Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HT9n5XGxiSRGbixWv-3kz0mWWh4.roa
File: HT9n5XGxiSRGbixWv-3kz0mWWh4.roa (raw, json)
Hash identifier: iHpx3TCWPvIoST4OBGoxr/waO+FYhNZeiOZuEYotXaU=
Subject key identifier: 1D:3F:67:E5:71:B1:89:24:46:6E:2C:56:BF:ED:E4:CF:49:96:5A:1E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01946E45F79BBEA2DADCCF2D1C8905C0806C
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HT9n5XGxiSRGbixWv-3kz0mWWh4.roa
Signing time: Thu 16 Jan 2025 08:41:06 +0000
ROA not before: Thu 16 Jan 2025 08:41:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 109.121.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:45:f7:9b:be:a2:da:dc:cf:2d:1c:89:05:c0:80:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 16 08:41:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d3f67e571b18924466e2c56bfede4cf49965a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:4b:04:a9:90:41:fd:76:10:ad:0a:71:95:
39:42:cd:22:11:7b:11:88:fa:88:f2:af:78:93:26:
55:b1:b2:8a:f0:9d:ae:f9:d4:03:43:ac:be:a9:00:
51:db:b9:92:11:67:b0:90:dc:23:4a:40:e3:b2:84:
be:d0:21:63:6e:a1:ee:fe:d2:29:c0:cf:2a:e0:c1:
62:13:0f:36:a3:a6:41:4c:11:3f:69:2d:72:a6:54:
f6:88:e3:72:04:6c:a6:43:af:5b:aa:ec:60:70:c6:
a1:a6:06:8d:4b:01:be:cb:56:d5:3e:e4:2e:58:1a:
46:ed:92:56:38:59:ca:bb:56:08:8a:70:66:58:54:
31:a2:32:d7:8f:06:62:10:da:b4:e8:95:0f:a8:db:
22:72:b8:f9:63:18:67:96:cd:0a:e5:d4:cb:cf:7b:
e2:ef:5e:e1:20:37:56:c9:a0:de:ad:f4:c8:56:0e:
a0:1b:c6:df:4e:ef:81:67:56:69:f5:9f:5f:9f:58:
2f:89:45:5b:41:f3:80:ca:bd:a5:80:13:88:20:ba:
42:ba:99:07:4a:bf:0c:32:1b:c0:27:a2:1a:3f:1e:
7f:fc:47:0d:fd:3a:af:0c:b4:5d:b8:62:fa:dd:42:
7e:4d:23:fb:f4:74:a8:7a:3b:9c:37:24:19:f0:d5:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3F:67:E5:71:B1:89:24:46:6E:2C:56:BF:ED:E4:CF:49:96:5A:1E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HT9n5XGxiSRGbixWv-3kz0mWWh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.44.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:55:42:b1:59:29:5d:e7:38:d3:14:8c:57:89:0c:a7:13:e6:
8d:27:50:aa:1e:ca:19:b7:05:77:55:77:94:dd:20:c7:2b:3a:
e6:d4:3e:aa:5e:a0:aa:12:78:64:76:6b:17:e7:33:34:38:96:
67:1a:8c:d2:6f:23:5a:90:27:d7:65:2d:25:07:d3:86:fe:15:
c5:a7:72:84:09:c6:7f:0c:d7:63:39:a7:9d:47:9e:54:aa:fe:
43:c4:3b:1f:4b:5d:b7:f3:1c:a0:e0:72:3b:40:26:8c:18:87:
55:69:ee:c4:6d:e5:7f:ac:f8:2e:0d:ae:6f:a0:74:c9:24:30:
cd:15:9e:e3:09:e6:aa:c3:b3:da:43:f9:9d:89:3f:4b:2a:de:
e4:80:90:43:18:de:30:f1:3f:f8:b8:f5:8d:65:a4:ee:b9:65:
f4:1f:0d:10:22:45:fd:1e:57:d2:a1:86:86:28:53:9e:0f:6d:
9f:ef:68:49:81:6b:d5:a1:b8:94:2c:1f:25:44:df:16:27:72:
4c:79:d6:3b:a7:67:66:63:ce:d8:e6:1b:5f:1b:fd:bf:02:be:
07:b4:56:d3:3a:c6:52:0e:b9:27:c3:e0:f0:b1:8a:97:c7:1f:
ce:c5:67:4f:0b:aa:cd:5e:b1:c0:42:c8:b8:5d:14:13:e5:45:
92:c5:8e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:12:24 2025 by rpki-client