3e:bf:63:01:6a:cf:c9:ce:
f8:52:ca:98:e0:fc:a6:bc:ef:81:16:71:39:0e:23:
62:1a:a2:eb:c8:e2:3a:19:e6:02:28:8d:17:7e:60:
6f:35:a1:44:bd:35:81:80:fe:ff:4b:9c:a2:57:94:
b6:8f:6a:87:ee:47:75:a1:3c:a1:95:4a:c6:49:f6:
12:db:53:52:b3:fd:50:51:5d:57:4f:b6:0e:71:5b:
54:5f:86:da:60:58:87:2b:ca:18:b6:9e:9b:7b:a7:
db:d9:8b:e1:53:bb:c3:28:14:b5:bb:8a:07:04:15:
9b:bf:6e:46:fb:c2:0c:e3:47:16:ab:ff:65:28:3f:
d0:ec:02:0f:66:bb:9b:3d:ea:b2:72:9e:37:bd:10:
3b:e7:96:06:df:bf:6e:04:a3:c7:33:93:9c:90:c4:
bd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1F:42:67:26:22:EA:7F:50:D3:C4:86:EF:0E:03:B0:84:12:26:A1
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/RR9CZyYi6n9Q08SG7w4DsIQSJqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.81.0/24
138.124.107.0/24
138.124.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:80:61:6c:26:22:79:50:b6:98:7c:6a:0b:27:7e:aa:ef:7c:
59:f3:d4:30:d2:51:3c:fa:f6:1c:83:7c:31:69:9f:3e:5c:95:
76:88:73:6e:3c:40:c3:b4:3c:00:5f:8b:58:65:a1:e4:e3:37:
16:48:f7:e4:38:f5:37:a6:90:2c:1b:04:ac:9f:16:67:9a:a8:
fc:39:6c:2d:11:a1:ac:ea:e5:0b:90:ef:6f:12:5c:f4:03:66:
51:ca:f1:39:68:3e:1a:3d:ed:8e:ff:dc:c5:dd:36:1a:31:21:
38:9b:13:5a:e1:bf:91:a8:4c:c1:7b:b1:38:0b:33:4e:e0:eb:
9a:7a:db:1e:f8:41:d7:1e:21:dc:09:84:74:19:8d:7b:46:08:
45:40:6d:32:dc:f1:91:cd:40:51:cc:36:82:16:a8:20:66:90:
fa:b2:ba:4e:d1:ba:7e:3f:ac:f1:cb:09:53:97:a7:a0:d4:97:
f9:db:22:7a:d7:fc:7f:bf:bd:08:ab:41:ae:65:92:44:72:f7:
66:55:48:eb:78:c9:61:31:37:88:57:e4:66:8f:7b:99:d2:87:
79:9a:de:e0:64:2f:8e:2f:8a:fb:15:2f:34:46:47:d6:63:c7:
8d:f6:8e:b3:2b:a9:d6:c7:85:65:02:01:56:5e:ed:53:37:9e:
4f:28:84:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:36:45 2025 by rpki-client