Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/6NAnEeaGcGoUrFlCMzgum5tvBKM.roa
File: 6NAnEeaGcGoUrFlCMzgum5tvBKM.roa (raw, json)
Hash identifier: UUNgksGRnLCKoYS3HeNb8bJKKWMCpSfVz0OijsR3T+8=
Subject key identifier: E8:D0:27:11:E6:86:70:6A:14:AC:59:42:33:38:2E:9B:9B:6F:04:A3
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0193C4C89F66522168D75DE4E00231F466CA
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/6NAnEeaGcGoUrFlCMzgum5tvBKM.roa
Signing time: Sat 14 Dec 2024 10:48:22 +0000
ROA not before: Sat 14 Dec 2024 10:48:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62048
IP address blocks: 109.122.240.0/24 maxlen: 24
109.122.242.0/24 maxlen: 24
109.122.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c4:c8:9f:66:52:21:68:d7:5d:e4:e0:02:31:f4:66:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Dec 14 10:48:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8d02711e686706a14ac594233382e9b9b6f04a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:0e:17:49:2f:b4:61:74:01:c9:bc:4d:d6:
96:84:26:de:39:b5:55:02:dc:34:9e:5e:92:ab:0d:
e1:5e:ea:d7:54:6a:d3:c3:ef:81:47:77:f9:af:bf:
4d:5c:3d:63:0d:ef:af:17:eb:30:51:97:30:1b:ed:
cc:5a:bc:8f:2b:11:af:f0:89:8a:03:9d:f8:b4:6d:
3e:e9:dd:a3:5a:b4:7e:54:64:4b:53:38:89:08:ec:
69:84:68:fc:3b:13:46:09:52:ed:0a:4c:0b:e0:29:
63:61:c3:01:f9:f6:44:a2:05:f9:71:72:e3:ac:2e:
e0:39:51:d6:3b:91:d5:35:43:7b:0f:07:e6:19:90:
9e:64:c1:fa:65:7c:aa:c8:58:c7:43:9f:9b:8e:f4:
8f:33:cf:00:98:9b:72:10:86:74:02:49:cf:0f:1e:
ce:e7:b1:23:a3:74:fc:89:05:f3:a8:e2:f1:91:8c:
11:b0:b2:a0:79:14:eb:9a:8f:40:61:2e:3c:e8:00:
ed:79:0d:8f:28:3b:22:8a:89:46:0f:1c:7b:03:79:
57:4b:ed:1f:5e:8c:91:03:d8:d6:f6:7c:e6:a5:6a:
21:26:5f:8f:53:d8:da:39:fe:e9:70:de:83:29:09:
47:65:aa:0b:47:e4:23:90:a2:8a:f7:46:98:33:35:
ed:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D0:27:11:E6:86:70:6A:14:AC:59:42:33:38:2E:9B:9B:6F:04:A3
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/6NAnEeaGcGoUrFlCMzgum5tvBKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.240.0/24
109.122.242.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:33:f5:14:19:c3:04:68:2e:25:e9:72:3f:59:e2:a3:c6:bc:
96:b0:e1:17:83:f8:36:98:43:fc:cd:98:0e:fe:69:4a:b2:de:
8b:60:21:99:de:8c:a6:3f:2e:07:e2:84:83:9d:dd:39:80:f9:
8c:bb:be:6c:ed:61:34:41:c6:bc:c1:30:9f:ca:67:46:48:49:
85:3f:55:70:af:c6:86:78:ae:7c:a5:1e:05:0f:4c:27:59:41:
fa:a1:bc:67:5b:32:21:23:b4:73:83:ec:27:17:a0:03:11:6e:
55:11:12:c0:9f:d1:cc:17:d0:25:e1:22:2c:6a:12:8f:77:66:
c4:6a:86:44:a5:15:59:4c:14:0c:c6:0d:d3:60:00:87:a3:a8:
78:40:bc:61:8a:bd:6d:e2:d6:cb:2d:99:b8:13:96:e8:dc:e3:
2f:b9:82:14:15:f1:01:d2:7d:d3:23:24:4e:f7:ae:d3:1f:da:
c9:97:b0:36:79:fa:ae:ca:65:97:27:21:e9:3f:3e:8c:05:7e:
bf:d4:9f:de:8e:fd:2c:28:ee:df:e1:ee:90:53:c2:27:1b:06:
78:69:8f:96:bb:e9:30:e0:d3:aa:49:08:e0:53:27:4d:aa:86:
4a:ac:01:c3:1f:64:d5:3b:a1:d5:75:8f:22:a9:87:03:94:bc:
63:e8:74:df
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZPEyJ9mUiFo113k4AIx9GbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjQxMjE0MTA0ODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGQwMjcxMWU2ODY3MDZhMTRhYzU5NDIzMzM4MmU5YjliNmYwNGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO8OF0kvtGF0Acm8TdaWhCbeObVV
Atw0nl6Sqw3hXurXVGrTw++BR3f5r79NXD1jDe+vF+swUZcwG+3MWryPKxGv8ImK
A534tG0+6d2jWrR+VGRLUziJCOxphGj8OxNGCVLtCkwL4CljYcMB+fZEogX5cXLj
rC7gOVHWO5HVNUN7DwfmGZCeZMH6ZXyqyFjHQ5+bjvSPM88AmJtyEIZ0AknPDx7O
57Ejo3T8iQXzqOLxkYwRsLKgeRTrmo9AYS486ADteQ2PKDsiiolGDxx7A3lXS+0f
XoyRA9jW9nzmpWohJl+PU9jaOf7pcN6DKQlHZaoLR+QjkKKK90aYMzXttwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOjQJxHmhnBqFKxZQjM4LpubbwSjMB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvNk5BbkVlYUdjR29VckZsQ016Z3VtNXR2QktNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXrwAwQB
bXryMA0GCSqGSIb3DQEBCwUAA4IBAQCOM/UUGcMEaC4l6XI/WeKjxryWsOEXg/g2
mEP8zZgO/mlKst6LYCGZ3oymPy4H4oSDnd05gPmMu75s7WE0Qca8wTCfymdGSEmF
P1Vwr8aGeK58pR4FD0wnWUH6obxnWzIhI7Rzg+wnF6ADEW5VERLAn9HMF9Al4SIs
ahKPd2bEaoZEpRVZTBQMxg3TYACHo6h4QLxhir1t4tbLLZm4E5bo3OMvuYIUFfEB
0n3TIyRO967TH9rJl7A2efquymWXJyHpPz6MBX6/1J/ejv0sKO7f4e6QU8InGwZ4
aY+Wu+kw4NOqSQjgUydNqoZKrAHDH2TVO6HVdY8iqYcDlLxj6HTf
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:37 2024 by rpki-client on console.sobornost.net