Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/EFi6MGXtQnxkWbh_AglEfWcKt80.roa
File: EFi6MGXtQnxkWbh_AglEfWcKt80.roa (raw, json)
Hash identifier: pn2fbECVvAIC8zRrhKYH8yPhn/uDPqXhMKhoWxYhjTo=
Subject key identifier: 10:58:BA:30:65:ED:42:7C:64:59:B8:7F:02:09:44:7D:67:0A:B7:CD
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019427B55724B921FF55A56EAF8307EE07F9
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/EFi6MGXtQnxkWbh_AglEfWcKt80.roa
Signing time: Thu 02 Jan 2025 15:49:43 +0000
ROA not before: Thu 02 Jan 2025 15:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 109.121.34.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:57:24:b9:21:ff:55:a5:6e:af:83:07:ee:07:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 15:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1058ba3065ed427c6459b87f0209447d670ab7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:f0:09:5d:bc:b6:8c:da:ab:ac:b1:48:2c:
71:da:8e:9e:3c:b6:09:d9:b6:63:9b:49:55:10:d9:
b1:b8:78:ea:72:1e:f2:56:ee:27:19:42:1e:54:5d:
f9:68:f4:64:45:b2:8a:af:54:8e:a7:19:2f:16:27:
34:3a:8c:3e:86:4f:61:db:53:21:3f:e9:59:d1:a0:
e2:b6:2e:e3:b6:ed:f8:fb:3b:e6:1c:f4:bc:f9:2e:
ae:54:5a:84:a3:42:e9:da:bf:41:b6:31:f8:a7:7a:
06:04:42:b3:fe:e1:54:ba:62:55:25:5f:03:3a:0f:
60:de:26:a6:48:7b:f0:b3:d8:da:f7:0a:ba:56:69:
42:7e:9a:bd:c4:4f:17:fb:94:d6:9c:c7:77:49:14:
a4:07:86:6a:9c:da:3e:66:7f:b8:b2:e9:b6:d7:9a:
ae:cb:84:dc:44:79:70:45:74:8b:19:6a:7e:bc:35:
be:f9:d8:76:95:21:f7:a0:28:7c:0f:c8:e9:d2:3d:
c4:44:89:9b:2e:e9:40:b3:6a:9d:f2:4c:e3:f2:bf:
cd:4f:f5:db:b4:fa:71:e0:ec:1c:b1:d9:cc:5a:17:
1a:40:68:2c:b6:03:26:b5:44:bb:9b:e7:c6:1a:fd:
2f:cc:8b:ff:92:10:3c:b9:86:74:e8:b7:c3:08:91:
8e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:58:BA:30:65:ED:42:7C:64:59:B8:7F:02:09:44:7D:67:0A:B7:CD
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/EFi6MGXtQnxkWbh_AglEfWcKt80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.34.0/24
109.121.44.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a7:af:8d:54:dc:52:06:ce:ad:06:57:c5:a4:f3:11:d4:1d:
a0:f0:0e:39:ec:11:de:ff:c8:e9:49:af:aa:8d:62:91:80:bc:
c2:cd:1a:05:36:80:02:34:65:f6:33:64:93:8a:06:11:a5:41:
1b:06:a0:23:74:f7:3e:1d:0c:0f:ad:0b:6d:bd:8f:fa:12:5a:
02:1b:ab:da:13:9c:ef:9e:c0:04:34:cb:90:a9:ec:47:bb:5e:
ce:26:bb:2e:ce:36:b2:88:ba:d9:53:0f:f7:76:54:7f:65:a3:
e0:81:c3:bf:db:6a:38:70:00:1b:77:eb:3c:2e:74:df:43:3c:
c9:33:0e:29:9e:78:6d:2b:ef:46:72:2b:67:95:93:3e:e4:59:
60:88:8a:a2:ec:31:d8:8c:a0:94:fd:4c:c1:b0:34:61:0c:22:
9f:e7:f4:91:fb:89:d7:42:9f:2a:c9:4b:36:be:4d:c1:1b:16:
1c:36:e8:e5:a9:9e:87:91:af:3c:b2:a2:84:65:f4:19:e9:c8:
39:c0:2f:74:5b:4a:c9:f2:c9:ab:c2:19:c4:e2:13:87:5c:07:
33:0f:e6:7c:ae:bc:76:d2:71:e6:89:d6:fe:51:cb:f9:20:1f:
e9:4b:46:6d:08:28:0c:75:e0:bd:b0:63:c1:22:18:45:b7:83:
48:20:ac:30
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQntVckuSH/VaVur4MH7gf5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjUwMTAyMTU0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDU4YmEzMDY1ZWQ0MjdjNjQ1OWI4N2YwMjA5NDQ3ZDY3MGFiN2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUDwCV28tozaq6yxSCxx2o6ePLYJ
2bZjm0lVENmxuHjqch7yVu4nGUIeVF35aPRkRbKKr1SOpxkvFic0Oow+hk9h21Mh
P+lZ0aDiti7jtu34+zvmHPS8+S6uVFqEo0Lp2r9BtjH4p3oGBEKz/uFUumJVJV8D
Og9g3iamSHvws9ja9wq6VmlCfpq9xE8X+5TWnMd3SRSkB4ZqnNo+Zn+4sum215qu
y4TcRHlwRXSLGWp+vDW++dh2lSH3oCh8D8jp0j3ERImbLulAs2qd8kzj8r/NT/Xb
tPpx4OwcsdnMWhcaQGgstgMmtUS7m+fGGv0vzIv/khA8uYZ06LfDCJGOCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBBYujBl7UJ8ZFm4fwIJRH1nCrfNMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvRUZpNk1HWHRRbnhrV2JoX0FnbEVmV2NLdDgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXkiAwQA
bXksMA0GCSqGSIb3DQEBCwUAA4IBAQBgp6+NVNxSBs6tBlfFpPMR1B2g8A457BHe
/8jpSa+qjWKRgLzCzRoFNoACNGX2M2STigYRpUEbBqAjdPc+HQwPrQttvY/6EloC
G6vaE5zvnsAENMuQqexHu17OJrsuzjayiLrZUw/3dlR/ZaPggcO/22o4cAAbd+s8
LnTfQzzJMw4pnnhtK+9GcitnlZM+5FlgiIqi7DHYjKCU/UzBsDRhDCKf5/SR+4nX
Qp8qyUs2vk3BGxYcNujlqZ6Hka88sqKEZfQZ6cg5wC90W0rJ8smrwhnE4hOHXAcz
D+Z8rrx20nHmidb+Ucv5IB/pS0ZtCCgMdeC9sGPBIhhFt4NIIKww
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:56:13 2025 by rpki-client