Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1FgAgOKAkv5XcCRQ3J7QkwpKT98.roa
File: 1FgAgOKAkv5XcCRQ3J7QkwpKT98.roa (raw, json)
Hash identifier: 6Mdiww8rup10ctjHqTpOD/Pwd3nyKO+layuU1TvTAHQ=
Subject key identifier: D4:58:00:80:E2:80:92:FE:57:70:24:50:DC:9E:D0:93:0A:4A:4F:DF
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01941F8C84AD8344F94C49BB1FAEC9706F80
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1FgAgOKAkv5XcCRQ3J7QkwpKT98.roa
Signing time: Wed 01 Jan 2025 01:48:10 +0000
ROA not before: Wed 01 Jan 2025 01:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35372
IP address blocks: 109.122.248.0/24 maxlen: 24
185.239.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:84:ad:83:44:f9:4c:49:bb:1f:ae:c9:70:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 1 01:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4580080e28092fe57702450dc9ed0930a4a4fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bd:35:8a:77:45:ab:18:38:20:e8:f4:2f:21:
1c:7f:59:f2:34:b0:61:76:ac:78:07:73:79:84:06:
78:22:56:b1:72:f7:b1:90:e3:85:41:77:21:2c:02:
d2:ec:e9:5e:18:3d:4d:54:b6:9c:81:99:14:52:08:
c0:62:53:46:b7:d8:7c:c1:e7:01:3b:67:b4:8d:e0:
b9:cf:d6:17:46:32:66:49:00:e4:74:e4:53:1c:5c:
68:b7:1c:cc:c0:7b:1e:ac:9c:19:93:dc:a0:86:f9:
cc:05:aa:cc:1b:80:3d:0e:fb:f3:9c:05:d3:1a:2b:
d9:59:23:6a:fc:3c:3e:e5:10:fa:c8:bf:23:2d:19:
f3:2a:5e:a8:b8:e9:61:7f:90:5f:dd:a5:5a:32:47:
fe:15:be:9f:b3:e1:db:5b:9f:9c:f1:8a:e4:c1:63:
73:1f:7e:6f:29:8e:f6:5e:0e:b7:a0:fa:c5:57:d6:
01:8f:a3:8b:28:dd:a4:a0:e9:63:54:91:80:1a:d1:
5a:f9:a9:b2:6f:7c:97:63:a2:f2:04:c3:dd:ba:74:
6d:e6:fa:b0:25:f1:52:6a:f2:c4:a9:dc:b8:eb:a1:
84:f3:c6:58:a6:a4:79:55:6c:bd:e3:29:6f:f7:f3:
e2:89:5f:ba:72:d7:b1:15:9a:6c:c5:95:cb:e9:a1:
48:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:58:00:80:E2:80:92:FE:57:70:24:50:DC:9E:D0:93:0A:4A:4F:DF
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1FgAgOKAkv5XcCRQ3J7QkwpKT98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.248.0/24
185.239.1.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:17:98:86:21:6a:f9:90:15:5c:65:22:c5:48:bf:31:9e:23:
eb:a4:9a:1b:77:2f:5c:42:69:81:83:c6:39:65:d8:71:01:8e:
8d:95:2b:ae:9a:3b:17:38:13:4d:73:03:78:31:91:87:98:5a:
41:82:86:ab:ca:56:2a:7e:16:c1:8a:b5:44:b2:46:4a:88:da:
31:8c:9d:2f:23:12:1f:e3:21:4c:af:21:2c:f2:ba:d4:39:7b:
94:ec:62:af:8b:02:d3:21:8b:f6:d3:c7:41:27:53:cb:89:38:
0a:96:28:fd:40:39:d9:3e:62:5c:6f:a1:93:5c:8d:05:f6:8c:
79:a0:06:20:39:d6:8e:c9:cc:ca:b0:68:f5:a5:88:59:68:f8:
f4:79:0a:94:a7:79:4c:46:b2:29:ed:d0:66:5f:05:a2:c2:9f:
63:a6:06:a7:e9:7c:53:0e:96:66:9c:ee:12:d3:5d:26:18:6f:
5c:ff:6b:92:39:92:e9:9f:b1:7e:24:16:d2:c6:44:4e:21:59:
39:82:e6:70:9c:30:b1:be:e5:16:2c:75:bc:18:89:51:de:ab:
1e:a7:c2:e0:51:2a:16:d1:86:66:cb:f7:7b:62:51:c4:21:f9:
39:1f:b8:e9:7b:a9:db:42:a4:0c:ad:fa:81:f5:95:94:e7:0d:
ce:82:80:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:47:46 2025 by rpki-client