Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d40ddf-de5b-4e20-923c-480279cfb22b/1/LBM99iSpx59CfY7sKhCXYGk7AjI.roa
File: LBM99iSpx59CfY7sKhCXYGk7AjI.roa (raw, json)
Hash identifier: 2E5RlsAbln8sgQQZzX+TLjp4R0nV2Zy3MLJxps9lq/w=
Subject key identifier: 2C:13:3D:F6:24:A9:C7:9F:42:7D:8E:EC:2A:10:97:60:69:3B:02:32
Certificate issuer: /CN=db02e1cbf81efd6264c58f88560235cc474154e8
Certificate serial: 17E16B14
Authority key identifier: DB:02:E1:CB:F8:1E:FD:62:64:C5:8F:88:56:02:35:CC:47:41:54:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wLhy_ge_WJkxY-IVgI1zEdBVOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d40ddf-de5b-4e20-923c-480279cfb22b/1/LBM99iSpx59CfY7sKhCXYGk7AjI.roa
Signing time: Thu 23 Jun 2022 09:39:24 +0000
ROA not before: Thu 23 Jun 2022 09:39:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15596
IP address blocks: 109.122.40.0/21 maxlen: 21
109.122.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400648980 (0x17e16b14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db02e1cbf81efd6264c58f88560235cc474154e8
Validity
Not Before: Jun 23 09:39:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c133df624a9c79f427d8eec2a109760693b0232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8a:37:af:8a:a7:e6:25:54:8d:e7:01:65:53:
ac:9b:54:9b:3b:13:a0:35:91:af:00:eb:ef:e0:5e:
2e:2d:53:2a:2a:2c:f9:05:46:70:ad:60:cb:57:a6:
72:28:74:ca:b2:40:a7:e0:c8:92:22:5a:b5:99:e6:
45:9a:71:6a:33:c6:f4:89:18:de:d4:0c:3c:2b:cd:
ef:e0:bf:a3:eb:b1:40:04:7c:3e:80:b9:e4:68:e9:
e6:78:d9:46:46:98:42:90:5a:5f:00:cd:9e:ba:75:
3c:a7:f5:c7:4c:2d:3f:8b:86:29:fd:67:c9:a5:21:
b9:11:c4:df:b0:66:94:59:e2:84:1b:d1:e5:fe:0f:
61:c5:35:bf:83:41:d0:56:83:65:15:1a:b2:db:ba:
9b:25:c2:1d:28:f5:ee:bf:60:1e:d4:9d:e0:9c:43:
18:8d:34:42:a2:5d:fc:c8:86:42:23:61:26:77:ae:
16:f1:a1:ae:10:8c:ac:27:29:73:43:fc:f8:46:23:
55:56:c5:bd:18:5a:41:9b:1b:ce:32:70:41:40:4d:
fe:f8:7f:45:95:e3:9c:44:3c:00:7b:f1:29:de:f5:
ef:06:8f:0f:ae:ef:23:60:78:1c:f9:b4:dd:b9:3e:
9c:92:5c:7a:34:3c:8c:a1:c1:32:8a:8e:d7:be:2d:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:3D:F6:24:A9:C7:9F:42:7D:8E:EC:2A:10:97:60:69:3B:02:32
X509v3 Authority Key Identifier:
keyid:DB:02:E1:CB:F8:1E:FD:62:64:C5:8F:88:56:02:35:CC:47:41:54:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wLhy_ge_WJkxY-IVgI1zEdBVOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d40ddf-de5b-4e20-923c-480279cfb22b/1/LBM99iSpx59CfY7sKhCXYGk7AjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d40ddf-de5b-4e20-923c-480279cfb22b/1/2wLhy_ge_WJkxY-IVgI1zEdBVOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.40.0-109.122.55.255
Signature Algorithm: sha256WithRSAEncryption
7c:83:81:61:0e:6a:0f:34:25:44:e4:1d:5f:bb:df:b5:f4:55:
b6:b6:43:a2:3e:63:b9:df:d9:3e:01:18:ec:ad:46:eb:15:d5:
5c:ca:c5:2a:6b:c2:77:d0:f9:de:f1:56:fa:6c:de:14:12:2d:
30:a8:f7:cc:32:2b:e2:54:d7:c9:97:3d:b0:ce:53:a7:64:3a:
f5:fd:6b:bf:1d:7c:3b:af:b7:da:ce:30:ee:c4:28:5f:99:aa:
e2:ec:d6:a0:56:ff:7b:15:34:3f:b6:f9:13:8c:f1:26:c3:0d:
76:fb:25:dc:99:f5:54:07:00:b7:fc:d9:52:43:38:17:fa:b1:
9e:1d:ae:6c:33:c9:48:43:e8:fe:13:a8:57:0b:1d:78:32:32:
a4:4e:55:1b:c6:d1:9d:59:f3:31:50:b5:28:ea:49:17:f6:c4:
60:d9:d5:c5:59:1f:44:59:ea:78:9b:04:cf:9d:ad:47:b9:0d:
ac:5a:75:ab:4b:b6:79:ab:b1:87:bb:36:7b:83:06:92:b9:3e:
9a:d6:31:e2:c2:f1:58:5c:a8:ad:7c:ec:9c:8b:81:2b:86:2e:
b5:81:93:f7:56:ec:e9:50:e5:db:65:03:84:5f:9d:2d:c0:b4:
95:3a:c1:eb:75:f2:35:af:6e:3c:9d:77:00:60:c1:f3:b8:04:
e4:d9:70:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:36 2023 by rpki-client on console-ams.rpki-client.org