Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/iEGkzbSnTAiBvW29ECwXK-mp4aU.roa
File: iEGkzbSnTAiBvW29ECwXK-mp4aU.roa (raw, json)
Hash identifier: QBeqWsRQlsMakHP3SY/atkM9qOa1qJfqSlzKnBL/9UM=
Subject key identifier: 88:41:A4:CD:B4:A7:4C:08:81:BD:6D:BD:10:2C:17:2B:E9:A9:E1:A5
Certificate issuer: /CN=7cac8d7f4b75170607bfcf8439c2e1d03a21410d
Certificate serial: 1B4DBC8E
Authority key identifier: 7C:AC:8D:7F:4B:75:17:06:07:BF:CF:84:39:C2:E1:D0:3A:21:41:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKyNf0t1FwYHv8-EOcLh0DohQQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/iEGkzbSnTAiBvW29ECwXK-mp4aU.roa
Signing time: Sat 01 Jan 2022 13:55:12 +0000
ROA not before: Sat 01 Jan 2022 13:55:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50456
IP address blocks: 109.234.224.0/24 maxlen: 24
109.234.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458079374 (0x1b4dbc8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cac8d7f4b75170607bfcf8439c2e1d03a21410d
Validity
Not Before: Jan 1 13:55:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8841a4cdb4a74c0881bd6dbd102c172be9a9e1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:e3:de:b3:7a:30:57:7e:b8:4a:cf:75:26:
56:6a:78:08:ce:68:6d:a7:cc:a2:e1:58:b4:35:d9:
7a:05:48:8b:3a:ff:e8:6c:5a:6c:8f:a9:99:1f:a6:
a7:b4:68:45:e8:4e:77:55:d1:6c:5b:27:04:b6:dc:
ba:db:15:62:84:72:ec:75:88:a0:cd:b1:50:35:40:
1c:ed:ad:21:14:c7:20:87:8f:f7:84:48:4c:85:4d:
00:bf:76:06:db:38:39:f8:5e:3c:c0:75:e3:09:03:
dd:fa:71:ab:af:86:cf:d3:19:ef:b5:f8:8e:6d:1b:
80:0f:8e:38:c7:f7:89:c0:49:6b:f7:a6:b5:67:fb:
47:3d:d9:5c:32:ba:61:21:25:00:40:a5:58:cc:ed:
2c:62:38:31:f9:2e:55:a2:af:f0:a5:75:3e:f9:f0:
0e:00:96:e1:1f:d9:e9:c6:6f:e4:65:c9:b0:57:5e:
1d:90:e3:17:58:b2:e1:9e:a0:91:3e:4f:e7:40:a7:
eb:f9:42:08:36:34:1f:02:e5:31:07:d0:27:81:fa:
69:dc:65:57:61:66:cb:88:78:cc:b2:96:f1:b2:2b:
fd:c8:b5:06:97:30:70:ea:db:38:58:42:fb:d2:4c:
db:66:b5:a0:08:27:4f:e5:be:9b:a5:2b:b0:1e:41:
7b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:41:A4:CD:B4:A7:4C:08:81:BD:6D:BD:10:2C:17:2B:E9:A9:E1:A5
X509v3 Authority Key Identifier:
keyid:7C:AC:8D:7F:4B:75:17:06:07:BF:CF:84:39:C2:E1:D0:3A:21:41:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKyNf0t1FwYHv8-EOcLh0DohQQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/iEGkzbSnTAiBvW29ECwXK-mp4aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/fKyNf0t1FwYHv8-EOcLh0DohQQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.224.0/21
Signature Algorithm: sha256WithRSAEncryption
61:d5:5c:d5:2b:20:01:aa:4f:a0:8d:99:e8:70:6c:f4:36:7c:
f5:94:2d:e5:48:3a:6f:29:09:b5:84:d5:fe:d8:64:2a:6c:d6:
3f:3b:df:62:6e:81:6d:f7:7f:05:2a:57:57:35:b9:c6:95:b0:
3f:a0:1e:55:7c:a4:d0:43:19:2e:bb:73:31:9e:ba:25:0f:93:
71:64:ab:14:b1:7f:83:ec:7a:e4:dc:77:8c:38:bb:c9:0b:66:
88:af:18:5c:b0:bc:16:76:ef:c2:27:9b:80:fa:79:15:4a:1e:
ff:34:46:42:ad:06:6b:a9:d1:39:3b:5b:00:9f:34:07:79:22:
4e:e1:32:7d:a8:c1:5b:9e:79:ca:bf:f7:b1:08:fc:ef:ff:0a:
85:d3:86:de:99:7f:25:5f:c9:a0:c6:dc:7d:d8:60:2b:88:a1:
12:d9:9a:1d:d3:05:bf:95:d7:06:e2:7c:8e:b7:cd:10:6d:c9:
dd:19:09:ef:fe:e0:0a:f5:12:7f:9a:a9:0d:bb:f8:f8:22:5a:
5d:73:0a:4d:d8:19:93:3b:d3:08:40:81:f3:33:82:cd:38:69:
c1:49:ba:0e:da:ce:59:ed:0e:a0:e5:ef:f2:fd:1d:3a:45:78:
a7:21:0f:4b:9f:e2:3b:aa:89:71:4d:05:b4:94:ba:64:ce:20:
e6:ff:2f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:18 2024 by rpki-client on console-ams.rpki-client.org