Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/Ho8RhcxSbOJdOPzH8HIizAAxJxg.roa
File: Ho8RhcxSbOJdOPzH8HIizAAxJxg.roa (raw, json)
Hash identifier: 557TfcgRsKAJwLcxQLHEKXx7xDGBdfxG6U6EdsGqnR8=
Subject key identifier: 1E:8F:11:85:CC:52:6C:E2:5D:38:FC:C7:F0:72:22:CC:00:31:27:18
Certificate issuer: /CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Certificate serial: 01821B89AB2E4446D31D6F4904CE15558705
Authority key identifier: CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/Ho8RhcxSbOJdOPzH8HIizAAxJxg.roa
Signing time: Wed 20 Jul 2022 12:16:23 +0000
ROA not before: Wed 20 Jul 2022 12:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6903
IP address blocks: 109.120.145.0/24 maxlen: 24
109.120.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1b:89:ab:2e:44:46:d3:1d:6f:49:04:ce:15:55:87:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Validity
Not Before: Jul 20 12:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e8f1185cc526ce25d38fcc7f07222cc00312718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:a8:13:77:0d:e3:6f:77:41:4e:32:a3:c8:
24:ef:9e:5d:5a:8b:5a:05:bf:03:db:c7:2f:37:ea:
13:64:7c:fe:c1:a7:ae:82:5e:9f:23:43:1a:10:65:
7b:18:a8:83:db:18:61:27:02:fb:e3:bd:aa:4e:95:
fe:8e:39:ed:28:8c:4f:48:74:c3:34:f2:ce:cc:ab:
92:f0:82:6b:45:9b:74:6d:57:33:56:66:ec:ef:f2:
bb:0c:7f:f5:a9:18:59:cb:83:da:28:19:b0:40:0a:
a6:2a:e0:8f:13:02:ac:5f:80:fd:c4:47:66:ba:bb:
42:85:35:70:14:fb:7b:17:91:0a:1d:63:d6:34:83:
db:c0:76:82:f8:3b:91:94:d8:f6:39:52:ef:b4:66:
b4:84:cc:35:3a:e4:e3:ea:9a:90:17:29:26:76:8f:
56:ee:b9:4b:46:70:4c:5a:3f:78:8f:df:f8:9f:aa:
d0:bd:1a:72:ba:62:1f:a4:3c:b3:df:c9:2c:6e:64:
5b:14:fc:f9:ed:ce:45:a2:aa:f2:cd:2f:b8:db:b3:
9b:06:6d:2c:30:7a:16:e7:a7:4b:4f:82:7f:95:e2:
af:c7:18:90:c4:21:2a:8e:63:21:7b:36:20:41:7c:
ee:0c:c8:7e:e3:ec:67:ef:ee:59:df:91:7d:12:ff:
e0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8F:11:85:CC:52:6C:E2:5D:38:FC:C7:F0:72:22:CC:00:31:27:18
X509v3 Authority Key Identifier:
keyid:CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/Ho8RhcxSbOJdOPzH8HIizAAxJxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/zZIz9qiNCPZVnCIGsb_yZVsSIjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.120.145.0-109.120.146.255
Signature Algorithm: sha256WithRSAEncryption
5c:45:84:a7:11:be:a7:ac:93:ac:db:5c:ad:b3:e7:97:ad:47:
2f:55:c6:f2:d4:fc:d1:cd:75:f5:ec:3f:d1:a8:4a:a0:13:7d:
9c:f6:e5:39:ed:58:4d:e7:8c:34:7e:14:69:f7:29:ac:27:cc:
a3:54:a4:83:e5:3b:6a:42:bb:80:f5:f7:31:82:1c:b0:fe:dc:
80:bf:ae:5e:4b:5f:5f:58:65:11:33:54:3f:86:b2:94:0a:ea:
ad:30:28:04:34:72:b4:a4:22:91:07:7d:12:40:b6:27:1f:f6:
40:41:e6:12:86:00:74:45:ce:41:70:1c:c5:2e:e8:5d:1e:ef:
f3:7a:74:48:1a:00:f0:fb:ef:e2:37:6f:cf:1f:3d:c5:4d:f9:
05:8d:7d:9c:f3:dc:4a:72:1e:92:0f:3f:0e:2d:03:dc:02:74:
39:cd:be:26:39:cd:c7:83:07:38:62:80:d2:e0:85:2e:cc:a0:
27:fa:dc:28:3f:96:61:5e:76:82:3d:3d:d8:8c:99:7d:3b:73:
b3:4a:61:8e:fd:be:95:c5:fc:12:ca:b4:ce:86:fc:e2:fe:e7:
61:aa:90:52:a6:7a:22:7a:fe:63:9a:34:bc:3b:38:0b:00:f9:
a6:12:a3:8f:ea:db:37:d8:32:05:e9:62:6d:6e:64:61:fc:3e:
97:73:a3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:30 2024 by rpki-client on console-fra.rpki-client.org