Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/fL9K7tZGGZ0rxKtEuSAiWj4Rpjg.roa
File: fL9K7tZGGZ0rxKtEuSAiWj4Rpjg.roa (raw, json)
Hash identifier: m3RbbbRnXoZDyJVx1OpTbKRsiAgJOpn/2JivbbReHo0=
Subject key identifier: 7C:BF:4A:EE:D6:46:19:9D:2B:C4:AB:44:B9:20:22:5A:3E:11:A6:38
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01942369FB8FF69E3180DA80EA316E84D7F0
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/fL9K7tZGGZ0rxKtEuSAiWj4Rpjg.roa
Signing time: Wed 01 Jan 2025 19:48:55 +0000
ROA not before: Wed 01 Jan 2025 19:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198592
IP address blocks: 109.120.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fb:8f:f6:9e:31:80:da:80:ea:31:6e:84:d7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Jan 1 19:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cbf4aeed646199d2bc4ab44b920225a3e11a638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:dc:66:2a:14:e0:af:1f:22:c5:7e:9e:b3:
45:e2:29:56:3a:80:38:5a:4e:c0:91:ae:3a:18:ca:
ac:f3:2e:39:47:f2:9d:f9:41:8c:4b:50:25:89:c8:
66:07:16:fe:93:5e:b4:46:64:85:93:bd:4c:04:5d:
e3:5e:c1:ac:c9:4d:f7:d6:91:74:51:7c:2a:b3:1e:
0e:f2:f0:6c:92:05:a6:b4:15:c0:61:03:00:23:50:
35:b8:0b:29:bf:f2:f2:9c:23:e5:14:f5:3f:a0:cc:
16:b3:cd:6e:ac:40:e1:db:41:f6:90:04:51:76:43:
3c:ea:b3:4f:cd:85:61:1e:ec:ac:b2:c5:b1:b7:eb:
6d:0c:fc:d9:ae:9a:0f:fd:8c:3d:a4:2a:fb:51:13:
c4:45:90:01:8f:80:6a:2b:ba:02:59:0f:71:6c:aa:
70:28:5e:54:d4:dd:97:d9:1d:9c:7f:d0:f6:33:f7:
f0:e9:62:42:f5:24:af:54:0a:b5:15:ff:8d:5f:61:
ae:0d:d2:92:de:5c:bb:62:f1:56:69:c9:2b:be:c3:
68:51:1a:70:c2:d8:b4:8d:c1:f2:47:b0:67:e9:96:
b4:35:7f:2b:b3:5a:bb:79:6c:91:3b:e9:97:17:5b:
e3:e6:28:90:02:d6:97:c7:c1:c5:e9:1a:59:d0:2b:
08:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BF:4A:EE:D6:46:19:9D:2B:C4:AB:44:B9:20:22:5A:3E:11:A6:38
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/fL9K7tZGGZ0rxKtEuSAiWj4Rpjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.120.148.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e2:a0:03:9b:48:ed:b9:1e:32:d1:d6:83:91:f5:1c:f7:96:
11:eb:65:64:40:9f:03:ec:85:25:f9:cd:5f:59:ef:80:67:d6:
af:1d:1c:89:37:b2:4d:a9:ea:a5:7e:f5:4d:ac:34:f5:b2:e0:
fc:4b:1c:62:5d:bb:a7:6a:cd:65:1c:84:cc:47:6d:64:a1:4d:
59:da:f8:c1:2a:d7:be:78:64:40:42:c9:17:bc:21:14:d3:01:
0d:1f:3f:fe:1f:87:8b:96:33:2d:41:70:b7:91:84:5d:a8:84:
59:23:99:9d:ca:e8:6d:7e:6f:5d:49:a8:d7:75:cb:7a:b5:11:
cc:45:ab:26:44:13:9c:73:d7:56:7e:3e:45:b0:0c:3d:f7:92:
08:81:13:ba:f5:79:06:9f:3b:76:21:2a:8e:51:a8:69:38:d0:
5d:d4:3f:ee:83:46:a5:a1:1d:37:06:a6:bf:4d:10:14:c1:a3:
ad:40:ba:8e:62:9d:6d:7f:fd:98:83:ba:22:45:0c:33:0e:4e:
3b:f0:24:85:fb:0c:e8:37:88:82:90:e6:53:b5:10:97:c5:e6:
ca:97:45:62:43:da:ab:87:a6:a4:be:7e:12:e5:44:4a:ce:85:
94:81:74:85:f3:1c:78:8a:de:56:63:cc:96:77:b0:35:0d:67:
ec:7d:9b:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjafuP9p4xgNqA6jFuhNfwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl
NmRlNWUwHhcNMjUwMTAxMTk0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2JmNGFlZWQ2NDYxOTlkMmJjNGFiNDRiOTIwMjI1YTNlMTFhNjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhDcZioU4K8fIsV+nrNF4ilWOoA4
Wk7Aka46GMqs8y45R/Kd+UGMS1AlichmBxb+k160RmSFk71MBF3jXsGsyU331pF0
UXwqsx4O8vBskgWmtBXAYQMAI1A1uAspv/LynCPlFPU/oMwWs81urEDh20H2kARR
dkM86rNPzYVhHuysssWxt+ttDPzZrpoP/Yw9pCr7URPERZABj4BqK7oCWQ9xbKpw
KF5U1N2X2R2cf9D2M/fw6WJC9SSvVAq1Ff+NX2GuDdKS3ly7YvFWackrvsNoURpw
wti0jcHyR7Bn6Za0NX8rs1q7eWyRO+mXF1vj5iiQAtaXx8HF6RpZ0CsI2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHy/Su7WRhmdK8SrRLkgIlo+EaY4MB8GA1UdIwQY
MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt
OTJjODFmMjJlNzEyLzEvZkw5Szd0WkdHWjByeEt0RXVTQWlXajRScGpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy
LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXiUMA0G
CSqGSIb3DQEBCwUAA4IBAQBG4qADm0jtuR4y0daDkfUc95YR62VkQJ8D7IUl+c1f
We+AZ9avHRyJN7JNqeqlfvVNrDT1suD8SxxiXbunas1lHITMR21koU1Z2vjBKte+
eGRAQskXvCEU0wENHz/+H4eLljMtQXC3kYRdqIRZI5mdyuhtfm9dSajXdct6tRHM
RasmRBOcc9dWfj5FsAw995IIgRO69XkGnzt2ISqOUahpONBd1D/ug0aloR03Bqa/
TRAUwaOtQLqOYp1tf/2Yg7oiRQwzDk478CSF+wzoN4iCkOZTtRCXxebKl0ViQ9qr
h6akvn4S5URKzoWUgXSF8xx4it5WY8yWd7A1DWfsfZtI
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:17:52 2025 by rpki-client