Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/6z4rHWGcADRparknQzyj2yRTc7Q.roa
File: 6z4rHWGcADRparknQzyj2yRTc7Q.roa (raw, json)
Hash identifier: n4ymMhjOhAWzzuUuICwnt0DuPDacCxWlW+NEkRCL8OQ=
Subject key identifier: EB:3E:2B:1D:61:9C:00:34:69:6A:B9:27:43:3C:A3:DB:24:53:73:B4
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01941F8C43F5CB6EBB854052831E49D8852D
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/6z4rHWGcADRparknQzyj2yRTc7Q.roa
Signing time: Wed 01 Jan 2025 01:47:53 +0000
ROA not before: Wed 01 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3263
IP address blocks: 109.125.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:43:f5:cb:6e:bb:85:40:52:83:1e:49:d8:85:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb3e2b1d619c0034696ab927433ca3db245373b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:17:3f:da:d6:8c:70:97:a9:a8:29:01:b9:2a:
d6:8c:a9:70:43:a0:05:19:bb:0c:53:73:21:94:5c:
56:bc:e8:45:ca:53:fb:58:0e:b7:cf:17:f9:fb:4d:
93:a1:0d:fb:eb:a1:bd:31:cc:07:cd:fe:7c:07:3f:
23:e1:ec:3e:0a:49:38:52:e6:9d:bb:33:06:91:02:
98:28:a5:d3:7b:dd:18:67:10:11:69:c8:ae:51:f2:
8b:20:7b:42:f9:11:bf:cd:d9:fa:7b:65:17:78:d5:
a3:55:6b:0d:37:ca:15:7a:d7:42:d4:b4:85:1b:d3:
d8:5a:e3:00:3e:14:d3:94:fe:4b:f9:44:50:93:a3:
a4:e5:78:d1:ed:36:6c:81:17:c2:ef:c2:f8:d0:66:
bc:0f:bb:95:5a:40:54:ba:c1:51:2a:9a:7c:06:1c:
25:0e:64:da:b4:69:60:6e:4f:a2:2a:f6:e0:40:02:
65:57:5c:03:61:58:01:9c:10:26:a2:d6:b9:a0:c1:
79:1c:7a:16:54:c7:27:14:69:23:37:1b:0f:96:a9:
2c:30:04:e2:5f:e7:31:7f:82:75:84:96:67:bb:65:
25:32:c9:19:b8:3d:36:0c:84:a7:86:87:07:3f:90:
de:56:c1:ea:52:18:67:83:26:ac:82:5c:f2:fb:00:
f7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3E:2B:1D:61:9C:00:34:69:6A:B9:27:43:3C:A3:DB:24:53:73:B4
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/6z4rHWGcADRparknQzyj2yRTc7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.125.191.0/24
Signature Algorithm: sha256WithRSAEncryption
13:bf:9d:9e:91:49:d1:02:50:ea:18:2e:a9:d9:2c:ed:90:f1:
50:68:0a:19:c0:e4:59:d8:90:c0:8d:59:79:9e:ea:f0:51:ea:
92:af:6f:fd:28:bc:a5:89:cb:07:15:38:cf:41:97:51:fb:48:
57:f3:bd:61:95:64:ee:23:3e:9b:f2:c1:ca:c5:a7:69:04:d0:
c1:eb:dd:69:42:f9:ae:21:56:11:a9:72:65:a1:b9:74:b6:6e:
c9:10:cd:d4:90:3f:d2:d2:bc:61:13:15:14:d3:5b:58:b5:65:
ee:6b:b6:c3:54:4f:b5:b4:3c:05:05:01:c5:84:e6:16:3e:c3:
15:6a:8e:6b:e6:7f:5a:e3:96:4f:06:50:3d:61:82:b5:51:13:
ee:69:4d:be:33:38:a7:27:50:3c:9c:67:b5:7b:e3:a4:cb:80:
43:a5:6c:77:4f:fc:bc:b3:69:0d:31:2b:f4:9a:e9:31:d2:b3:
3c:d6:bf:e9:03:2e:89:0e:e6:60:2f:a1:d7:f2:7a:70:1d:87:
c3:e5:9e:a0:06:f6:94:90:c4:3f:af:2c:38:fa:1b:83:45:1a:
cc:13:94:8d:d5:ec:62:9a:42:14:eb:0b:cb:c1:69:a3:8d:96:
e0:69:77:ab:14:af:89:9f:bf:f8:06:e1:f9:34:6f:4d:e9:7f:
14:10:bc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net