Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/jkAb7ikhY4AWK_xs1vyKB21lNis.roa
File: jkAb7ikhY4AWK_xs1vyKB21lNis.roa (raw, json)
Hash identifier: pFvi8mX+tWFP90ltYARvlxpsGd0XLLn6383nZ2CR52U=
Subject key identifier: 8E:40:1B:EE:29:21:63:80:16:2B:FC:6C:D6:FC:8A:07:6D:65:36:2B
Certificate issuer: /CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Certificate serial: 01887165BB3264CAED43CECFB769A2262A43
Authority key identifier: C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/jkAb7ikhY4AWK_xs1vyKB21lNis.roa
Signing time: Wed 31 May 2023 10:41:12 +0000
ROA not before: Wed 31 May 2023 10:41:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 109.111.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:65:bb:32:64:ca:ed:43:ce:cf:b7:69:a2:26:2a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Validity
Not Before: May 31 10:41:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e401bee29216380162bfc6cd6fc8a076d65362b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:36:85:78:53:7a:0b:83:89:49:04:ee:ab:3c:
b6:99:d4:5d:2b:43:3b:e6:7a:88:bb:00:68:2c:df:
a5:e7:8d:ef:a2:07:0d:4e:a3:5a:0b:4e:1a:7d:ee:
cb:dc:ee:41:5e:83:37:de:71:84:00:02:4e:38:db:
ab:e7:31:e3:7c:36:7d:72:4d:82:5d:04:c4:49:61:
86:7d:aa:29:75:84:a1:77:e9:7c:69:a5:81:34:01:
13:c8:e3:68:f7:0f:0b:02:f9:c7:0c:b9:17:f9:22:
cb:08:d1:96:aa:1f:fa:3f:01:f7:d7:96:1a:93:c8:
71:cc:7b:48:b0:0c:fd:34:da:9d:93:ad:29:76:24:
a7:7b:1c:ac:05:73:bc:eb:27:2a:b8:21:42:b9:5e:
9d:0c:93:7a:6c:7b:42:b1:0b:b1:83:04:0e:a2:81:
a0:bd:6b:c4:dc:5d:09:80:b2:17:7b:0d:31:60:27:
e7:f6:42:6e:a0:d9:71:dd:7b:4f:54:ee:e2:52:d3:
62:b4:82:f4:ee:0d:e5:ca:8b:0d:e8:85:fd:34:e3:
ad:e0:78:44:3d:e7:81:bc:6f:d7:c4:31:75:49:95:
b6:a8:4e:fc:f8:04:2b:bd:33:41:89:3a:e5:13:1a:
8c:a0:4f:56:54:68:5d:53:41:e1:63:18:50:e0:db:
c3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:40:1B:EE:29:21:63:80:16:2B:FC:6C:D6:FC:8A:07:6D:65:36:2B
X509v3 Authority Key Identifier:
keyid:C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/jkAb7ikhY4AWK_xs1vyKB21lNis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/wsO16XxGqTvDo1zHEFXE8N_GxFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.245.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:54:e2:d8:a3:8a:0d:1a:27:7f:3b:e9:89:8c:13:b1:5f:6c:
a1:e2:7f:8e:c1:5f:59:2d:9a:78:b1:41:19:0d:b0:aa:fa:b9:
f8:0d:24:a2:81:b6:85:05:55:56:20:21:54:fa:13:8c:5a:86:
27:c5:f1:27:5d:c3:0d:e3:f3:77:4f:06:4e:c3:bf:85:07:6f:
40:3c:e7:d3:cd:85:3f:8c:94:5f:26:c9:df:c5:73:df:a6:00:
19:af:5c:df:1a:c9:23:bd:b1:d4:f0:93:40:30:f3:03:62:5e:
da:93:3c:fe:7a:da:55:4f:be:f2:9e:2f:f8:52:02:d4:03:6f:
cf:cb:eb:e9:b7:50:a1:07:27:ee:fb:a7:30:e8:4a:42:65:b6:
01:a6:e4:1b:b8:36:b5:74:7c:4e:47:27:9c:d0:3d:fc:ba:5e:
39:83:48:40:e9:7c:e2:87:9a:82:e2:b0:ce:c1:80:8f:9f:b9:
4f:17:94:99:31:ed:f1:0d:4e:db:cf:05:3b:b2:69:be:95:3c:
8f:c5:17:ff:20:b5:18:48:6c:a3:e6:39:c3:cd:23:76:26:34:
83:fa:6d:cf:44:01:a7:49:40:90:48:57:a1:42:c0:92:39:d0:
c5:8f:8c:fb:7e:07:8f:b4:f4:d0:e2:01:6e:41:0b:bb:58:93:
43:48:eb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org