Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/KvaEQEmYbbYuHslL-MGtAyo-m2o.roa
File: KvaEQEmYbbYuHslL-MGtAyo-m2o.roa (raw, json)
Hash identifier: X5W6uO0llg8M0/nBFAkOWtE1oQ1OqXNWwnS/1SvBYmU=
Subject key identifier: 2A:F6:84:40:49:98:6D:B6:2E:1E:C9:4B:F8:C1:AD:03:2A:3E:9B:6A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019427B557ACB7626EBA20170B745C03A223
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/KvaEQEmYbbYuHslL-MGtAyo-m2o.roa
Signing time: Thu 02 Jan 2025 15:49:43 +0000
ROA not before: Thu 02 Jan 2025 15:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 109.121.40.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.233.184.0/24 maxlen: 24
109.233.185.0/24 maxlen: 24
178.253.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:57:ac:b7:62:6e:ba:20:17:0b:74:5c:03:a2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 15:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2af6844049986db62e1ec94bf8c1ad032a3e9b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:a9:2d:51:af:4a:db:38:da:93:37:1f:cf:
2d:ad:37:73:6d:4b:3d:1f:a2:fe:02:12:fa:0b:1a:
33:42:26:6a:a2:0a:14:44:55:54:63:f9:63:11:fc:
71:2c:f5:5a:b0:22:04:c7:e9:81:ee:65:56:5a:44:
64:d5:89:96:d2:a8:6f:8b:a0:5c:ea:78:77:bf:e8:
e0:2e:35:73:63:9d:45:26:f4:92:59:0a:19:e9:32:
be:56:c5:65:9c:a5:ee:8a:dd:7d:78:5a:f5:21:89:
b8:cb:b6:22:9d:63:bf:30:a3:05:67:cd:79:ca:1b:
c1:7e:ce:84:66:67:9d:02:61:4e:22:fb:08:07:f8:
aa:24:bf:56:da:b7:e9:c9:a5:b5:8c:2c:00:5d:fc:
e9:30:a7:3a:c3:a5:3a:e5:91:5d:f5:e6:9f:df:6f:
52:ee:e1:e4:e5:1b:a2:4d:e9:95:f2:d0:00:ed:88:
79:3f:16:d3:ab:c9:08:a3:cc:0b:d3:ac:c9:9e:07:
cb:19:cb:ed:e6:50:36:3b:64:ce:58:24:63:8c:40:
df:15:33:f1:63:ad:63:63:e0:22:af:b0:89:9e:14:
36:a9:4f:a2:e4:f1:91:3e:9f:6a:63:b8:75:37:2f:
ce:da:5c:52:da:38:b5:ba:a4:2f:0d:84:1b:e7:9d:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F6:84:40:49:98:6D:B6:2E:1E:C9:4B:F8:C1:AD:03:2A:3E:9B:6A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/KvaEQEmYbbYuHslL-MGtAyo-m2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.40.0/24
109.121.43.0/24
109.233.184.0/23
178.253.237.0/24
Signature Algorithm: sha256WithRSAEncryption
44:e1:21:08:1e:fb:d9:b5:ec:84:a0:e7:32:bc:86:88:b1:a8:
16:62:ba:3b:11:57:85:3e:38:dd:39:f2:75:f7:1d:6a:93:65:
dc:90:cc:84:65:57:4c:04:24:2f:29:a1:15:ca:a7:77:09:c7:
c8:d7:a8:d4:cc:a1:4f:02:5e:ab:67:c5:aa:d5:e6:be:fc:47:
ae:25:18:a0:f7:50:bd:5c:40:39:8a:5d:6b:79:84:24:10:0e:
19:a5:df:b2:bb:83:33:7c:2e:7c:57:23:19:27:aa:e2:a8:34:
f1:86:c1:c2:c2:bb:46:e8:01:9f:e8:da:57:d7:73:32:bd:f6:
22:8d:4a:07:22:e6:c2:88:b6:d2:7e:22:c0:95:78:4e:fd:8f:
e0:62:fd:83:fe:b3:a7:01:a7:5c:65:2b:fe:b9:f3:a8:40:dd:
11:e1:9b:02:f2:ce:87:6e:1d:c1:29:57:c6:d3:ae:64:a2:ef:
4c:25:9f:79:95:70:8f:e4:8e:07:4d:3a:cd:68:02:49:8b:6f:
9e:f3:4c:dd:6e:9e:00:1c:a4:15:6a:16:49:de:20:3b:60:56:
04:0d:c3:f3:1b:9e:2a:eb:85:7a:6d:ce:ae:6b:63:f7:e9:79:
dc:fa:80:7b:99:f2:cc:34:b2:72:61:e6:a4:0e:96:80:58:3f:
fa:b5:2b:c2
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQntVest2JuuiAXC3RcA6IjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjUwMTAyMTU0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWY2ODQ0MDQ5OTg2ZGI2MmUxZWM5NGJmOGMxYWQwMzJhM2U5YjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cSpLVGvSts42pM3H88trTdzbUs9
H6L+AhL6CxozQiZqogoURFVUY/ljEfxxLPVasCIEx+mB7mVWWkRk1YmW0qhvi6Bc
6nh3v+jgLjVzY51FJvSSWQoZ6TK+VsVlnKXuit19eFr1IYm4y7YinWO/MKMFZ815
yhvBfs6EZmedAmFOIvsIB/iqJL9W2rfpyaW1jCwAXfzpMKc6w6U65ZFd9eaf329S
7uHk5RuiTemV8tAA7Yh5PxbTq8kIo8wL06zJngfLGcvt5lA2O2TOWCRjjEDfFTPx
Y61jY+Air7CJnhQ2qU+i5PGRPp9qY7h1Ny/O2lxS2ji1uqQvDYQb550AHwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCr2hEBJmG22Lh7JS/jBrQMqPptqMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvS3ZhRVFFbVliYll1SHNsTC1NR3RBeW8tbTJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAbXkoAwQA
bXkrAwQBbem4AwQAsv3tMA0GCSqGSIb3DQEBCwUAA4IBAQBE4SEIHvvZteyEoOcy
vIaIsagWYro7EVeFPjjdOfJ19x1qk2XckMyEZVdMBCQvKaEVyqd3CcfI16jUzKFP
Al6rZ8Wq1ea+/EeuJRig91C9XEA5il1reYQkEA4Zpd+yu4MzfC58VyMZJ6riqDTx
hsHCwrtG6AGf6NpX13MyvfYijUoHIubCiLbSfiLAlXhO/Y/gYv2D/rOnAadcZSv+
ufOoQN0R4ZsC8s6Hbh3BKVfG065kou9MJZ95lXCP5I4HTTrNaAJJi2+e80zdbp4A
HKQVahZJ3iA7YFYEDcPzG54q64V6bc6ua2P36Xnc+oB7mfLMNLJyYeakDpaAWD/6
tSvC
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:42:52 2025 by rpki-client