Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/7wsTBZBl7GZWD2Iz0FrSwyRVJ04.roa
File: 7wsTBZBl7GZWD2Iz0FrSwyRVJ04.roa (raw, json)
Hash identifier: fwjNRmkTe8kVn/j52/EKp0E6JqljaPFPK9QiBQrrlK0=
Subject key identifier: EF:0B:13:05:90:65:EC:66:56:0F:62:33:D0:5A:D2:C3:24:55:27:4E
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 019427482C092ACC07299AFE3CA2DB54FC81
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/7wsTBZBl7GZWD2Iz0FrSwyRVJ04.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209362
IP address blocks: 109.121.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2c:09:2a:cc:07:29:9a:fe:3c:a2:db:54:fc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef0b13059065ec66560f6233d05ad2c32455274e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:57:42:57:18:01:31:18:59:3b:ab:d8:dd:
59:b4:8e:13:fd:0c:3f:f9:66:db:8d:5e:eb:15:7d:
77:0a:84:a9:51:13:01:ff:cf:67:89:bd:3d:8b:57:
a9:67:df:ca:ba:53:79:67:2c:c2:08:3f:fe:53:cb:
54:ec:fd:dd:74:d1:40:5a:d4:1a:ad:3e:03:9d:1e:
06:6b:fb:d7:4c:4f:f9:79:4e:79:af:65:02:e9:f3:
8c:48:81:7c:87:cd:4c:ed:a3:1b:6f:d5:a6:e2:65:
62:01:27:30:ee:81:9d:96:e2:98:ff:31:f9:86:6c:
17:bd:12:c4:e7:50:8d:c5:3a:f6:3c:a4:8b:06:0d:
ad:18:e8:9b:63:6c:37:b6:94:b0:5f:6a:7d:13:74:
6a:e0:e1:17:cd:be:26:15:23:16:22:29:64:3e:14:
c0:dc:51:dc:79:b4:29:6b:2a:76:af:ef:37:dd:2f:
12:7e:a0:b8:3f:03:ca:a4:1a:f4:82:29:9a:3e:4d:
10:cd:08:e8:df:59:9e:d4:80:d7:25:60:53:1a:29:
f1:35:52:48:1b:f2:58:4a:0e:59:01:14:35:73:ab:
c8:a9:09:a2:ea:83:02:35:cc:c3:b3:76:4f:4d:04:
7a:aa:85:cb:40:01:31:5f:32:42:14:fb:31:8c:27:
70:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0B:13:05:90:65:EC:66:56:0F:62:33:D0:5A:D2:C3:24:55:27:4E
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/7wsTBZBl7GZWD2Iz0FrSwyRVJ04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.128.0/24
Signature Algorithm: sha256WithRSAEncryption
48:af:71:7a:b3:02:98:20:9e:fb:d0:87:48:27:a1:d6:8a:7b:
1a:dd:c3:3f:df:67:f0:fd:3e:87:56:4e:5d:55:b1:42:fe:88:
ee:b7:74:41:d5:82:02:3c:85:59:f5:36:68:94:58:68:e9:c0:
93:8e:c8:9b:c0:99:d5:80:91:a1:e8:b6:c6:63:1d:ea:0e:09:
80:3a:ff:9c:c7:13:7e:91:03:52:7d:85:57:29:d3:5c:e5:bd:
43:3e:ac:c4:12:c7:2b:54:5b:ca:7e:cb:83:8d:d6:27:0a:a4:
b7:c0:82:85:00:0e:87:a9:02:8f:95:6a:95:4b:ee:93:b1:de:
a8:ad:3a:d8:e1:23:e0:2f:32:26:0c:71:9e:af:8f:9a:c9:88:
73:2a:2a:e1:c0:d3:7c:3d:a0:ff:02:b1:d4:2c:aa:9f:3c:17:
4e:c1:47:1c:13:f3:86:d2:a0:c2:39:6f:98:23:27:4e:a9:0e:
e8:19:a3:6f:31:53:a3:34:d5:a2:78:61:3d:b3:4d:c3:64:08:
93:37:90:29:f7:f9:6b:87:4e:dd:b6:2b:3b:b8:08:dc:20:59:
40:88:d7:2a:bc:ae:05:32:d7:0f:e1:d6:5b:65:36:bb:79:ca:
a3:24:9f:66:b2:11:12:3d:a8:2e:9d:7c:1a:34:6e:18:85:89:
47:a5:3a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:49 2025 by rpki-client on console.sobornost.net