Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/RjTJ2EaIZfE051tXU0vuScbwBZk.roa
File: RjTJ2EaIZfE051tXU0vuScbwBZk.roa (raw, json)
Hash identifier: TowX0WWdHApvFSISjmRiH2FsG9LnVvVrELSSI98m3So=
Subject key identifier: 46:34:C9:D8:46:88:65:F1:34:E7:5B:57:53:4B:EE:49:C6:F0:05:99
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019427B54E7D9F035D50889F90AC5F43490F
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/RjTJ2EaIZfE051tXU0vuScbwBZk.roa
Signing time: Thu 02 Jan 2025 15:49:41 +0000
ROA not before: Thu 02 Jan 2025 15:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 109.121.0.0/19 maxlen: 24
178.253.237.0/24 maxlen: 24
212.69.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:4e:7d:9f:03:5d:50:88:9f:90:ac:5f:43:49:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 15:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4634c9d8468865f134e75b57534bee49c6f00599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e4:93:ff:cf:08:d0:36:a0:8d:93:cb:87:41:
e7:dc:7f:e7:43:c3:69:11:79:56:06:3a:a0:62:24:
17:e8:c9:1a:13:7e:6f:5d:a2:fe:4d:e7:cd:75:7f:
09:50:e2:05:41:8c:50:f2:f0:c9:c3:d3:1c:d5:06:
fe:ae:c3:fc:af:b8:b4:47:f1:43:ac:37:0a:ff:0d:
69:b3:f5:b2:46:d6:7f:e0:59:56:8b:f5:df:6d:b7:
90:2a:b2:ae:dd:00:e8:26:e2:c6:62:0e:18:9e:cc:
43:58:8c:a2:70:42:78:37:cd:4c:7d:0d:72:3b:5a:
e3:1d:cf:e2:2a:da:34:b9:9e:4c:b3:f2:70:e8:ab:
9e:7b:46:55:ac:60:2d:5d:65:e1:73:f5:dc:5a:ab:
57:c1:41:17:9f:94:74:30:1e:59:16:f5:4a:1f:aa:
7b:32:ed:47:bb:34:6d:e0:c7:00:47:e4:b7:54:af:
c7:c0:0c:98:68:49:ee:d4:83:fc:51:f6:ac:06:8f:
d5:b0:d6:ff:b5:b8:58:71:0f:0f:a1:d2:88:9f:96:
80:4f:5f:5d:b7:4a:97:fb:b5:c0:06:ab:27:44:53:
52:28:a7:55:45:ab:9b:77:91:a5:05:0f:de:62:3a:
6d:14:35:68:a1:b6:b5:ac:e1:73:5f:1d:74:77:19:
09:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:34:C9:D8:46:88:65:F1:34:E7:5B:57:53:4B:EE:49:C6:F0:05:99
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/RjTJ2EaIZfE051tXU0vuScbwBZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.0.0/19
178.253.237.0/24
212.69.10.0/23
Signature Algorithm: sha256WithRSAEncryption
95:41:36:15:0c:f8:c7:96:e4:a4:86:a8:1c:18:28:f3:a8:98:
88:65:f6:22:c5:9d:38:5b:73:85:18:3c:48:fe:61:39:27:e9:
9f:3a:a3:21:d1:e9:21:d2:da:b2:56:58:64:62:0a:c7:fa:42:
0b:37:a8:43:58:d8:3d:ee:a9:00:8a:00:84:4a:e3:36:99:aa:
a5:58:56:bc:a6:0b:bf:29:40:21:4b:49:fd:7f:25:b6:34:8a:
b7:c0:77:10:be:65:be:0b:16:17:af:59:b1:db:c7:3a:9f:01:
b8:3e:dd:88:aa:4f:70:b8:bf:a5:8e:eb:3a:5b:5f:99:dc:b6:
a7:28:53:9f:64:68:30:42:ba:97:2f:2f:2f:29:0f:97:27:bf:
0c:30:70:93:1e:51:2a:a1:67:c0:de:a7:10:e2:5a:59:c8:90:
36:66:d6:76:c5:9e:9b:62:01:e5:0c:76:1e:65:2c:07:8a:89:
9e:66:20:fe:c0:a7:f8:bf:9e:94:1b:df:84:af:bb:c3:b4:86:
9f:bb:1f:60:0c:bb:c1:82:ad:ce:a9:71:f1:f0:e8:c4:36:89:
46:bd:78:ba:90:1d:94:22:69:1a:8b:ab:2d:d5:d2:b5:1e:77:
a1:4e:fb:37:9d:d4:da:dc:68:3c:c2:9d:8f:36:90:5d:f0:8c:
82:b1:cb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:52:28 2025 by rpki-client