Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/CfhTlGCxAucP6JNF_jNB2CMV6aw.roa
File: CfhTlGCxAucP6JNF_jNB2CMV6aw.roa (raw, json)
Hash identifier: nunw+AO3zJ4ncre7NB31NXp82GxCP5qVkWIoLwHaKPA=
Subject key identifier: 09:F8:53:94:60:B1:02:E7:0F:E8:93:45:FE:33:41:D8:23:15:E9:AC
Certificate issuer: /CN=273c2a39983bcd03551853447847c1e1861ec732
Certificate serial: 1534D50D
Authority key identifier: 27:3C:2A:39:98:3B:CD:03:55:18:53:44:78:47:C1:E1:86:1E:C7:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzwqOZg7zQNVGFNEeEfB4YYexzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/CfhTlGCxAucP6JNF_jNB2CMV6aw.roa
Signing time: Sat 01 Jan 2022 13:58:34 +0000
ROA not before: Sat 01 Jan 2022 13:58:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29238
IP address blocks: 79.106.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355783949 (0x1534d50d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=273c2a39983bcd03551853447847c1e1861ec732
Validity
Not Before: Jan 1 13:58:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09f8539460b102e70fe89345fe3341d82315e9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:85:f9:c1:f4:39:42:2b:77:9a:04:5e:3c:
d8:bf:ef:fb:34:a6:54:1f:88:39:c1:53:55:7e:7e:
b6:b4:c0:5e:cf:86:ae:cf:0f:c9:bd:ed:e8:1a:d1:
06:f8:4a:57:2d:11:3d:8b:fa:cd:40:33:ed:6b:32:
1b:3d:a1:05:e1:4d:6d:f3:3b:d3:c4:c7:72:c4:a8:
ac:a4:63:94:38:ac:ff:73:46:82:b5:b9:ab:3c:c6:
d1:af:e5:28:2a:b4:da:21:45:ca:64:89:41:31:8f:
2d:c0:31:f9:52:40:58:67:7a:99:2b:e0:00:df:93:
b4:79:be:56:31:8d:27:43:02:ea:6f:7d:61:4d:45:
68:f7:80:ab:ed:dd:56:05:14:a1:c1:8c:f3:46:1a:
36:7b:3f:61:f7:ff:a3:bd:1e:78:9b:7d:9b:0f:f2:
ee:32:46:f6:97:a9:9c:04:92:8a:58:93:19:f0:01:
6f:6f:bd:08:58:99:78:94:00:80:55:b1:3b:ac:ab:
f3:d1:d7:79:63:bf:a1:ad:22:52:69:49:38:35:e4:
fe:a6:63:3a:64:81:9a:f6:45:96:f3:23:17:b1:0f:
af:6b:68:d4:e4:f3:5d:0c:d1:1c:4f:dd:8b:c3:86:
f0:77:6d:31:c1:ad:65:1b:13:d4:c7:72:a0:9f:af:
55:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F8:53:94:60:B1:02:E7:0F:E8:93:45:FE:33:41:D8:23:15:E9:AC
X509v3 Authority Key Identifier:
keyid:27:3C:2A:39:98:3B:CD:03:55:18:53:44:78:47:C1:E1:86:1E:C7:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzwqOZg7zQNVGFNEeEfB4YYexzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/CfhTlGCxAucP6JNF_jNB2CMV6aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/JzwqOZg7zQNVGFNEeEfB4YYexzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.106.111.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:8c:0c:2f:92:75:9f:08:3e:1d:c7:81:d7:56:95:f6:e2:1e:
f1:19:d1:ee:3c:9e:4d:a4:21:92:5a:25:74:f1:6c:b8:4f:d0:
8f:21:c9:3f:98:f1:da:8d:6d:c1:49:0f:8d:c4:52:77:79:e0:
c6:e1:48:25:7b:66:9f:19:7c:89:bc:89:0f:11:fa:39:aa:7d:
b6:98:8a:9a:ff:3f:e3:38:8c:d9:f2:6a:95:19:7b:8f:8e:3c:
31:5c:48:d7:f0:b1:c6:28:23:a0:a0:cb:f1:5b:ae:53:62:9f:
a6:a4:4c:66:76:f8:5b:27:bd:ee:2e:1a:2d:30:6e:b3:72:d0:
d1:2b:05:26:60:54:d8:7c:35:b8:2b:2d:8d:8e:12:20:0f:67:
b0:98:cf:d9:d4:3d:24:b8:2e:d6:aa:91:bb:d9:9c:8f:d9:28:
35:91:83:aa:9e:b6:16:15:34:c1:24:28:02:be:25:6f:0c:c3:
44:55:5c:d5:a4:3d:94:6e:96:2e:17:11:db:1d:cf:af:ec:19:
da:cc:89:0c:95:df:fd:6e:d7:28:48:8a:08:f1:aa:5f:5b:80:
6f:ff:20:91:74:83:da:68:1a:e2:47:b3:fc:9c:9c:71:48:84:
8b:9e:76:a5:1c:b2:91:c7:01:64:58:3a:ba:9d:75:33:15:4b:
c0:86:d1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:37 2024 by rpki-client on console-ams.rpki-client.org