Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/OXpZMENsMNvoFN4fa-s1XcR4t0o.roa
File: OXpZMENsMNvoFN4fa-s1XcR4t0o.roa (raw, json)
Hash identifier: HIUIFVDxL+16aKrDHcJGRP1lNd7Uj0XD3WRA4m9dkts=
Subject key identifier: 39:7A:59:30:43:6C:30:DB:E8:14:DE:1F:6B:EB:35:5D:C4:78:B7:4A
Certificate issuer: /CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Certificate serial: 325FC531
Authority key identifier: 6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/OXpZMENsMNvoFN4fa-s1XcR4t0o.roa
Signing time: Wed 15 Jun 2022 10:41:44 +0000
ROA not before: Wed 15 Jun 2022 10:41:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39396
IP address blocks: 109.121.138.0/24 maxlen: 24
109.121.139.0/24 maxlen: 24
109.121.136.0/21 maxlen: 21
109.121.136.0/24 maxlen: 24
109.121.137.0/24 maxlen: 24
109.121.142.0/24 maxlen: 24
109.121.143.0/24 maxlen: 24
109.121.144.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 845137201 (0x325fc531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Validity
Not Before: Jun 15 10:41:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=397a5930436c30dbe814de1f6beb355dc478b74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:73:28:af:23:99:65:ed:f7:2e:b2:06:36:
6a:9a:62:a1:1a:8e:85:c7:99:14:4b:74:2f:ca:94:
f1:14:be:50:95:f2:5e:6e:28:ac:9e:e8:bc:5a:26:
fd:87:ab:6e:0c:82:77:c3:90:b5:72:00:8c:f1:2b:
79:ee:9f:e5:bb:a3:2f:0a:a6:c2:be:68:ad:16:6f:
c5:94:a8:79:19:47:2a:f6:17:52:e7:74:47:4b:ce:
42:36:18:bf:d3:42:2a:03:b3:91:53:8a:ae:bd:12:
41:b2:85:7d:39:f2:b5:aa:a7:12:67:26:b1:6e:08:
76:d3:8b:49:6e:de:5c:87:4c:d5:79:8b:77:b9:e8:
e2:46:0f:c1:75:c9:e2:1f:ce:e3:07:0e:4c:c4:8a:
14:f7:57:f9:72:40:36:3a:c9:b1:7a:69:33:33:6c:
01:2d:0f:2a:f9:85:be:e6:d6:52:f0:cc:ca:48:84:
4d:8b:3e:21:92:c4:ff:17:64:d3:31:2b:6d:81:2e:
fc:06:68:69:da:59:6a:1f:9c:b5:91:0f:a0:55:e9:
ef:62:2d:9b:aa:a9:3f:ea:80:0d:02:b3:11:c4:2c:
d9:ce:5a:26:c1:ec:f9:67:09:51:da:03:20:f8:10:
8a:29:a4:ed:53:06:d3:0d:b3:3b:53:b9:5e:c5:83:
88:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7A:59:30:43:6C:30:DB:E8:14:DE:1F:6B:EB:35:5D:C4:78:B7:4A
X509v3 Authority Key Identifier:
keyid:6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/OXpZMENsMNvoFN4fa-s1XcR4t0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.136.0-109.121.145.255
Signature Algorithm: sha256WithRSAEncryption
ab:1b:68:5c:12:36:57:70:92:a4:31:69:51:28:75:1a:81:f4:
97:0c:32:b6:92:1a:37:5a:e5:92:9a:e3:b6:95:86:b9:2e:8d:
a2:4a:1b:72:2f:46:46:74:0c:a4:86:93:b4:7d:d7:d6:d1:1e:
62:94:74:b0:6c:f0:74:96:8f:72:1b:a7:e5:54:a5:9d:7e:4d:
b5:8e:d1:1d:75:da:cf:83:c3:43:3b:82:d7:e0:4a:40:a4:a1:
05:13:69:33:8a:3b:30:b9:78:f6:31:5f:5e:bc:7d:9a:21:26:
ca:ce:43:d1:16:1a:d8:fe:a9:a2:92:4a:fa:61:f9:b1:c5:e6:
38:ed:8f:ca:79:81:29:f2:bf:0f:c7:85:b4:a2:2c:49:aa:bc:
4c:95:4a:4b:b5:b9:93:5a:e5:54:e5:21:4f:3c:66:59:51:6b:
59:f6:25:ad:10:d5:f5:62:05:15:40:16:e1:3e:eb:46:c9:a7:
7f:20:ee:58:05:c5:a7:25:fd:8a:9f:ba:52:0c:f1:e6:e2:75:
e0:2a:aa:3b:04:c0:f0:77:58:b2:2a:f1:00:ea:41:4a:ce:2b:
6e:82:0e:03:00:39:a9:a8:45:22:b3:0b:15:f7:39:84:89:eb:
c9:e0:0a:03:77:6f:80:b2:cc:68:4c:6a:fc:5d:d4:2b:a8:4a:
af:fb:6c:60
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEMl/FMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZGQyZTliM2E0ZDdiMjRiM2E2YWExNGYzZWRhM2YxNGZhMjljNzZiMB4XDTIyMDYx
NTEwNDE0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzk3YTU5MzA0MzZj
MzBkYmU4MTRkZTFmNmJlYjM1NWRjNDc4Yjc0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANJzcyivI5ll7fcusgY2appioRqOhceZFEt0L8qU8RS+UJXy
Xm4orJ7ovFom/YerbgyCd8OQtXIAjPEree6f5bujLwqmwr5orRZvxZSoeRlHKvYX
Uud0R0vOQjYYv9NCKgOzkVOKrr0SQbKFfTnytaqnEmcmsW4IdtOLSW7eXIdM1XmL
d7no4kYPwXXJ4h/O4wcOTMSKFPdX+XJANjrJsXppMzNsAS0PKvmFvubWUvDMykiE
TYs+IZLE/xdk0zErbYEu/AZoadpZah+ctZEPoFXp72Itm6qpP+qADQKzEcQs2c5a
JsHs+WcJUdoDIPgQiimk7VMG0w2zO1O5XsWDiK8CAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBQ5elkwQ2ww2+gU3h9r6zVdxHi3SjAfBgNVHSMEGDAWgBRt0umzpNeySzpq
oU8+2j8U+inHazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JkTHBzNlRYc2tzNmFxRlBQdG9fRlBvcHgycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzQvY2Q5YmM4LTExYzUtNGY1YS1iYjI1LTQ1YWU3YjNkYWU2OC8x
L09YcFpNRU5zTU52b0ZONGZhLXMxWGNSNHQwby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQv
Y2Q5YmM4LTExYzUtNGY1YS1iYjI1LTQ1YWU3YjNkYWU2OC8xL2JkTHBzNlRYc2tz
NmFxRlBQdG9fRlBvcHgycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQDbXmIAwQBbXmQMA0GCSqGSIb3
DQEBCwUAA4IBAQCrG2hcEjZXcJKkMWlRKHUagfSXDDK2kho3WuWSmuO2lYa5Lo2i
ShtyL0ZGdAykhpO0fdfW0R5ilHSwbPB0lo9yG6flVKWdfk21jtEdddrPg8NDO4LX
4EpApKEFE2kzijswuXj2MV9evH2aISbKzkPRFhrY/qmikkr6YfmxxeY47Y/KeYEp
8r8Px4W0oixJqrxMlUpLtbmTWuVU5SFPPGZZUWtZ9iWtENX1YgUVQBbhPutGyad/
IO5YBcWnJf2Kn7pSDPHm4nXgKqo7BMDwd1iyKvEA6kFKzitugg4DADmpqEUiswsV
9zmEievJ4AoDd2+AssxoTGr8XdQrqEqv+2xg
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:02:34 2025 by rpki-client