Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/pI3W8C1ZxuPusTptKHP1u0YPtbM.roa
File: pI3W8C1ZxuPusTptKHP1u0YPtbM.roa (raw, json)
Hash identifier: CThv60vq5lrTC7BFI5QFq4GFsEIpVjwpFNsuFKoLpYE=
Subject key identifier: A4:8D:D6:F0:2D:59:C6:E3:EE:B1:3A:6D:28:73:F5:BB:46:0F:B5:B3
Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial: 01941FFA5920F6FFED45FAD372BDB5B0736C
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/pI3W8C1ZxuPusTptKHP1u0YPtbM.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8226
IP address blocks: 109.68.120.0/22 maxlen: 22
109.68.124.0/23 maxlen: 23
109.68.126.0/24 maxlen: 24
2001:4d00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:59:20:f6:ff:ed:45:fa:d3:72:bd:b5:b0:73:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a48dd6f02d59c6e3eeb13a6d2873f5bb460fb5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:8c:75:5a:6d:4a:5c:9d:c4:8a:66:9a:af:
42:2f:fc:ab:fc:b9:34:f4:86:67:4f:f4:88:dd:e6:
d9:4c:77:12:c0:e7:ca:e9:c9:cc:59:d2:3c:b0:b4:
d5:5e:22:69:08:c2:6a:90:d7:71:cf:32:0f:43:bc:
08:59:dd:a4:7b:23:93:36:61:19:56:e6:c0:7a:76:
1a:40:0e:2b:80:f4:0f:8f:74:c1:7f:ac:43:8f:4a:
5c:3e:b9:2b:96:4b:71:67:4a:17:01:a6:a8:43:ab:
81:96:31:6a:5c:95:4f:ac:e5:2e:13:fc:dc:4a:48:
8d:f0:ce:1d:f6:8c:2f:5d:63:69:fd:f9:41:ee:11:
26:2c:33:20:39:d5:f0:62:63:8f:d3:45:e9:64:1f:
2c:6f:d6:2f:ec:7b:dc:e8:2f:cb:b2:3a:3f:e3:14:
de:14:cc:36:f0:09:ef:8f:0e:17:e3:de:22:19:b0:
65:30:ce:78:f6:cb:fa:6e:da:32:88:d7:72:74:a9:
4a:45:18:2d:a4:9f:83:98:24:8e:cd:80:15:11:4b:
1b:05:89:51:c8:ff:06:38:f0:09:3b:e4:c6:25:68:
eb:59:e2:1f:73:75:15:f1:cc:33:5e:73:f9:f1:1e:
62:f7:8f:6a:6d:de:c3:3d:f8:8b:00:b8:b7:d2:c4:
b7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8D:D6:F0:2D:59:C6:E3:EE:B1:3A:6D:28:73:F5:BB:46:0F:B5:B3
X509v3 Authority Key Identifier:
keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/pI3W8C1ZxuPusTptKHP1u0YPtbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.120.0-109.68.126.255
IPv6:
2001:4d00::/32
Signature Algorithm: sha256WithRSAEncryption
1e:27:fa:1e:5f:50:fe:90:a7:32:73:93:7c:d6:88:64:9b:90:
39:70:b1:87:4e:f2:7d:31:e1:15:26:6d:61:96:be:68:01:8d:
8e:c7:ba:9c:72:02:34:1a:44:b6:24:77:3b:a3:81:6e:39:6e:
fa:39:e1:e0:30:2e:e8:a9:80:d7:b9:3e:ca:96:93:09:f6:9b:
8c:15:3a:48:d7:c5:4e:26:71:74:0e:ee:08:db:b3:34:3a:24:
bb:f6:5a:bf:0e:ec:aa:38:3e:12:ac:4b:72:30:6b:db:e6:b9:
79:39:88:1e:66:b7:0e:41:6b:d0:fa:3c:4a:cd:30:b0:d1:1a:
13:82:cd:55:cb:e1:f8:ec:68:2c:9b:d0:e8:92:0d:d9:1a:d1:
85:f8:bf:f7:6d:5f:ea:c8:79:17:6e:92:39:7a:36:15:b7:67:
c8:1f:79:d7:22:5a:12:1c:58:11:ae:47:3e:38:f9:2f:ba:c5:
37:38:ea:4d:e9:29:e2:e0:c1:02:e2:3e:00:d5:54:ad:7e:2d:
82:c8:5a:d9:60:49:98:a8:b8:01:94:d5:1d:1c:b9:3f:e9:66:
8b:74:5b:89:9e:0c:e2:3b:90:8b:f2:f3:8c:74:4c:2f:88:84:
64:a5:1f:00:f4:a7:4c:c1:66:4d:9f:6b:d2:e9:51:65:fa:66:
58:2a:3d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:48 2025 by rpki-client on console.sobornost.net