Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/4Jp18k3WgZxFLlIl31FziAZ_pyE.roa
File: 4Jp18k3WgZxFLlIl31FziAZ_pyE.roa (raw, json)
Hash identifier: Rdy6GJGskKOgLLcQAYAa6TgfgY93QdTyE4LXA4WR8FE=
Subject key identifier: E0:9A:75:F2:4D:D6:81:9C:45:2E:52:25:DF:51:73:88:06:7F:A7:21
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 019428237DECA83C18D1A05738639C9C051E
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/4Jp18k3WgZxFLlIl31FziAZ_pyE.roa
Signing time: Thu 02 Jan 2025 17:50:02 +0000
ROA not before: Thu 02 Jan 2025 17:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209596
IP address blocks: 109.162.240.0/21 maxlen: 21
213.207.224.0/21 maxlen: 21
213.207.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:7d:ec:a8:3c:18:d1:a0:57:38:63:9c:9c:05:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Jan 2 17:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e09a75f24dd6819c452e5225df517388067fa721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:fe:7c:4e:04:23:c2:3e:1a:ee:bc:e5:02:
a9:36:97:7a:c1:af:f6:56:18:19:ff:3a:9a:64:77:
c3:2a:3e:e6:61:ca:9a:96:72:37:f3:4e:db:bd:c0:
8b:93:6f:e4:88:55:bc:9d:eb:52:ab:ab:d3:d5:aa:
19:91:c7:28:d9:33:ab:5f:be:90:b0:b4:4e:36:52:
dc:e9:1b:19:06:eb:d0:7a:88:59:7f:36:05:09:00:
a8:f6:75:36:47:89:cb:87:81:d6:ca:7d:88:40:95:
49:d2:21:19:82:83:32:39:4c:30:46:e4:da:0b:83:
64:87:7b:15:8d:88:a9:0d:6c:a0:0b:ba:a0:6b:ea:
92:c9:7f:f8:3f:51:4f:0e:2f:c7:ff:de:d3:4a:6a:
6f:31:fe:59:e6:73:aa:dc:93:e5:55:87:15:9e:63:
7a:2e:5a:1b:b6:42:de:5a:53:bd:ee:15:9e:ba:fd:
5c:e2:cc:fe:7b:13:bd:b2:18:23:1c:1e:99:0a:a3:
eb:56:52:b5:61:90:ce:a0:1b:3a:53:ba:92:02:ea:
cb:40:b1:11:0d:08:dc:4d:28:9a:06:ad:44:0a:90:
5e:f4:b0:51:22:db:cd:39:c5:79:8c:79:7f:0c:28:
47:ae:ad:24:9b:0c:48:68:cb:a8:e9:0e:32:de:a7:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9A:75:F2:4D:D6:81:9C:45:2E:52:25:DF:51:73:88:06:7F:A7:21
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/4Jp18k3WgZxFLlIl31FziAZ_pyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.162.240.0/21
213.207.224.0/20
Signature Algorithm: sha256WithRSAEncryption
98:f2:77:be:fc:41:2c:b6:6e:7e:63:98:f2:df:5f:9c:93:ff:
c2:2f:8e:da:d6:72:71:58:1f:43:fc:15:b3:11:db:96:f1:88:
0b:de:b5:66:4b:f3:af:ef:30:80:61:1c:bd:6d:8c:20:93:e3:
27:cb:1d:0b:50:ed:ed:8e:8f:c3:9f:91:7f:92:ab:51:5b:6f:
43:ba:1a:45:20:5b:2a:f7:f5:64:61:cf:f7:2a:9d:24:af:2a:
bd:0d:39:b9:a0:a5:0e:07:15:4b:82:5e:fb:81:a6:a1:d1:1d:
41:b6:6d:ae:38:98:c6:63:74:ac:29:00:3e:b5:2e:3b:31:35:
a4:4a:4c:39:00:5e:14:54:ec:ac:3d:c6:08:2a:71:7c:63:8d:
f8:0b:8d:52:f6:74:2f:de:7b:b5:81:1c:f1:9d:38:7c:4b:35:
34:bd:e0:3a:d4:72:a4:6d:c3:c2:8c:22:d2:eb:75:1d:54:19:
5f:d4:4d:86:be:f0:6f:3b:10:61:f2:e1:f5:b9:73:6e:31:fa:
0b:64:45:8b:75:a4:de:54:5a:36:d6:c0:eb:76:36:0f:31:4d:
cc:62:e4:95:2e:90:2b:0a:a8:e2:8b:cb:ac:81:f6:ef:a9:f9:
5c:91:49:4b:36:d3:57:99:5f:48:a1:11:93:d0:e7:5e:bd:29:
65:08:c4:41
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoI33sqDwY0aBXOGOcnAUeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0
NzdmN2UwHhcNMjUwMTAyMTc1MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDlhNzVmMjRkZDY4MTljNDUyZTUyMjVkZjUxNzM4ODA2N2ZhNzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK7+fE4EI8I+Gu685QKpNpd6wa/2
VhgZ/zqaZHfDKj7mYcqalnI3807bvcCLk2/kiFW8netSq6vT1aoZkcco2TOrX76Q
sLRONlLc6RsZBuvQeohZfzYFCQCo9nU2R4nLh4HWyn2IQJVJ0iEZgoMyOUwwRuTa
C4Nkh3sVjYipDWygC7qga+qSyX/4P1FPDi/H/97TSmpvMf5Z5nOq3JPlVYcVnmN6
LlobtkLeWlO97hWeuv1c4sz+exO9shgjHB6ZCqPrVlK1YZDOoBs6U7qSAurLQLER
DQjcTSiaBq1ECpBe9LBRItvNOcV5jHl/DChHrq0kmwxIaMuo6Q4y3qcliwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOCadfJN1oGcRS5SJd9Rc4gGf6chMB8GA1UdIwQY
MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt
OGVhYjdmNGZlNzdlLzEvNEpwMThrM1dnWnhGTGxJbDMxRnppQVpfcHlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl
LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDbaLwAwQE
1c/gMA0GCSqGSIb3DQEBCwUAA4IBAQCY8ne+/EEstm5+Y5jy31+ck//CL47a1nJx
WB9D/BWzEduW8YgL3rVmS/Ov7zCAYRy9bYwgk+Mnyx0LUO3tjo/Dn5F/kqtRW29D
uhpFIFsq9/VkYc/3Kp0kryq9DTm5oKUOBxVLgl77gaah0R1Btm2uOJjGY3SsKQA+
tS47MTWkSkw5AF4UVOysPcYIKnF8Y434C41S9nQv3nu1gRzxnTh8SzU0veA61HKk
bcPCjCLS63UdVBlf1E2GvvBvOxBh8uH1uXNuMfoLZEWLdaTeVFo21sDrdjYPMU3M
YuSVLpArCqjii8usgfbvqflckUlLNtNXmV9IoRGT0OdevSllCMRB
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:32 2025 by rpki-client on console.sobornost.net