Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Qgnr5pBRl_rZGcPCmikTzbpdRhA.roa
File: Qgnr5pBRl_rZGcPCmikTzbpdRhA.roa (raw, json)
Hash identifier: CsJlJBJH3+6jV3tl9xVBuGfLlTLLS9kglg9jMQQ1KqQ=
Subject key identifier: 42:09:EB:E6:90:51:97:FA:D9:19:C3:C2:9A:29:13:CD:BA:5D:46:10
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01941F8C4A14BAD8F33BE22E82AF3D5084BE
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Qgnr5pBRl_rZGcPCmikTzbpdRhA.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50530
IP address blocks: 109.125.180.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4a:14:ba:d8:f3:3b:e2:2e:82:af:3d:50:84:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4209ebe6905197fad919c3c29a2913cdba5d4610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1a:43:a1:1c:f8:75:27:05:cc:b8:79:e0:c4:
50:84:bf:bd:f5:89:9f:ec:ec:f9:31:af:c1:15:85:
aa:2f:d8:64:64:42:46:22:d8:cc:10:82:76:cf:9a:
bd:b5:55:f4:b8:4c:9a:dc:7e:85:b4:a8:7d:eb:8c:
6f:16:7f:58:7a:c5:ff:3a:5e:bd:18:31:c7:aa:21:
10:d7:71:ff:b0:c2:19:36:1b:f2:63:8e:56:42:9f:
57:ea:bc:46:5b:6e:d3:14:f7:d9:c8:64:b2:ac:56:
4c:09:7b:d2:bb:2c:60:79:60:5f:d3:38:30:f4:a7:
00:e5:b4:82:a1:12:7a:a0:98:c6:42:14:c1:f9:87:
c2:26:79:10:d7:c7:21:64:cc:bb:6b:e8:fd:3e:ff:
36:29:3c:1d:75:b9:ad:2b:6f:f0:ef:69:6b:45:48:
60:51:4f:28:b0:57:a1:64:b2:f9:45:ce:b6:ee:1f:
11:97:0c:88:60:5a:db:61:9a:10:d0:3f:67:9f:27:
34:c8:01:ea:a5:0e:f1:9d:4c:43:eb:44:45:27:cd:
cd:d0:d5:e4:cf:19:a7:7a:9a:94:8d:74:fd:61:45:
74:0f:04:b8:c5:12:38:38:14:c3:73:08:57:b5:c3:
82:05:1f:c0:00:59:06:89:3d:bc:02:db:a1:f6:40:
7c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:09:EB:E6:90:51:97:FA:D9:19:C3:C2:9A:29:13:CD:BA:5D:46:10
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Qgnr5pBRl_rZGcPCmikTzbpdRhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.125.180.0/23
Signature Algorithm: sha256WithRSAEncryption
43:a5:d7:f5:f9:d5:72:02:ba:e8:45:cf:ea:34:43:c0:f5:35:
6d:08:17:4b:7d:e9:f8:5a:17:20:ae:58:f1:28:3d:08:bd:d8:
91:22:94:c5:cb:72:f0:50:d8:f0:e1:14:2b:a9:0e:79:80:27:
c2:7e:9e:78:d3:d6:2c:61:2b:5b:05:ba:ac:b7:85:43:a0:db:
5f:c2:f1:58:a3:b4:4a:3e:59:ff:06:be:20:b0:5a:89:5b:62:
8d:93:ee:27:4f:eb:ae:ca:68:a7:d2:ea:1f:73:ad:16:1d:31:
25:4c:7d:58:0f:2d:98:eb:fd:33:52:0e:5b:c2:90:39:a4:cd:
64:8b:f5:ba:a1:37:0b:80:c9:bc:5f:b2:6e:72:19:58:01:5b:
88:2e:5e:28:75:37:59:65:a1:10:07:f6:b0:4c:a7:e3:de:d1:
d2:82:e6:d7:52:14:0f:ed:a9:73:4d:f0:99:02:63:7b:3a:2b:
c7:8d:b2:32:8b:52:d1:cb:68:f0:c3:75:30:15:d1:a7:21:86:
95:a7:b2:9b:5d:fa:a6:fe:f4:8c:b6:70:b8:af:c0:78:f3:60:
2e:4f:c1:b6:ed:8c:45:bf:b3:b3:15:9b:3a:6c:95:7a:57:64:
49:18:63:87:e3:26:d7:17:26:c8:19:16:ab:0a:40:23:c9:6e:
db:a4:03:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net