Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/YatvcJDCUtthwWi_wHFA1lMIm40.roa
File: YatvcJDCUtthwWi_wHFA1lMIm40.roa (raw, json)
Hash identifier: dKojQxjkcy+nPXzPa08R358tPerhLXh0+j1cptDdt+o=
Subject key identifier: 61:AB:6F:70:90:C2:52:DB:61:C1:68:BF:C0:71:40:D6:53:08:9B:8D
Certificate issuer: /CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Certificate serial: 01856DE63A40EA0B116CE84057D4F38610BF
Authority key identifier: CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/YatvcJDCUtthwWi_wHFA1lMIm40.roa
Signing time: Sun 01 Jan 2023 15:14:42 +0000
ROA not before: Sun 01 Jan 2023 15:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6903
IP address blocks: 109.120.145.0/24 maxlen: 24
109.120.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:3a:40:ea:0b:11:6c:e8:40:57:d4:f3:86:10:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Validity
Not Before: Jan 1 15:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61ab6f7090c252db61c168bfc07140d653089b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:24:28:6e:47:cd:6f:ca:e0:0f:f5:10:a9:58:
65:ed:20:7a:f2:44:c1:16:3a:1e:c8:ec:33:53:db:
af:64:97:a1:d3:00:a1:d8:11:56:5e:82:4a:7c:b0:
10:f2:c7:76:29:9e:73:18:42:8c:00:92:1e:c7:d5:
ae:45:1a:0b:4b:b4:f3:2c:1d:98:c8:1b:ad:ff:41:
df:8a:73:a5:f1:fa:49:55:8d:de:e0:ad:9a:a1:8a:
89:e9:7b:99:01:e6:4c:84:88:8b:af:b1:22:0b:8d:
41:c6:58:2d:a2:39:72:94:24:d6:68:9d:85:31:00:
db:82:bc:fe:c8:f1:d0:75:dd:16:c6:16:91:2f:84:
e0:96:f5:03:d6:23:e2:79:96:34:9e:18:5e:b3:01:
ba:ce:9c:3e:b0:b9:07:a7:4a:5e:f1:20:01:dc:bc:
a9:fc:df:98:ba:c9:28:56:49:76:6c:3c:ae:19:c6:
2c:4c:d5:e9:59:a3:fb:5d:e3:e8:78:74:ee:d9:cb:
20:b5:af:02:48:14:e2:79:00:8f:90:85:f7:c2:da:
73:32:1d:2f:1b:b1:ba:fe:6c:20:1f:a5:fd:7e:22:
1e:9d:78:80:cb:de:59:51:90:8e:66:6d:1f:b0:84:
ba:df:06:6c:aa:66:9b:3b:be:ce:b4:4e:03:06:a9:
83:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AB:6F:70:90:C2:52:DB:61:C1:68:BF:C0:71:40:D6:53:08:9B:8D
X509v3 Authority Key Identifier:
keyid:CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/YatvcJDCUtthwWi_wHFA1lMIm40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/zZIz9qiNCPZVnCIGsb_yZVsSIjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.120.145.0-109.120.146.255
Signature Algorithm: sha256WithRSAEncryption
27:57:9a:4e:86:12:68:3f:60:4e:f1:26:6e:01:94:cc:e4:89:
39:d7:a4:a0:29:13:3c:85:fc:cc:b3:42:57:25:6d:b0:6c:2b:
d0:92:da:64:27:f5:ae:89:07:92:f2:1e:6c:5b:77:17:1a:5c:
e7:48:2b:eb:fe:ba:57:ae:ae:d2:9b:d9:3e:ca:0f:39:dc:ae:
bc:2c:4f:58:2b:40:1d:52:17:af:ef:1d:04:9f:ce:4a:ac:e8:
db:57:fc:76:6c:4d:ae:db:30:91:cd:fe:f2:31:ec:d4:6d:0d:
3f:27:04:ee:3e:d5:9e:ee:97:ce:57:f5:bb:80:2d:f5:06:f1:
1d:86:c4:27:f8:7d:b8:42:93:f3:89:aa:fc:83:b6:b5:ae:03:
44:11:a9:64:1a:8f:d6:bc:92:cd:6c:3c:c0:a8:a7:80:18:52:
cc:ff:d4:a4:67:9c:a1:44:b8:e7:a0:19:87:e6:2d:61:af:68:
25:ee:6b:21:4b:6f:e7:d9:fd:de:f4:e9:e7:6c:5a:45:a3:30:
6a:d8:48:34:b3:93:f8:bd:db:3c:6c:8f:98:8a:90:a4:b2:f3:
e6:c8:dd:b2:d1:21:6d:0b:16:39:ae:71:3e:85:09:af:5d:69:
04:32:77:93:1f:65:26:b3:de:c0:34:a5:7e:47:af:94:29:bd:
62:36:00:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:10 2024 by rpki-client on console-ams.rpki-client.org