Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/342db7-350f-4014-bf70-7afe04f2670f/1/tCHnp2Wpx064FftWRHAMcHmpXTg.roa
File: tCHnp2Wpx064FftWRHAMcHmpXTg.roa (raw, json)
Hash identifier: GbQvd6B76d+KX75nEzqNQGk/3z1oLHlw7v3D+4LmMag=
Subject key identifier: B4:21:E7:A7:65:A9:C7:4E:B8:15:FB:56:44:70:0C:70:79:A9:5D:38
Certificate issuer: /CN=604e21f91e41ce0994a15e2c36babf1953e7278a
Certificate serial: 01067742
Authority key identifier: 60:4E:21:F9:1E:41:CE:09:94:A1:5E:2C:36:BA:BF:19:53:E7:27:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE4h-R5BzgmUoV4sNrq_GVPnJ4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/342db7-350f-4014-bf70-7afe04f2670f/1/tCHnp2Wpx064FftWRHAMcHmpXTg.roa
Signing time: Sat 01 Jan 2022 13:01:28 +0000
ROA not before: Sat 01 Jan 2022 13:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56971
IP address blocks: 109.205.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17200962 (0x1067742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604e21f91e41ce0994a15e2c36babf1953e7278a
Validity
Not Before: Jan 1 13:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b421e7a765a9c74eb815fb5644700c7079a95d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e2:a8:d4:86:55:98:0f:51:84:48:37:b5:e3:
36:41:b3:a5:c1:1c:67:e6:36:d8:d0:39:f1:c4:f6:
34:fb:df:22:fa:0c:ad:ad:7a:81:2d:f6:20:96:00:
47:a0:46:3f:92:b6:01:0a:08:c2:36:38:ae:ab:28:
75:61:da:77:92:32:df:7d:c2:d0:18:bf:df:dd:e2:
dd:49:19:9b:d3:e4:91:82:6a:7e:0e:7c:3d:42:9d:
80:4b:d8:40:c5:a8:d2:03:6c:35:67:7d:60:12:6f:
ca:33:02:a9:29:e5:97:26:64:55:12:b8:16:06:92:
1b:95:85:10:55:6c:41:a3:62:b9:d0:24:5a:e2:17:
0f:d2:35:62:6a:a8:fb:82:d4:91:8b:72:24:7c:30:
ad:d5:1f:57:38:33:21:9f:1c:40:93:d1:6c:8a:07:
2a:19:7c:f0:62:6a:bb:b8:57:6c:18:e3:2a:b5:ca:
74:2f:0c:77:67:08:94:fd:c0:1b:99:d4:90:f2:6a:
e1:ec:09:3b:f7:94:da:c8:05:73:0e:4e:65:05:57:
78:57:13:98:bd:41:b4:4b:bc:c2:b9:df:30:d2:a1:
bc:cd:44:0b:f1:e8:b2:14:fd:a2:fc:39:61:bd:2f:
97:1b:99:2c:93:75:6c:07:bd:d2:8d:73:68:5a:3d:
97:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:21:E7:A7:65:A9:C7:4E:B8:15:FB:56:44:70:0C:70:79:A9:5D:38
X509v3 Authority Key Identifier:
keyid:60:4E:21:F9:1E:41:CE:09:94:A1:5E:2C:36:BA:BF:19:53:E7:27:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE4h-R5BzgmUoV4sNrq_GVPnJ4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/342db7-350f-4014-bf70-7afe04f2670f/1/tCHnp2Wpx064FftWRHAMcHmpXTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/342db7-350f-4014-bf70-7afe04f2670f/1/YE4h-R5BzgmUoV4sNrq_GVPnJ4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.56.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ce:b2:eb:fa:7f:10:3e:0b:5f:4a:dd:d0:c1:26:f0:38:3b:
5d:39:20:62:d3:fa:d8:fd:c2:81:86:2a:d1:44:9a:ef:f5:30:
c4:3e:1c:cf:f9:2b:e6:78:86:47:ac:c2:8f:12:9e:55:31:84:
87:7b:37:eb:1c:d8:9f:08:eb:87:d9:5b:f3:88:8f:71:8e:29:
52:9a:b6:53:6e:b3:b4:96:f1:2d:a7:88:1c:fe:74:f5:5c:7f:
f6:99:e2:58:c9:0e:20:10:ea:1a:b9:2f:ee:9c:a2:62:51:18:
99:c9:84:b0:c6:ca:7a:3b:8b:dd:ae:f0:64:1e:52:29:d2:c3:
66:88:f4:5c:14:59:2f:5c:de:9d:4d:76:8b:46:03:97:9a:23:
28:a8:1a:55:6a:9e:2b:48:74:74:94:09:e6:bd:23:bc:14:4f:
0f:9c:57:1d:21:f1:4c:5b:8d:4e:c4:c7:ff:30:aa:c4:e3:14:
a2:ed:7f:78:4d:3f:3a:cc:f1:86:e1:0a:a9:d6:c0:29:ab:b3:
42:45:d3:c4:22:e5:8b:43:b3:e0:ff:05:54:53:34:fa:fe:62:
b0:59:4e:09:49:fb:fa:4d:11:71:1f:64:2f:8f:29:f8:a8:31:
f0:ba:d4:a6:95:af:a0:9f:00:b1:56:4c:4c:16:96:cb:c3:c1:
82:ae:77:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:18 2024 by rpki-client on console-ams.rpki-client.org