Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/09pggNVeApkaWc6dmMgwvIlad5Y.roa
File: 09pggNVeApkaWc6dmMgwvIlad5Y.roa (raw, json)
Hash identifier: 2GyazxD+8CUrwhas9/QgHhniWlXyS7v0PkcV+5sdS1o=
Subject key identifier: D3:DA:60:80:D5:5E:02:99:1A:59:CE:9D:98:C8:30:BC:89:5A:77:96
Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial: 019503B18FA95A2B2265BED155CEEA02B074
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/09pggNVeApkaWc6dmMgwvIlad5Y.roa
Signing time: Fri 14 Feb 2025 09:02:03 +0000
ROA not before: Fri 14 Feb 2025 09:02:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35614
IP address blocks: 94.124.166.0/24 maxlen: 24
193.105.7.0/24 maxlen: 24
2a0c:29c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:03:b1:8f:a9:5a:2b:22:65:be:d1:55:ce:ea:02:b0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Validity
Not Before: Feb 14 09:02:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3da6080d55e02991a59ce9d98c830bc895a7796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7c:13:b9:75:53:db:5c:05:0b:33:47:24:a4:
b4:44:8d:96:3e:33:c6:2a:4e:14:ec:b4:19:7f:97:
db:bc:93:52:6e:b9:d2:8f:04:c3:28:61:3e:d2:ff:
b3:dd:82:3a:47:dc:4d:73:d9:0a:89:4b:92:92:36:
6f:d0:05:04:c6:0e:c8:24:59:d5:53:b5:43:dc:be:
7d:d7:bf:98:b6:c1:ed:9b:ec:b4:b9:4f:6f:22:49:
f3:a3:b0:6b:3c:06:3e:b4:23:64:01:53:d0:c1:e3:
1d:33:ad:26:35:ea:2c:f3:1f:73:92:ec:07:23:b4:
7b:26:61:1e:e7:e5:f4:f3:38:04:91:cf:e9:6e:bc:
00:80:ab:a5:7b:3a:c5:d0:6d:91:ef:9b:ca:23:6f:
21:81:f2:b6:26:01:d6:96:80:a2:0d:98:29:dc:12:
36:d6:00:78:82:2a:bf:72:90:c7:53:44:cd:56:e0:
b5:6b:a9:13:ce:b3:cf:b1:c8:30:6b:09:af:ae:08:
02:aa:fc:72:5f:aa:af:1c:0d:f6:b4:a0:25:33:a3:
f3:3c:be:44:42:b4:75:51:6f:25:58:33:fb:be:5b:
59:34:b6:36:ce:f8:f6:30:9d:f5:3b:7a:18:15:34:
3b:44:8f:c3:35:61:2c:09:d4:7b:09:7e:fb:cb:39:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DA:60:80:D5:5E:02:99:1A:59:CE:9D:98:C8:30:BC:89:5A:77:96
X509v3 Authority Key Identifier:
keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/09pggNVeApkaWc6dmMgwvIlad5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.166.0/24
193.105.7.0/24
IPv6:
2a0c:29c0::/32
Signature Algorithm: sha256WithRSAEncryption
cc:86:10:62:6d:d6:1d:ea:93:e1:6c:4e:34:b5:11:1d:bb:c4:
74:50:02:72:50:7e:d7:ac:58:c0:df:c1:cd:9c:8c:fa:f3:e6:
4e:54:97:e0:75:e9:b2:4a:c7:7b:38:e8:10:f7:a7:e5:7c:96:
79:48:f8:a3:bf:2e:07:c1:2e:e0:30:75:6f:d2:b2:65:d4:47:
26:06:e4:f4:10:f3:02:6b:c3:cb:f9:d7:02:74:1e:d9:a7:c0:
0e:a1:fa:61:1b:5c:c4:8b:c5:16:e4:0b:2b:39:f8:39:a3:cf:
f9:5a:a0:1c:b8:86:6d:23:d4:f6:df:b3:0a:f6:cf:46:46:2b:
4f:a1:77:8d:0a:97:e2:28:e4:9b:3a:db:fa:26:c2:22:b8:be:
54:73:24:ff:39:a4:e5:e0:13:88:4f:9f:5c:43:85:94:e4:e5:
bb:db:07:8d:2f:0a:60:d3:90:35:d5:d8:92:49:56:b2:cd:34:
e2:a1:4e:b2:c2:0e:89:e4:d2:28:b1:36:54:fa:fe:d8:64:17:
85:91:22:f8:a1:f9:25:1b:76:39:26:cc:2f:9a:be:67:60:82:
ba:0d:40:5b:ef:85:1f:b7:d3:2e:f3:62:c7:b4:73:88:0f:46:
cb:ec:7c:e2:62:2b:96:d1:c3:9e:4f:9a:81:2a:cd:b7:a9:d2:
a3:90:96:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:47:20 2025 by rpki-client on console.sobornost.net