Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/qqAWUHoLAk_vsyL2Er1OBeRgPDg.roa
File: qqAWUHoLAk_vsyL2Er1OBeRgPDg.roa (raw, json)
Hash identifier: aQVfFUAR5nktoMvGRzuDLJIaffEsPJN3cf/1slGBVc4=
Subject key identifier: AA:A0:16:50:7A:0B:02:4F:EF:B3:22:F6:12:BD:4E:05:E4:60:3C:38
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01944DF39FE90F4B874E8AA304BD43122E6E
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/qqAWUHoLAk_vsyL2Er1OBeRgPDg.roa
Signing time: Fri 10 Jan 2025 02:03:19 +0000
ROA not before: Fri 10 Jan 2025 02:03:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 109.122.252.0/24 maxlen: 24
109.122.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4d:f3:9f:e9:0f:4b:87:4e:8a:a3:04:bd:43:12:2e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 10 02:03:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaa016507a0b024fefb322f612bd4e05e4603c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:d2:89:02:24:bd:9e:3c:18:6e:c1:5b:d8:
95:88:6e:c6:4c:4c:fb:28:80:51:09:ee:52:42:e4:
c0:04:0b:b9:f0:93:d9:f3:01:cb:2c:5a:4a:26:80:
41:e3:63:de:0b:87:1b:4c:ef:4d:99:d0:67:02:d7:
82:ef:8e:35:a3:47:d6:3b:34:bb:76:72:c5:85:4b:
8c:c3:48:7d:ce:aa:f0:e1:45:97:ba:82:68:dd:b9:
0a:d9:e2:7c:24:c5:7c:58:e1:32:d5:8e:3e:c2:dc:
7c:84:e2:f3:16:00:df:4d:88:f4:70:c5:0a:f4:ff:
52:65:4a:69:14:3f:c2:7b:94:72:85:89:56:b8:55:
b4:38:75:ea:4c:4a:dc:62:50:f9:b6:3e:23:46:32:
59:81:58:a1:96:32:89:7e:c9:ab:cf:20:21:d3:9a:
8d:cd:fc:89:6a:ac:67:df:a4:47:5c:a2:3d:8b:ec:
34:c1:ed:14:9e:d1:ce:44:0b:e5:4a:b5:62:8d:7f:
51:81:96:82:d5:25:c8:36:bb:d7:bc:cd:e0:19:d7:
d2:ec:3a:35:62:b1:c7:bf:f1:14:e6:82:ca:cb:5d:
69:38:1a:90:31:12:ec:9d:1f:ac:68:4c:f9:dc:a4:
08:12:f2:4f:ef:5f:7b:d3:77:56:4f:fe:e5:93:8f:
4d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A0:16:50:7A:0B:02:4F:EF:B3:22:F6:12:BD:4E:05:E4:60:3C:38
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/qqAWUHoLAk_vsyL2Er1OBeRgPDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.252.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:97:14:64:a0:23:a8:44:11:c5:05:d2:6e:9c:10:cf:37:98:
fe:65:6d:d5:2e:34:e2:5b:6d:97:a6:59:7c:02:d3:75:39:6c:
25:72:d2:e6:4f:66:f6:68:b6:31:f0:c2:0c:4b:b1:da:dc:5f:
a3:63:16:ba:bf:fc:d6:6a:60:7c:95:7c:b9:63:26:3f:0f:e7:
c9:74:96:c5:88:b3:ee:7c:1d:4e:ae:5f:3d:83:64:15:1f:f3:
33:3b:72:4e:b6:da:bf:61:4f:4b:b9:a0:e3:c6:3b:88:4d:19:
dd:75:63:1a:f6:55:25:5f:35:d9:ff:2b:6c:13:a7:f0:9f:69:
a1:b6:71:fe:e1:10:b5:20:9b:37:af:7a:27:e9:e2:2a:94:91:
1d:7e:30:06:01:b0:4b:a4:41:bf:be:77:64:ef:93:c0:83:90:
86:44:9a:dd:df:2a:23:71:9f:3c:4f:04:e7:64:5c:50:2b:28:
ff:41:c3:c2:53:65:5a:f3:c3:d8:31:c4:ce:7c:42:ad:5f:94:
fc:b6:41:81:87:c0:3d:1d:19:0e:d6:32:5c:c3:65:5e:2c:2e:
e3:16:0f:61:45:6f:46:36:27:01:f4:7a:de:ea:8a:b5:65:52:
f7:9b:d2:13:87:59:57:f0:c7:83:39:e6:ef:38:bd:e1:57:1a:
51:c6:43:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net