Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/dbrdVt-s3I7jJhg0RUeMqkNPdE8.roa
File: dbrdVt-s3I7jJhg0RUeMqkNPdE8.roa (raw, json)
Hash identifier: lqLngYS3akIMCYCODelZGCJHOgsObKxRa0UyCLMipws=
Subject key identifier: 75:BA:DD:56:DF:AC:DC:8E:E3:26:18:34:45:47:8C:AA:43:4F:74:4F
Certificate issuer: /CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Certificate serial: 30E9CDB4
Authority key identifier: 6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/dbrdVt-s3I7jJhg0RUeMqkNPdE8.roa
Signing time: Sat 01 Jan 2022 10:55:39 +0000
ROA not before: Sat 01 Jan 2022 10:55:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209362
IP address blocks: 109.121.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820628916 (0x30e9cdb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Validity
Not Before: Jan 1 10:55:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75badd56dfacdc8ee326183445478caa434f744f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c3:f2:12:f2:31:44:c7:9f:c2:c9:39:5e:61:
5a:ac:33:21:71:b6:3d:51:a4:93:d6:f2:7c:90:b1:
16:ae:79:e0:df:dd:1d:0e:2a:c5:0c:52:13:ff:64:
7c:9a:f9:84:f5:c7:30:11:02:f0:c7:44:db:6c:35:
38:2f:e5:03:ca:64:87:38:e5:a5:c3:7a:39:ff:94:
fd:13:d8:66:84:10:b9:2c:33:dd:71:7d:a8:11:4e:
2d:b3:8f:f9:82:3b:df:c5:54:dd:83:e3:10:0b:2e:
ba:9f:93:3a:0b:a1:b6:04:07:71:86:15:dd:46:b4:
e8:14:92:6d:7f:99:c8:fb:04:44:15:26:0d:a6:f6:
4c:f2:b9:83:04:2b:08:bf:9c:46:8d:dc:14:86:e6:
4e:65:35:ce:9d:d9:f0:68:ab:e2:60:f6:ac:81:8e:
be:39:48:3c:e6:0a:6d:17:d4:62:62:7f:fa:d2:a3:
93:af:9f:52:a2:1e:88:c8:97:e3:f9:bd:5b:d8:54:
24:49:45:e4:01:d8:44:76:33:6d:c1:ae:f3:0b:98:
26:e1:5e:3d:c2:56:ac:0f:69:31:19:3a:b6:d4:29:
86:37:94:6f:e7:1f:59:36:ee:ea:5b:72:75:83:80:
00:7c:18:61:b5:f7:b1:7a:0d:db:86:79:bf:be:16:
78:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BA:DD:56:DF:AC:DC:8E:E3:26:18:34:45:47:8C:AA:43:4F:74:4F
X509v3 Authority Key Identifier:
keyid:6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/dbrdVt-s3I7jJhg0RUeMqkNPdE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:aa:10:79:8e:69:35:7e:82:39:ef:f3:26:97:cf:62:fc:6d:
18:62:cd:51:6a:94:8e:f5:0b:2c:6c:b1:6b:b4:aa:42:57:79:
2d:9f:ca:08:60:fd:5d:3e:8c:55:4d:7c:71:37:c0:a1:9e:06:
df:91:91:ba:b7:9f:16:b4:77:19:9b:79:57:4f:40:52:a2:26:
9c:36:8f:89:17:ea:81:f2:ca:06:b7:dd:10:24:0b:17:b5:04:
cd:fe:aa:e4:b3:f5:8d:19:31:e6:9b:7e:51:ed:ff:6d:94:52:
3f:78:be:ec:93:c3:e0:f5:82:ba:a5:a1:b1:26:5a:0e:72:ca:
9c:1d:e1:06:8c:25:c8:b1:89:a2:2f:db:17:78:0d:35:64:d1:
03:fb:c8:08:34:77:db:42:e4:6f:cf:58:2a:46:45:60:54:7c:
f8:ff:89:ac:5d:d3:f6:b1:33:2f:40:ff:87:95:be:84:c0:4d:
ce:9b:08:fd:6f:1d:5e:b4:b2:eb:fc:03:4a:ad:94:41:a8:4b:
b6:0f:1c:15:92:89:9a:f2:d2:6d:62:9e:62:c1:a5:5e:41:ca:
1d:98:c6:03:53:03:5c:cc:ec:d2:bf:c2:55:25:af:92:9c:a4:
04:e6:72:73:4a:8f:68:8e:3e:e1:de:c6:15:d3:5c:fb:2e:79:
33:26:47:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:27:34 2025 by rpki-client