Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/rJQH8M_OPU271UGjm2wxK0gzeLg.roa
File: rJQH8M_OPU271UGjm2wxK0gzeLg.roa (raw, json)
Hash identifier: N/ZRV4R2yCVU3LDYw3mzJrI+NJLwtUYMsQ2SFW+KCCI=
Subject key identifier: AC:94:07:F0:CF:CE:3D:4D:BB:D5:41:A3:9B:6C:31:2B:48:33:78:B8
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 0194274829EFA441C80FF4CA152ABCDD50A6
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/rJQH8M_OPU271UGjm2wxK0gzeLg.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41292
IP address blocks: 109.121.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:29:ef:a4:41:c8:0f:f4:ca:15:2a:bc:dd:50:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac9407f0cfce3d4dbbd541a39b6c312b483378b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:89:d8:8e:15:69:3f:75:8a:ba:54:45:86:
f6:51:30:6b:e4:75:6c:a2:b8:7c:af:eb:b3:c1:d6:
c3:ad:6a:1a:6f:6a:81:18:d3:0b:2c:8d:58:6d:f6:
7b:ec:62:c0:1a:27:cd:be:52:c6:79:17:53:b6:77:
d0:bc:34:85:b1:5e:17:c7:49:11:7e:98:65:8b:73:
c1:45:1f:5b:d7:f3:14:60:b8:ff:24:49:84:be:f6:
90:b4:67:56:a0:73:64:bb:11:db:4c:fb:f1:7a:bc:
75:ae:2b:25:b0:1d:35:31:c0:cc:b9:10:72:6d:97:
9a:f9:92:b0:c3:ac:b5:ec:76:f5:93:42:eb:04:92:
46:3f:b9:f7:50:fb:ab:21:71:9e:c6:1d:86:33:da:
57:0f:c5:d9:e7:c5:ec:13:f2:73:f3:7e:c8:f2:85:
75:1d:45:64:42:9d:bf:15:8e:5f:9c:c2:79:a9:1a:
01:cc:dd:57:c9:64:e3:93:7b:f8:2d:e8:e6:83:aa:
d4:32:99:d4:1a:1d:47:04:6a:d8:18:d9:b9:51:ff:
45:d0:56:7a:49:43:0e:05:aa:9a:4c:64:cf:44:08:
51:6b:3b:96:21:d5:40:52:86:e3:cc:3d:18:3a:a2:
b7:7a:2b:8d:b8:29:81:af:b6:c8:f2:bd:e0:16:72:
04:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:94:07:F0:CF:CE:3D:4D:BB:D5:41:A3:9B:6C:31:2B:48:33:78:B8
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/rJQH8M_OPU271UGjm2wxK0gzeLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.159.0/24
Signature Algorithm: sha256WithRSAEncryption
34:43:dd:eb:bd:3d:01:c8:5a:75:63:4e:03:01:90:84:c7:d0:
8e:05:4d:29:7a:1a:00:1d:b4:50:82:98:3d:2c:5a:3d:28:5e:
dc:97:48:60:cd:42:9d:08:0c:52:2f:17:2a:eb:7e:95:95:96:
98:92:12:1d:eb:ea:7a:91:a7:e8:62:99:6e:30:e7:5b:9e:b3:
09:40:41:a9:3a:67:47:5b:84:76:d6:8d:15:6c:03:8f:b7:7a:
9b:cc:8a:c9:be:3e:cd:ca:8f:e6:4f:c1:e1:c2:02:48:33:48:
43:01:55:69:d8:f6:eb:1a:4f:96:5b:11:ec:19:e3:23:73:23:
c4:63:fc:e0:b3:a9:46:7a:30:04:84:94:68:9e:62:26:99:f6:
b6:be:d8:c5:05:65:ca:0b:b3:cc:37:7c:36:7c:36:dc:17:d2:
0d:be:33:03:64:54:e9:65:cb:eb:a4:25:76:34:ca:9b:5b:ea:
13:50:2c:0c:cb:a5:34:c0:54:f3:a0:2e:29:ef:5d:e7:ea:e0:
b7:f3:37:47:20:34:f6:46:5a:ea:c0:95:f0:e1:80:82:9d:79:
0f:97:34:cd:fa:3d:37:83:7a:e5:83:eb:93:a0:4d:c6:89:44:
31:1b:36:e1:ea:50:2a:57:1a:f9:bd:13:b7:64:11:5d:8e:f7:
de:65:c3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:49 2025 by rpki-client on console.sobornost.net