Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/DDmz8hK605DHcm6lWajxYQQwuGg.roa
File: DDmz8hK605DHcm6lWajxYQQwuGg.roa (raw, json)
Hash identifier: +T7KDt2p3t3T4Y2C59553r8ExEYsaXeL+7rsm5IQKXg=
Subject key identifier: 0C:39:B3:F2:12:BA:D3:90:C7:72:6E:A5:59:A8:F1:61:04:30:B8:68
Certificate issuer: /CN=c6f2ab2dd515aa3ec24a89b3dd5733f62c422d1c
Certificate serial: 9FA7E3
Authority key identifier: C6:F2:AB:2D:D5:15:AA:3E:C2:4A:89:B3:DD:57:33:F6:2C:42:2D:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvKrLdUVqj7CSomz3Vcz9ixCLRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/DDmz8hK605DHcm6lWajxYQQwuGg.roa
Signing time: Sat 01 Jan 2022 00:58:21 +0000
ROA not before: Sat 01 Jan 2022 00:58:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48031
IP address blocks: 109.107.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10463203 (0x9fa7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f2ab2dd515aa3ec24a89b3dd5733f62c422d1c
Validity
Not Before: Jan 1 00:58:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c39b3f212bad390c7726ea559a8f1610430b868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:aa:48:f6:cb:e6:e6:30:f5:3f:0a:e2:0e:
ce:ae:4d:2a:72:bf:84:c2:e2:53:4f:36:7e:fd:bb:
51:02:30:d4:77:dd:26:b2:e6:ab:56:4b:bb:d3:ef:
0a:16:56:95:01:5c:df:75:37:86:96:e8:74:02:4e:
b2:a3:ec:dd:7a:03:73:30:fc:de:cd:5b:d4:e3:e1:
46:67:21:50:f9:ea:6f:90:b4:0c:1b:6d:cd:21:bc:
d2:3c:53:1e:f1:31:d7:d4:31:bd:4a:d0:f5:e4:28:
78:f9:16:83:96:a2:a2:0c:0f:ea:5a:22:ec:dc:bf:
a7:24:47:ee:d7:cb:f4:55:a3:99:60:7a:9a:6c:37:
d2:6c:78:15:84:d5:fc:b8:a6:2a:92:ca:ad:40:9e:
1d:33:c6:a7:77:9c:6d:fe:cf:14:a6:e3:f5:8e:50:
0c:80:27:49:9f:e0:d5:d7:51:32:ab:f4:03:c8:36:
6c:1e:67:46:62:da:d9:6f:ca:f5:c9:61:a0:4e:ab:
c4:6b:d8:1f:89:a4:f1:f0:2e:10:46:7d:d0:3b:b8:
18:6d:c2:3b:79:27:84:17:92:e3:25:4e:12:59:e9:
6b:f9:5a:99:ed:e9:0f:e1:74:74:53:f7:63:13:01:
0a:b3:b2:d4:24:38:4d:56:4b:bb:06:55:76:0d:02:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:39:B3:F2:12:BA:D3:90:C7:72:6E:A5:59:A8:F1:61:04:30:B8:68
X509v3 Authority Key Identifier:
keyid:C6:F2:AB:2D:D5:15:AA:3E:C2:4A:89:B3:DD:57:33:F6:2C:42:2D:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvKrLdUVqj7CSomz3Vcz9ixCLRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/DDmz8hK605DHcm6lWajxYQQwuGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/xvKrLdUVqj7CSomz3Vcz9ixCLRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.136.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:df:ce:c6:56:e4:37:b7:d8:9e:fc:73:9b:3e:43:4a:56:27:
1a:d0:69:55:0b:c3:09:de:84:46:96:2b:1f:59:84:d7:ee:75:
7a:4c:be:12:fb:dd:5a:93:e3:8b:4c:39:04:50:e2:f1:45:0c:
56:db:ae:ef:39:7a:43:86:d4:fd:7e:9d:72:3a:a0:e9:6b:4e:
a4:2a:45:6a:ce:df:a4:55:24:1a:be:58:50:3b:ee:2a:6f:0b:
ac:83:d6:e0:73:b1:6c:dd:5b:0c:cd:fd:ab:59:2b:c2:d0:b0:
a8:eb:f0:3f:e1:b1:8f:b2:b7:51:23:b8:96:a4:04:91:c4:fb:
e9:b3:e6:5e:33:41:43:da:8c:4b:b9:0a:1c:89:fb:52:7d:6c:
a2:d6:08:b3:97:38:cd:8a:8e:7c:01:83:b5:e7:d3:18:eb:9f:
e8:e0:09:11:83:2b:f1:0d:97:c0:04:22:e4:d5:48:32:89:9e:
92:a0:d7:77:de:ee:b2:8d:82:97:0d:3a:ed:4e:06:d0:31:4e:
c4:e7:48:d0:14:7c:99:9f:9a:2a:f6:7a:8f:1c:f8:90:9e:92:
64:2a:a7:e2:25:1e:c2:88:c6:8e:6a:5b:59:0a:d2:11:1c:0c:
f1:1e:e8:f8:cc:23:7f:32:2e:a0:2c:1f:65:46:59:67:7b:28:
79:d6:cc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:50 2024 by rpki-client on console-fra.rpki-client.org