Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/4zn8x8kD5AyVLVgVtD8ky8SMJ2A.roa
File: 4zn8x8kD5AyVLVgVtD8ky8SMJ2A.roa (raw, json)
Hash identifier: YHwUiN/40LGFuA8398DRqGcTc0NoVkTOGc0IvGJRyPw=
Subject key identifier: E3:39:FC:C7:C9:03:E4:0C:95:2D:58:15:B4:3F:24:CB:C4:8C:27:60
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0194DFD09143879D23DB3AB7CCB00EE4A64C
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/4zn8x8kD5AyVLVgVtD8ky8SMJ2A.roa
Signing time: Fri 07 Feb 2025 09:49:35 +0000
ROA not before: Fri 07 Feb 2025 09:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
212.69.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:d0:91:43:87:9d:23:db:3a:b7:cc:b0:0e:e4:a6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 7 09:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e339fcc7c903e40c952d5815b43f24cbc48c2760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:10:17:92:f6:f1:74:11:67:5f:a2:a9:b2:
7e:8e:66:2b:35:ec:ad:56:98:b1:15:54:75:56:f2:
cc:39:ac:4d:de:c8:39:ca:ab:77:80:99:45:a4:e6:
15:c2:2e:4c:c5:85:8f:73:37:46:fd:71:60:f0:09:
75:5d:dd:0a:05:c2:30:61:86:72:62:e0:18:67:8c:
30:d5:4e:c1:a0:30:66:2a:c1:56:b2:6e:64:fc:89:
0f:93:ba:22:dd:34:63:62:49:48:30:b1:8b:da:01:
32:96:4c:e1:22:8b:50:22:49:21:33:e7:34:94:42:
a1:78:54:ea:bc:20:e9:a3:50:09:9b:a3:99:79:0c:
db:ec:14:37:46:b5:32:90:2a:c3:55:dc:b7:98:07:
a7:a7:c3:dc:0e:df:7e:3e:4d:18:65:95:fc:17:64:
02:e7:57:0d:68:eb:63:06:18:48:75:24:c8:95:3f:
17:7d:32:25:ba:a5:70:18:10:f2:6b:42:ec:86:2b:
de:8f:0d:10:21:b2:74:37:8c:b5:b5:e8:33:b3:eb:
f1:a0:ee:20:c1:a1:03:8b:61:38:e8:10:bc:c2:4b:
73:1d:04:82:22:c0:b1:78:ab:db:85:52:a2:7d:61:
da:32:f8:c2:e7:e2:14:e1:7f:20:17:fe:05:ec:58:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:39:FC:C7:C9:03:E4:0C:95:2D:58:15:B4:3F:24:CB:C4:8C:27:60
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/4zn8x8kD5AyVLVgVtD8ky8SMJ2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.43.0/24
185.47.91.0/24
212.69.0.0/24
Signature Algorithm: sha256WithRSAEncryption
43:fd:79:9b:34:d9:08:cd:71:13:96:65:05:b2:dd:7d:75:49:
b7:d2:5b:f0:b6:94:ad:cd:c3:a5:ec:eb:6e:2e:96:06:e8:3e:
10:13:bd:26:10:a1:17:9a:23:1b:3e:f3:51:e3:24:1d:ce:db:
70:77:d6:fc:c1:3a:86:a4:a0:77:24:a6:5b:9a:66:46:f5:7f:
fe:78:bb:85:7c:11:19:44:a8:33:a6:67:e9:66:ad:ab:88:e2:
a2:ea:e3:bf:65:35:43:7b:c0:47:d4:7f:ab:c0:c7:bb:50:b5:
09:32:96:20:0c:69:cd:e2:13:f5:f3:e0:83:2b:b9:30:83:96:
17:7c:3d:27:d5:08:8d:89:3e:89:c3:13:bb:67:bf:4d:64:85:
1a:c9:c1:35:b0:36:cf:0c:98:6e:47:a6:2a:65:80:81:4a:62:
2f:5d:2a:65:db:ec:d2:e5:28:a4:3b:06:3e:50:d3:1a:45:e8:
84:a5:f7:f8:43:8c:d9:b2:ae:50:b9:98:73:54:5b:42:29:7d:
ee:9b:77:7d:d9:11:27:90:f8:59:10:79:25:1c:3d:96:91:61:
2a:df:87:d6:86:f1:68:e5:13:4c:e0:c4:7a:0b:27:d1:ea:3c:
1b:44:01:7d:21:54:93:d3:18:7e:44:cc:e6:4a:a9:55:47:d4:
47:72:70:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:03 2025 by rpki-client