Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/oyOwytjNRcSSmC0Uz56t5B0Pn0U.roa
File: oyOwytjNRcSSmC0Uz56t5B0Pn0U.roa (raw, json)
Hash identifier: bjJY96goKiZV3xFO6+9vadLGgV/G2i2Ywu0z1Lu4FeE=
Subject key identifier: A3:23:B0:CA:D8:CD:45:C4:92:98:2D:14:CF:9E:AD:E4:1D:0F:9F:45
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019427B553A180027718AA2782CB97825560
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/oyOwytjNRcSSmC0Uz56t5B0Pn0U.roa
Signing time: Thu 02 Jan 2025 15:49:42 +0000
ROA not before: Thu 02 Jan 2025 15:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 109.121.32.0/24 maxlen: 24
109.121.35.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
212.69.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:53:a1:80:02:77:18:aa:27:82:cb:97:82:55:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 15:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a323b0cad8cd45c492982d14cf9eade41d0f9f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:34:f1:32:37:2c:fe:dd:ee:c7:75:ff:15:
b4:02:04:4e:f9:31:72:b5:fa:8e:e7:78:33:18:d4:
30:6f:71:4c:a8:4a:26:94:6b:c9:f6:29:fa:9a:51:
5c:eb:94:6f:25:ef:bf:7d:dc:58:27:76:45:bf:8c:
13:9b:a4:14:2e:b1:3a:6a:32:56:42:92:0b:cb:0d:
8e:79:06:56:fa:39:0f:89:cf:db:1d:99:2f:4f:44:
f2:00:f6:25:72:a7:d3:e1:46:fd:0e:47:4e:93:b8:
ea:b8:95:33:f7:86:65:3a:e5:b4:6d:a2:81:c0:ed:
25:03:97:44:76:ec:d2:cd:c3:c4:10:b5:c8:a8:8c:
88:18:cf:3d:68:e2:10:b0:0b:bf:f5:60:89:79:30:
0e:ef:be:a3:65:ea:17:14:88:6d:76:23:ff:11:49:
40:01:c0:6e:55:d3:06:c8:d5:b8:25:bc:b8:fa:a3:
57:b6:2a:4b:9b:a6:9a:a6:df:0c:0d:42:48:1f:cd:
f7:cc:f1:0b:79:0d:2a:5d:20:3c:f3:70:8a:31:03:
a8:d0:ff:ce:5c:52:a0:25:47:fd:0c:ea:40:7f:94:
24:22:69:f8:0c:e2:a9:fd:c3:bc:1c:7c:ef:9c:c3:
31:b1:1c:54:ec:37:34:92:36:65:a9:b8:74:42:ab:
25:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:23:B0:CA:D8:CD:45:C4:92:98:2D:14:CF:9E:AD:E4:1D:0F:9F:45
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/oyOwytjNRcSSmC0Uz56t5B0Pn0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.32.0/24
109.121.35.0/24
109.121.41.0/24
109.121.46.0/24
212.69.10.0/24
Signature Algorithm: sha256WithRSAEncryption
48:e3:05:59:27:b7:c8:10:04:4b:c2:95:02:c2:12:f3:0a:51:
3b:a7:bb:99:b4:e5:5f:dd:c8:e8:67:1b:0d:2a:91:b9:d3:00:
20:bc:aa:a8:80:b4:4b:1e:b5:b1:8f:f8:7b:db:0c:1a:6f:16:
1a:84:ec:80:f1:23:1c:c9:2c:25:db:60:a1:4c:45:01:a0:0f:
94:c2:cc:1b:7f:30:57:06:d4:32:51:b2:67:8c:eb:62:8e:7a:
90:87:b1:64:6a:53:ed:f8:e6:02:c3:22:59:dd:1c:bb:4c:9e:
bf:de:b4:df:e0:ad:47:71:31:ef:7c:99:ab:27:64:45:f9:de:
21:48:72:68:de:fb:12:49:d1:b1:10:64:42:32:d7:d9:eb:eb:
9e:ed:6e:66:cf:4e:23:88:3f:3a:81:24:ea:f4:8e:da:84:57:
d2:4d:2b:c4:ea:b8:c5:ce:19:c3:16:16:20:4d:1a:ca:49:29:
0e:87:6c:0d:d9:4f:06:a7:4a:ae:84:36:cc:27:2f:a3:37:93:
05:af:fd:9f:be:e6:32:c5:f5:a9:cf:82:08:d4:34:bf:d0:52:
f6:69:8d:7c:68:d1:e3:e6:e4:ee:6c:6c:b0:f0:ca:5a:fb:f8:
cb:4b:51:6c:47:29:80:81:42:c5:b8:e0:d4:69:fe:70:23:66:
6c:07:3b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:19:33 2025 by rpki-client