Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/CgujnGNEc-20wdFJXUVHlIVMCeU.roa
File: CgujnGNEc-20wdFJXUVHlIVMCeU.roa (raw, json)
Hash identifier: WCLWBX4MF/Cdbq3Wpb/HoLuDdHI1QI1Gbbq0Yfoe6JM=
Subject key identifier: 0A:0B:A3:9C:63:44:73:ED:B4:C1:D1:49:5D:45:47:94:85:4C:09:E5
Certificate issuer: /CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Certificate serial: 31B8709A
Authority key identifier: 6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/CgujnGNEc-20wdFJXUVHlIVMCeU.roa
Signing time: Thu 31 Mar 2022 03:59:12 +0000
ROA not before: Thu 31 Mar 2022 03:59:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39396
IP address blocks: 109.121.138.0/24 maxlen: 24
109.121.139.0/24 maxlen: 24
109.121.136.0/21 maxlen: 21
109.121.136.0/24 maxlen: 24
109.121.137.0/24 maxlen: 24
109.121.144.0/23 maxlen: 23
109.121.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 834171034 (0x31b8709a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Validity
Not Before: Mar 31 03:59:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a0ba39c634473edb4c1d1495d454794854c09e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3a:e8:22:91:21:97:f9:21:f2:ee:f7:40:d1:
26:8d:24:62:96:b3:15:d9:67:a2:d5:90:13:77:11:
73:51:d7:2c:8c:82:96:03:51:97:85:97:5b:70:29:
4f:df:f8:69:d7:96:cd:95:79:ab:31:c9:4e:d0:28:
4b:13:80:40:58:01:22:52:05:ae:ad:75:70:31:81:
01:c0:81:4d:bc:ef:09:f5:f9:15:c4:16:95:a7:46:
e2:37:cf:64:a5:63:7c:88:90:11:5c:75:f6:9e:24:
51:de:15:1f:e5:6a:0a:4f:5e:6c:77:07:b3:0d:56:
6b:72:13:a0:19:1e:38:77:79:e3:d6:2f:ad:5c:3d:
73:34:3c:d5:e7:08:5d:b7:01:52:04:41:ec:36:a4:
bc:68:d2:a2:da:b1:02:e3:00:12:22:b1:db:6c:ab:
00:e6:12:8e:a8:e1:f1:5e:14:06:dd:dc:4c:6e:0b:
12:e5:f5:5b:ae:70:61:e5:ac:a6:8b:21:95:aa:82:
86:b6:14:b7:15:f0:a1:7e:0b:62:1a:ef:cb:8e:3e:
bb:14:22:b1:40:d8:7f:4f:42:2d:1a:f8:18:a8:59:
5b:9f:1b:9d:cf:31:fa:c2:eb:15:f0:2d:90:fc:a0:
93:e7:b0:8c:3b:bf:89:01:88:48:2a:7f:1a:02:ef:
6b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0B:A3:9C:63:44:73:ED:B4:C1:D1:49:5D:45:47:94:85:4C:09:E5
X509v3 Authority Key Identifier:
keyid:6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/CgujnGNEc-20wdFJXUVHlIVMCeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.136.0-109.121.145.255
109.121.154.0/24
Signature Algorithm: sha256WithRSAEncryption
13:3f:4c:78:cd:5a:6b:e1:b1:af:f3:94:54:c7:74:42:28:4b:
cb:80:ac:46:03:e5:69:8b:32:eb:19:1c:8a:60:4b:be:30:51:
b7:3e:a9:cd:d2:18:98:9e:08:e2:d0:7f:16:8c:b8:e9:77:70:
68:46:25:4a:5c:ef:99:eb:42:53:b8:66:1b:e3:a6:b1:66:18:
73:ac:b0:8c:33:4a:71:27:56:88:62:37:00:6a:22:58:73:08:
56:3c:f2:1e:d9:9b:ca:26:e4:c0:a8:5a:a0:ed:89:fb:eb:8d:
5b:21:54:b8:11:da:81:0b:4d:f9:d3:5c:93:98:80:83:f2:13:
11:3a:bc:26:66:7f:70:18:04:7a:60:46:95:32:ef:67:ef:ad:
14:03:35:98:d0:6c:99:32:5c:38:76:a3:5f:70:5d:92:1f:80:
f0:43:cf:d1:16:81:a1:0b:c4:c5:ea:8a:de:c3:98:9e:68:e4:
19:fd:88:c8:f1:d8:45:f7:18:65:58:68:0f:dd:91:07:e8:89:
4a:9c:d9:7a:0f:10:67:de:7f:29:21:b7:05:99:73:c2:23:56:
cf:e8:73:39:de:43:50:2c:e1:7b:8c:a0:09:1b:8f:30:f5:22:
6d:ca:f1:1b:d9:89:9f:fc:74:04:7f:b2:5f:42:5f:09:f9:a4:
a5:aa:d7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:30:39 2025 by rpki-client