Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/RiWqQ-C3EhSETSw9TfTVTB3MJ0k.roa
File: RiWqQ-C3EhSETSw9TfTVTB3MJ0k.roa (raw, json)
Hash identifier: kbrif54aXcBi1RJomWW7K6RSZGU1nXGZcQ7MR0YTUMY=
Subject key identifier: 46:25:AA:43:E0:B7:12:14:84:4D:2C:3D:4D:F4:D5:4C:1D:CC:27:49
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 019427482A4CABFD9F3D0AF8320EB41E5CB3
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/RiWqQ-C3EhSETSw9TfTVTB3MJ0k.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41313
IP address blocks: 109.121.160.0/23 maxlen: 23
109.121.162.0/24 maxlen: 24
109.121.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2a:4c:ab:fd:9f:3d:0a:f8:32:0e:b4:1e:5c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4625aa43e0b71214844d2c3d4df4d54c1dcc2749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:80:85:82:2a:1b:e4:a9:53:35:91:ff:eb:
99:29:f0:82:7f:04:f1:62:66:76:49:13:9e:57:53:
01:3e:c3:ad:f7:97:c0:b5:d9:1d:38:ce:05:5a:5a:
73:9e:df:e6:6e:bc:d6:f5:30:de:14:62:9a:9e:30:
0f:51:4e:55:e8:99:a5:df:0f:58:03:da:72:ff:09:
a4:10:94:5c:b8:4c:f7:b8:de:d8:f8:89:65:69:9b:
f7:2b:1d:e7:6d:f3:e5:70:49:ac:7b:be:7a:0f:84:
45:6c:9f:68:40:0a:a2:56:e2:79:c4:32:15:f5:11:
29:9b:63:67:c1:a2:f9:d6:5e:38:a8:75:20:ea:08:
5c:ef:60:d8:84:24:c8:6b:98:20:5f:a2:d3:6a:d8:
a6:95:ce:b0:0a:f1:9b:22:b0:4a:5a:77:d7:09:9d:
c8:20:8e:a0:62:47:15:03:25:43:56:92:3d:c4:3a:
e6:5a:79:d4:7b:51:aa:ba:a0:23:c6:11:b1:3c:ac:
81:3f:54:2c:d0:8a:f8:8e:c4:97:d2:74:ab:c5:66:
b6:39:82:e3:98:f2:97:f4:e2:4c:72:ca:0d:1a:d5:
25:d6:ae:63:d9:0c:44:44:bc:49:45:3d:d0:17:d7:
5f:98:aa:2f:28:12:5d:ff:59:54:02:6e:8e:18:52:
95:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:25:AA:43:E0:B7:12:14:84:4D:2C:3D:4D:F4:D5:4C:1D:CC:27:49
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/RiWqQ-C3EhSETSw9TfTVTB3MJ0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.160.0-109.121.162.255
109.121.166.0/24
Signature Algorithm: sha256WithRSAEncryption
22:da:d3:3b:dd:cc:81:b0:88:bd:0b:02:5a:16:11:6b:3a:49:
29:4a:72:73:62:1c:a3:04:99:08:18:1f:e9:1f:d4:97:5d:0f:
6f:10:15:96:72:9e:3a:a2:09:37:29:3a:6d:66:28:0a:40:50:
cc:6c:bf:e7:dd:06:c1:f2:f0:bc:ff:3c:75:15:5f:ef:34:4b:
2a:dd:69:c8:4b:70:e9:7b:17:aa:3a:fa:51:de:6d:86:a1:6e:
c4:97:7b:30:09:15:c9:5f:62:cb:08:b0:80:05:be:6f:56:c6:
9b:04:30:d9:77:b7:25:1a:6d:ac:27:fc:5a:6f:5c:bd:e2:c1:
8a:21:46:b4:90:27:2f:fe:c3:66:df:61:c7:fa:11:04:a3:29:
e7:e5:4d:5a:ec:a8:ac:50:8b:63:68:b3:dd:e3:1a:a6:e1:68:
b1:7b:d8:6d:e9:d8:38:88:71:e1:0d:4b:a1:6a:70:10:cc:4e:
0f:4e:30:42:e7:b2:b1:7a:df:cc:ef:f2:96:71:02:a4:56:af:
fa:6e:d8:ec:a3:16:8d:2c:e3:e4:e4:17:5d:8c:cb:66:b4:1f:
f1:de:d3:70:53:48:98:db:6c:7c:05:fc:b9:18:51:c6:1d:a4:
98:2b:d9:75:8e:1b:00:64:37:86:b5:41:0e:6b:0c:fb:f5:df:
1e:4f:c4:a1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:00:29 2025 by rpki-client