Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/M0j7_1LaERciPULQ9bHyFVdlekg.roa
File: M0j7_1LaERciPULQ9bHyFVdlekg.roa (raw, json)
Hash identifier: st0UHombc6Z8INz/2/VOrk1dCPrSkjpUcNTVU3Gvg+Y=
Subject key identifier: 33:48:FB:FF:52:DA:11:17:22:3D:42:D0:F5:B1:F2:15:57:65:7A:48
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0194266B6308B1543B0C7294702B7D74B410
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/M0j7_1LaERciPULQ9bHyFVdlekg.roa
Signing time: Thu 02 Jan 2025 09:49:19 +0000
ROA not before: Thu 02 Jan 2025 09:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204210
IP address blocks: 109.160.11.0/24 maxlen: 24
109.160.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:63:08:b1:54:3b:0c:72:94:70:2b:7d:74:b4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 2 09:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3348fbff52da1117223d42d0f5b1f21557657a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e8:42:1d:04:4e:03:db:fb:07:e5:be:99:da:
6f:ac:b4:27:b7:62:07:f7:6c:31:f1:cf:c7:34:ff:
9d:8d:55:a9:f0:10:2c:ad:e7:e8:8d:f6:b1:b8:9b:
31:01:74:bf:52:a3:d0:4b:f1:42:93:31:ec:cb:22:
99:7e:31:e1:62:16:6c:41:5c:cc:ea:2a:b2:25:69:
4d:10:ed:21:75:d1:1c:eb:88:1f:97:0f:25:02:44:
1a:7f:d0:78:fc:d3:11:ba:ed:74:37:51:52:9c:08:
e5:8d:af:c3:dc:2e:69:1b:a1:d8:2e:87:2f:e4:1f:
de:e2:ce:ce:17:3a:aa:18:e8:fb:7d:87:42:ab:b2:
b8:f7:68:ab:11:54:ff:30:f1:bd:d4:3f:aa:1e:81:
81:b4:c9:50:20:d1:15:92:4f:e8:a0:71:2a:b0:5e:
de:fc:10:65:32:49:bc:1b:b8:4c:3a:1a:94:ad:9e:
02:03:ec:8c:8c:a7:6d:f8:9c:59:38:52:a9:c9:f1:
6a:2d:5b:6e:08:c6:95:04:b3:01:05:c0:16:ac:5b:
2d:d1:ff:00:2a:d6:ec:c1:a1:c7:c8:84:fc:10:e9:
c8:4f:aa:5a:5b:49:8b:2a:9f:db:3f:e2:db:d9:c1:
07:38:71:f2:09:b6:ed:da:12:be:14:23:23:38:e2:
0e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:48:FB:FF:52:DA:11:17:22:3D:42:D0:F5:B1:F2:15:57:65:7A:48
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/M0j7_1LaERciPULQ9bHyFVdlekg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.11.0-109.160.12.255
Signature Algorithm: sha256WithRSAEncryption
62:ad:49:0e:86:55:02:76:47:f7:25:f5:5e:8c:c7:bf:d8:0f:
8b:7e:ef:0d:08:41:d4:07:6a:b9:8e:94:44:51:e0:85:99:8c:
bc:70:9a:69:44:40:ff:40:af:3a:ad:c0:38:87:74:66:98:ac:
37:db:cb:03:7f:71:01:d2:f7:8f:6d:00:9c:1a:d7:8c:56:d3:
bc:9f:f0:e4:e2:4c:3c:b6:47:dd:7f:13:85:22:34:43:df:29:
89:e3:ff:ca:c4:d3:ae:c0:34:8c:dd:f8:52:db:09:a1:da:7c:
c7:1b:c8:5e:ea:78:a6:d5:dd:35:6e:a8:b5:2d:f8:73:a0:6b:
63:bf:e9:1c:53:ef:1e:b3:13:20:ae:5c:88:ff:2f:05:5f:5a:
f5:77:ec:3b:ee:69:5d:30:68:ae:e4:8f:37:9c:76:1a:6e:fa:
f5:1e:10:cc:1e:d1:aa:bb:49:04:cf:d1:ca:43:32:c2:2e:80:
68:a7:d1:49:45:1f:5f:ec:7d:18:8f:b5:80:cf:53:23:e8:38:
99:43:d7:a9:36:25:68:58:a6:3b:b0:7b:0b:9c:e8:bc:e7:9f:
20:4e:d7:13:55:d2:3d:dc:57:c1:bd:39:c3:7e:2c:d1:29:5a:
c6:f8:41:e0:a7:59:42:fe:b7:6b:51:5c:24:d0:d9:39:a6:7f:
ab:57:44:7b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQma2MIsVQ7DHKUcCt9dLQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjUwMTAyMDk0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzQ4ZmJmZjUyZGExMTE3MjIzZDQyZDBmNWIxZjIxNTU3NjU3YTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OhCHQROA9v7B+W+mdpvrLQnt2IH
92wx8c/HNP+djVWp8BAsrefojfaxuJsxAXS/UqPQS/FCkzHsyyKZfjHhYhZsQVzM
6iqyJWlNEO0hddEc64gflw8lAkQaf9B4/NMRuu10N1FSnAjlja/D3C5pG6HYLocv
5B/e4s7OFzqqGOj7fYdCq7K492irEVT/MPG91D+qHoGBtMlQINEVkk/ooHEqsF7e
/BBlMkm8G7hMOhqUrZ4CA+yMjKdt+JxZOFKpyfFqLVtuCMaVBLMBBcAWrFst0f8A
KtbswaHHyIT8EOnIT6paW0mLKp/bP+Lb2cEHOHHyCbbt2hK+FCMjOOIOnQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDNI+/9S2hEXIj1C0PWx8hVXZXpIMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvTTBqN18xTGFFUmNpUFVMUTliSHlGVmRsZWtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABtoAsD
BABtoAwwDQYJKoZIhvcNAQELBQADggEBAGKtSQ6GVQJ2R/cl9V6Mx7/YD4t+7w0I
QdQHarmOlERR4IWZjLxwmmlEQP9ArzqtwDiHdGaYrDfbywN/cQHS949tAJwa14xW
07yf8OTiTDy2R91/E4UiNEPfKYnj/8rE067ANIzd+FLbCaHafMcbyF7qeKbV3TVu
qLUt+HOga2O/6RxT7x6zEyCuXIj/LwVfWvV37DvuaV0waK7kjzecdhpu+vUeEMwe
0aq7SQTP0cpDMsIugGin0UlFH1/sfRiPtYDPUyPoOJlD16k2JWhYpjuwewuc6Lzn
nyBO1xNV0j3cV8G9OcN+LNEpWsb4QeCnWUL+t2tRXCTQ2Tmmf6tXRHs=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:11:35 2025 by rpki-client