Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/0SkvR52lGQOt5N9oqjpwd6fbgaI.roa
File: 0SkvR52lGQOt5N9oqjpwd6fbgaI.roa (raw, json)
Hash identifier: 05xIKl6GLqTg/stNteMbaiA9fWk3Ullji53zBA+UBE4=
Subject key identifier: D1:29:2F:47:9D:A5:19:03:AD:E4:DF:68:AA:3A:70:77:A7:DB:81:A2
Certificate issuer: /CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
Certificate serial: 0189EDB487E83874C1C1C8CFF3D2F89DA28A
Authority key identifier: F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/0SkvR52lGQOt5N9oqjpwd6fbgaI.roa
Signing time: Sun 13 Aug 2023 07:02:58 +0000
ROA not before: Sun 13 Aug 2023 07:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 109.122.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ed:b4:87:e8:38:74:c1:c1:c8:cf:f3:d2:f8:9d:a2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
Validity
Not Before: Aug 13 07:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1292f479da51903ade4df68aa3a7077a7db81a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:40:e1:e5:f4:2d:1d:be:46:d5:ec:b2:cf:
8c:a9:86:39:d9:5a:51:3f:7c:9c:ab:a0:fe:b7:6a:
45:01:fd:1a:cc:4c:2a:b3:11:74:4c:b0:51:91:c7:
71:39:e6:5d:75:ac:5e:e6:29:3a:c7:be:25:a2:b7:
e2:bb:55:67:87:e2:2f:a4:b5:71:12:b1:2f:79:02:
87:bf:a3:7b:64:ea:ae:51:e3:aa:25:c5:1d:d7:80:
94:40:33:a6:9e:56:c1:b1:4a:78:45:73:4f:a7:4f:
b8:a0:70:cc:33:f2:74:8d:c7:0d:17:95:92:32:fb:
ff:fe:57:35:7c:2b:09:24:68:6a:06:6d:4f:03:99:
d8:b1:65:da:2c:74:4f:9e:1b:1f:1d:6e:8f:93:16:
6e:34:23:50:22:40:23:3a:d3:8c:32:3d:d5:a1:f6:
9b:46:91:51:3e:1c:e3:44:80:50:34:ba:b1:61:c9:
de:b7:74:5b:d6:3d:3b:3c:44:af:b9:44:b2:ba:fd:
9c:0c:98:07:1b:39:16:fe:c3:5e:6b:32:5b:d6:b1:
df:79:03:ef:d8:8f:0f:aa:41:d4:72:a1:e6:35:ba:
6d:86:81:24:6c:58:4d:ae:3d:09:88:dc:38:9a:39:
c7:8d:59:e7:3f:29:c1:be:3c:4b:67:e9:46:e3:35:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:29:2F:47:9D:A5:19:03:AD:E4:DF:68:AA:3A:70:77:A7:DB:81:A2
X509v3 Authority Key Identifier:
keyid:F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/0SkvR52lGQOt5N9oqjpwd6fbgaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/9OLptfuWen09eND7uTDAgOydkeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.56.0/21
Signature Algorithm: sha256WithRSAEncryption
57:52:99:c2:54:f7:02:f2:75:c5:87:43:bd:94:8b:cc:33:47:
02:1d:11:b2:f5:31:07:a2:46:e1:d6:b9:43:30:8b:43:03:2e:
31:a3:ad:5f:e9:db:fd:4b:7c:e3:c0:19:61:5e:82:2f:dc:1b:
48:38:e0:dc:44:8f:bf:51:58:a7:9b:ef:e5:75:c3:ec:4f:58:
f4:8d:7a:e8:18:2a:7b:dc:71:f2:86:07:e0:84:70:c7:54:3b:
27:ae:98:c7:ce:b2:25:6b:b8:b3:29:2b:d0:f9:11:10:ce:22:
ef:3c:b4:de:fd:2f:90:79:19:b5:8e:60:cd:bb:9f:b6:aa:06:
a5:de:03:d8:be:d0:52:f1:ac:b1:58:4f:e6:55:e6:3e:9b:a1:
ba:4b:70:4a:34:4b:02:cb:d1:65:ea:1e:4b:5f:75:a1:3c:93:
d1:4b:ea:ca:89:18:cc:37:ee:ee:f0:96:26:80:43:b3:04:db:
1e:d9:c3:d7:0c:c2:f3:ac:97:80:df:99:ba:68:79:51:d5:94:
45:72:e0:2e:86:58:2e:f9:0d:12:9c:08:9a:66:be:83:82:b9:
13:98:44:a8:29:06:cb:ce:fe:e7:9e:6f:67:2e:b5:41:61:6a:
17:27:f5:f1:c9:89:58:4d:98:bf:a0:ba:3d:c6:e9:2e:4e:a7:
47:61:61:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:25 2024 by rpki-client on console-ams.rpki-client.org