Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/D0SM7svQIwgtTWtBXQRfVaYEWCM.roa
File: D0SM7svQIwgtTWtBXQRfVaYEWCM.roa (raw, json)
Hash identifier: 0gzyVGki8KAciWCmOf7f1a5tlOgoH/nOkPBzCHojuSo=
Subject key identifier: 0F:44:8C:EE:CB:D0:23:08:2D:4D:6B:41:5D:04:5F:55:A6:04:58:23
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 0194258F2E6D5BF3E0B534BA46A9AC40FCA0
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/D0SM7svQIwgtTWtBXQRfVaYEWCM.roa
Signing time: Thu 02 Jan 2025 05:48:48 +0000
ROA not before: Thu 02 Jan 2025 05:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200724
IP address blocks: 109.121.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:2e:6d:5b:f3:e0:b5:34:ba:46:a9:ac:40:fc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Jan 2 05:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f448ceecbd023082d4d6b415d045f55a6045823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:b7:d8:6f:05:36:50:57:3c:d2:00:de:c2:
5b:ad:ef:bf:9a:32:a7:fe:cc:4c:3e:1f:68:21:f8:
bb:e7:17:e4:5e:8a:17:c2:0f:7f:6a:d2:96:c2:2a:
eb:ab:f7:6c:73:5e:ea:00:ee:b6:85:4a:a4:2a:8d:
c6:3b:ca:71:7c:b1:1c:5a:aa:2b:f6:5e:a9:b6:59:
35:44:4c:8d:31:81:4b:14:ce:e7:95:2d:f1:84:4f:
01:cc:15:19:2e:e5:85:96:f4:84:77:6b:37:3f:04:
bc:e8:b3:0e:87:d3:43:1b:07:a2:e1:18:9e:24:1b:
15:af:a3:40:56:07:c5:c8:d3:d6:28:e5:2a:c3:84:
eb:66:65:c8:aa:a5:ce:01:da:9f:4e:46:18:1d:8d:
b8:cc:17:7a:5f:14:e7:89:dc:b9:61:68:74:2e:bb:
ae:47:f4:43:16:d6:4e:25:e3:54:c6:6f:d6:a6:d5:
d3:61:12:08:3c:79:cb:b5:1f:8c:14:27:28:c3:9a:
64:a3:39:c1:37:b9:d5:15:60:8f:ca:70:48:34:31:
77:ea:79:9c:46:85:90:f9:ef:7c:85:fa:7c:af:71:
e4:9a:9e:8e:91:86:6e:55:2e:b3:01:6b:2f:1c:88:
17:7b:60:ea:a7:26:74:14:f6:9a:9f:55:4e:d3:c2:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:44:8C:EE:CB:D0:23:08:2D:4D:6B:41:5D:04:5F:55:A6:04:58:23
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/D0SM7svQIwgtTWtBXQRfVaYEWCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.127.0/24
Signature Algorithm: sha256WithRSAEncryption
70:52:7c:46:d8:6f:b9:3a:2c:11:ea:a4:e5:1f:da:dc:e9:6a:
8a:c5:0d:a7:e1:08:3c:b9:30:b8:d8:92:e7:1e:1b:e7:90:c2:
a2:72:b7:9c:3d:47:56:ea:0e:c9:d3:0e:c9:fa:cb:27:bb:d0:
a4:2c:31:82:ef:51:10:cf:07:30:20:09:75:5c:dd:63:aa:a1:
7b:1d:03:78:3a:5f:14:b1:6d:0e:3f:9c:05:67:50:26:82:40:
c9:da:f1:8b:0f:85:a9:3a:2b:aa:67:ae:19:94:03:63:ef:74:
b8:f0:c6:f7:8b:84:47:b7:99:38:39:38:54:49:b3:04:fc:d5:
ff:33:87:e1:dd:81:a6:8d:81:65:06:66:26:38:81:1b:e2:63:
e8:74:ce:76:72:74:0d:e2:7b:ee:58:04:b0:5a:a2:d8:c1:3a:
3c:62:02:49:64:d1:59:43:8d:34:1b:29:12:b6:32:d7:5a:c8:
56:01:7c:2e:51:ed:c6:a3:0f:6f:6c:b0:44:7f:fb:07:79:6f:
43:0a:3c:cf:98:1a:26:96:e7:21:e8:93:3e:f8:c9:a3:45:43:
7d:d5:5c:da:39:d3:a1:88:11:cd:3d:b6:42:dd:93:fe:eb:7e:
0c:dd:47:ba:ee:40:05:a8:0c:e6:ad:23:0a:6c:25:8c:91:07:
3a:ab:7b:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljy5tW/PgtTS6RqmsQPygMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMThkODdlOGI5ZmU5NzRiZWRmMDk3Zjg4OTQ4Mzk4ODYx
YWM0N2UwHhcNMjUwMTAyMDU0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjQ0OGNlZWNiZDAyMzA4MmQ0ZDZiNDE1ZDA0NWY1NWE2MDQ1ODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAree32G8FNlBXPNIA3sJbre+/mjKn
/sxMPh9oIfi75xfkXooXwg9/atKWwirrq/dsc17qAO62hUqkKo3GO8pxfLEcWqor
9l6ptlk1REyNMYFLFM7nlS3xhE8BzBUZLuWFlvSEd2s3PwS86LMOh9NDGwei4Rie
JBsVr6NAVgfFyNPWKOUqw4TrZmXIqqXOAdqfTkYYHY24zBd6XxTnidy5YWh0Lruu
R/RDFtZOJeNUxm/WptXTYRIIPHnLtR+MFCcow5pkoznBN7nVFWCPynBINDF36nmc
RoWQ+e98hfp8r3Hkmp6OkYZuVS6zAWsvHIgXe2DqpyZ0FPaan1VO08LgowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA9EjO7L0CMILU1rQV0EX1WmBFgjMB8GA1UdIwQY
MBaAFC0Y2H6Ln+l0vt8Jf4iUg5iGGsR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4Yjkt
Y2YwOTA3MTMzMjQxLzEvRDBTTTdzdlFJd2d0VFd0QlhRUmZWYVlFV0NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4YjktY2YwOTA3MTMzMjQx
LzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXl/MA0G
CSqGSIb3DQEBCwUAA4IBAQBwUnxG2G+5OiwR6qTlH9rc6WqKxQ2n4Qg8uTC42JLn
HhvnkMKicrecPUdW6g7J0w7J+ssnu9CkLDGC71EQzwcwIAl1XN1jqqF7HQN4Ol8U
sW0OP5wFZ1AmgkDJ2vGLD4WpOiuqZ64ZlANj73S48Mb3i4RHt5k4OThUSbME/NX/
M4fh3YGmjYFlBmYmOIEb4mPodM52cnQN4nvuWASwWqLYwTo8YgJJZNFZQ400GykS
tjLXWshWAXwuUe3Gow9vbLBEf/sHeW9DCjzPmBomluch6JM++MmjRUN91VzaOdOh
iBHNPbZC3ZP+634M3Ue67kAFqAzmrSMKbCWMkQc6q3sE
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:06 2025 by rpki-client on console.sobornost.net