Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/UFIc6gmM8CYcQ1JIc7dXrkJdkxQ.roa
File: UFIc6gmM8CYcQ1JIc7dXrkJdkxQ.roa (raw, json)
Hash identifier: 2l3btdOFXlWWhMIgmcWcP5puBSTXp9EZy97B9kL42GU=
Subject key identifier: 50:52:1C:EA:09:8C:F0:26:1C:43:52:48:73:B7:57:AE:42:5D:93:14
Certificate issuer: /CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Certificate serial: 316506CA
Authority key identifier: 6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/UFIc6gmM8CYcQ1JIc7dXrkJdkxQ.roa
Signing time: Thu 24 Feb 2022 12:14:56 +0000
ROA not before: Thu 24 Feb 2022 12:14:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41313
IP address blocks: 109.121.146.0/24 maxlen: 24
109.121.164.0/23 maxlen: 23
109.121.166.0/24 maxlen: 24
109.121.162.0/24 maxlen: 24
109.121.160.0/23 maxlen: 23
109.121.160.0/22 maxlen: 22
109.121.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 828704458 (0x316506ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Validity
Not Before: Feb 24 12:14:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50521cea098cf0261c43524873b757ae425d9314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:89:3f:85:da:6f:94:13:db:a7:7c:f8:0a:
87:d5:59:80:3d:6b:8b:eb:f1:8f:0f:b2:42:4f:68:
f0:ff:e9:d5:98:d2:55:29:d4:39:50:77:f6:46:ac:
ce:10:23:cf:47:58:9d:dc:79:5d:c2:ad:a3:99:72:
0e:78:9a:b2:ac:e9:0a:0f:de:9c:65:65:d0:d9:bc:
78:cb:11:9b:e2:43:83:3a:c7:6a:33:8f:7d:fa:47:
2e:0a:94:37:bc:6b:f4:7e:2b:3f:c2:ea:12:a7:e3:
0f:54:0f:9b:5a:4a:aa:ff:8e:4c:e4:a7:6c:12:8b:
13:e9:36:bc:8e:bc:29:26:96:78:47:71:19:69:c5:
55:43:b7:1e:4e:42:d2:f6:45:7d:86:4b:8a:cf:72:
42:e3:26:82:c1:55:61:dc:40:85:5c:ae:9e:20:6d:
00:cf:e9:7b:e7:90:a5:bd:6b:ee:85:62:a6:f3:aa:
28:d8:91:c3:a4:53:2f:13:25:30:23:ef:b2:81:6f:
11:36:71:8a:ce:74:d1:e4:92:ee:b3:d2:25:5b:95:
c2:c0:f3:aa:5b:74:c9:b4:e4:d6:10:ac:cd:55:8f:
9d:35:7b:d9:44:11:cc:ce:4c:a1:d8:57:97:b2:ae:
bb:8b:fd:aa:f9:33:ca:9a:6b:b4:d5:5c:22:78:15:
b6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:52:1C:EA:09:8C:F0:26:1C:43:52:48:73:B7:57:AE:42:5D:93:14
X509v3 Authority Key Identifier:
keyid:6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/UFIc6gmM8CYcQ1JIc7dXrkJdkxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.146.0/24
109.121.160.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:30:8c:ce:a2:5a:9b:ac:3d:f4:11:de:97:10:d6:ae:9e:96:
8a:25:70:5f:d9:e0:97:f3:6b:20:89:d9:e2:56:90:a3:2b:06:
39:2c:d4:b1:db:79:19:14:7c:e3:99:e2:6c:43:a5:4b:56:9c:
5d:13:cb:da:5e:21:70:c7:85:6c:49:c7:14:ee:c6:d9:38:b0:
6b:05:b4:99:dd:08:da:8d:db:e9:3f:d8:45:ab:56:b6:7a:3a:
c7:4c:a6:39:be:2b:5a:20:55:97:16:47:fb:2b:ca:fd:66:bf:
37:eb:14:26:39:57:97:e2:4f:e4:28:e3:14:bc:7a:85:03:46:
fb:a0:e6:cd:80:f7:19:13:d8:fb:4b:0a:d7:bf:42:39:2b:9c:
af:4a:fd:41:33:5e:52:45:ca:9c:1e:1f:4a:5c:80:e3:d9:ea:
91:36:0a:68:94:7d:1a:64:5a:a6:16:52:f6:41:16:f5:c3:5c:
ee:1c:bd:7f:e3:dd:94:57:f1:1e:a7:fa:92:ab:ac:90:cb:b9:
17:54:a7:0c:cb:e9:7f:79:b4:0d:ee:a5:f1:81:36:a6:f8:a5:
8c:b7:af:26:c5:1f:8f:e7:75:2c:99:fa:9b:a8:f1:58:93:08:
05:f3:30:9e:9e:94:56:da:2d:3f:9f:27:c7:d3:2b:08:21:76:
e2:24:b8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:43:07 2025 by rpki-client